Hi Nelson 1. Can you tell what is the status of ixgbe – ipsec offload patch’s?
2. Are there any ‘numbers’ of performance tests? Ipsec in SW v.s. ipsec in HW ? 3. Where is the code for ipsec headers insertion/removal by SW ? is this done in ip-stack ? hooks ? Thanks You (and Don and Todd) and Best Regards Avi From: Fujinaka, Todd [mailto:todd.fujin...@intel.com] Sent: Tuesday, 02 January, 2018 10:54 PM To: Buchholz, Donald; Avi Cohen (A) Subject: RE: [linux.n...@intel.com] x540 / 82599 IPsec offload - Linux ixgbe driver We did not support IPsec offloads in Linux because the kernel maintainers didn’t trust any crypto implementation that they couldn’t audit and told us those patches wouldn’t be accepted. I don’t know if that’s changed. The implementation of IPsec offloads is being done by an Oracle engineer and I would suggest contacting him directly with your questions. Todd Fujinaka Software Application Engineer Datacenter Engineering Group Intel Corporation todd.fujin...@intel.com<mailto:todd.fujin...@intel.com> From: Buchholz, Donald Sent: Tuesday, January 2, 2018 11:15 AM To: Avi Cohen <avi.co...@huawei.com<mailto:avi.co...@huawei.com>> Subject: Re: [linux.n...@intel.com] x540 / 82599 IPsec offload - Linux ixgbe driver Hi Avi, We have not supported IPsec Offload in 'ixgbe' in the past due to lack of demand. However, your timing in this matter is perfect! Patches have been submitted to the intel-wired-lan list and are currently under review in the ixgbe development tree. We expect these to be in the linux-4.16 kernel. Patch series under review: -- http://patchwork.ozlabs.org/project/intel-wired-lan/list/?series=19548 Patch series in intel-wired-lan email list: -- https://lists.osuosl.org/pipermail/intel-wired-lan/Week-of-Mon-20171218/thread.html I am copying this reply to an internal engineering list so the development team is aware of your interest. Unfortunately this "linux.n...@intel.com"<mailto:linux.n...@intel.com> email address isn't well-monitored. Please use "e1000-devel@lists.sourceforge.net"<mailto:e1000-devel@lists.sourceforge.net> for any additional questions about the Linux drivers for any Intel (wired) Ethernet device. -- https://sourceforge.net/p/e1000/mailman/ Best Regards, - Don Buchholz - Network SW Engineer - Intel Corporation - DCG/CG/ND/SW Core/Open Source ________________________________ Date: Sun, 31 Dec 2017 14:54:54 +0000 From: "Avi Cohen (A)" <avi.co...@huawei.com><mailto:avi.co...@huawei.com> To: "linux.n...@intel.com"<mailto:linux.n...@intel.com> <linux.n...@intel.com><mailto:linux.n...@intel.com> Subject: x540 / 82599 IPsec offload - Linux ixgbe driver Hello all, I see in the datasheet of devices x540/82599 that it supports HW IPsec offload - but there is no support in ixgbe SW driver. Questions: 1. Why there is no support in ixgbe ? 2. From the datasheet I understand that TX packets send to HW should contain IPsec headers I think this should be handled in Linux ip-stack - is there any work done there ? 3. Is there other helpful documentation to implement SW for HW IPsec, available ? Thank you and bets regards Avi ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ E1000-devel mailing list E1000-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel® Ethernet, visit http://communities.intel.com/community/wired
