> -----Original Message----- > From: Jason Gunthorpe [mailto:jguntho...@obsidianresearch.com] > Subject: Re: [for-next 4/6] net/mlx5: FPGA, Add basic support for Innova > > On Mon, May 29, 2017 at 04:09:06PM +0000, Ilan Tayari wrote: > > > > For IPSec, this is already in the kernel. > > > See this patchset: > > > http://www.mail-archive.com/netdev@vger.kernel.org/msg162876.html > > > > Sorry, I pointed at the RFC by mistake. > > > > This is the relevant pull request: > > https://patchwork.ozlabs.org/patch/752707/ > > This is connecting ipsec to a netdev, while Innova seems to be a
Jason, "network connected ipsec accelerator configured using IP packets." No. This is incorrect. Where did you get that from? It is an IPSec-capable NIC. See here for details: http://www.mellanox.com/page/products_dyn?product_family=249&mtag=programmable_network_adapters The driver we are intending to submit for it, interfaces with the mentioned API in the pull-request (Netdev xdo callbacks) So you configure it from userspace with regular IPSec 'ip xfrm state' commands or over netlink with your favorite IKE daemon. > > Those two things don't seem to be the same. > > Jason