ACK: [SRU][J:linux-bluefield][PULL] Support IPsec full offload

[Tim Gardner]

On 9/8/23 2:03 AM, Tony Duan wrote:
> This pull request is for IPsec full offload in DPU. Most of the changes 
> are already in upstream. In this change, it contains 32 commits include 
> 4 reverts, 27 cherry-picks and 1 conflict resolve. Most of the commits 
> are clean cherry-picks. The conflicts are mainly focus on driver part 
> and netdev_***() related functions. I ignored driver change and keep 
> dev_***() unchanged.
> 
> BugLink: https://bugs.launchpad.net/bugs/2034578 
> <https://bugs.launchpad.net/bugs/2034578>
> 
> ----------------------------------------------------------------
> 
> The following changes since commit e0359e9ebd0d9c01b12185b803eb30783c42937a:
> 
>    UBUNTU: Ubuntu-bluefield-5.15.0-1023.25 (2023-08-22 18:15:20 +0200)
> 
> are available in the git repository at:
> 
> https://git.launchpad.net/~yifeid/ubuntu/+source/linux-bluefield 
> <https://git.launchpad.net/~yifeid/ubuntu/+source/linux-bluefield> 
> master-next-ipsec-full-offload
> 
> for you to fetch changes up to a9272649ca09afb0178dcccbf901ebe011a64cb2:
> 
>    UBUNTU: SAUCE: xfrm: fix conflict for netdev and tx stats (2023-09-06 
> 09:38:07 -0500)
> 
> ----------------------------------------------------------------
> 
> Edward Cree (1):
> 
>        netlink: add support for formatted extack messages
> 
> Leon Romanovsky (21):
> 
>        xfrm: delete not used number of external headers
> 
>        xfrm: rename xfrm_state_offload struct to allow reuse
> 
>        xfrm: store and rely on direction to construct offload flags
> 
>        xfrm: drop not needed flags variable in XFRM offload struct
> 
>        xfrm: Remove not-used total variable
> 
>        xfrm: add new packet offload flag
> 
>        xfrm: allow state packet offload mode
> 
>        xfrm: add an interface to offload policy
> 
>        xfrm: add TX datapath support for IPsec packet offload mode
> 
>        xfrm: speed-up lookup of HW policies
> 
>        xfrm: add support to HW update soft and hard limits
> 
>        xfrm: document IPsec packet offload mode
> 
>        xfrm: extend add policy callback to set failure reason
> 
>        xfrm: extend add state callback to set failure reason
> 
>        netlink: provide an ability to set default extack message
> 
>        xfrm: don't require advance ESN callback for packet offload
> 
>        xfrm: release all offloaded policy memory
> 
>        xfrm: add missed call to delete offloaded policies
> 
>        xfrm: Support UDP encapsulation in packet offload mode
> 
>        xfrm: delete offloaded policy
> 
>        xfrm: don't skip free of empty state in acquire policy
> 
> Raed Salem (2):
> 
>        xfrm: add new device offload acquire flag
> 
>        xfrm: copy_to_user_state fetch offloaded SA packets/bytes statistics
> 
> Sabrina Dubroca (3):
> 
>        xfrm: add extack support to xfrm_dev_state_add
> 
>        xfrm: add extack to verify_policy_type
> 
>        xfrm: propagate extack to all netlink doit handlers
> 
> Tony Duan (5):
> 
>        Revert "UBUNTU: SAUCE: net/xfrm: Fix XFRM flags validity check"
> 
>        Revert "UBUNTU: SAUCE: xfrm: Check if_id in xfrm full offload"
> 
>        Revert "UBUNTU: SAUCE: net/xfrm: Add support for xfrm full offload"
> 
>        Revert "UBUNTU: SAUCE: net/xfrm: IPsec full offload support for 
> lifetime limit"
> 
>        UBUNTU: SAUCE: xfrm: fix conflict for netdev and tx stats
> 
> Documentation/networking/xfrm_device.rst                         |  64 
> ++++++++++++++++++++++----
> 
> drivers/net/bonding/bond_main.c                                  |   8 ++--
> 
> drivers/net/ethernet/chelsio/cxgb4/cxgb4_main.c                  |   5 +-
> 
> drivers/net/ethernet/chelsio/inline_crypto/ch_ipsec/chcr_ipsec.c |  10 +++-
> 
> drivers/net/ethernet/intel/ixgbe/ixgbe_ipsec.c                   |  11 ++++-
> 
> drivers/net/ethernet/intel/ixgbevf/ipsec.c                       |   9 +++-
> 
> drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c         |   7 ++-
> 
> drivers/net/netdevsim/ipsec.c                                    |   8 +++-
> 
> include/linux/netdevice.h                                        |   6 ++-
> 
> include/linux/netlink.h                                          |  39 
> +++++++++++++++-
> 
> include/net/xfrm.h                                               |  99 
> +++++++++++++++++++++++++++++++++++----
> 
> include/uapi/linux/xfrm.h                                        |   7 ++-
> 
> net/bridge/br_switchdev.c                                        |  10 ++--
> 
> net/xfrm/xfrm_device.c                                           | 146 
> +++++++++++++++++++++++++++++++++++++++++++++++++---------
> 
> net/xfrm/xfrm_output.c                                           |  22 
> +++------
> 
> net/xfrm/xfrm_policy.c                                           | 127 
> +++++++++++++++++++++++++++++++++-----------------
> 
> net/xfrm/xfrm_state.c                                            | 215 
> +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++------------------
> 
> net/xfrm/xfrm_user.c                                             | 121 
> +++++++++++++++++++++++++++++++++---------------
> 
> 18 files changed, 708 insertions(+), 206 deletions(-)
> 
> 
Acked-by: Tim Gardner <tim.gardner at canonical.com>
-- 
-----------
Tim Gardner
Canonical, Inc