• Jarod Wilson's avatar
    bonding: support hardware encryption offload to slaves · 18cb261a
    Jarod Wilson authored
    Currently, this support is limited to active-backup mode, as I'm not sure
    about the feasilibity of mapping an xfrm_state's offload handle to
    multiple hardware devices simultaneously, and we rely on being able to
    pass some hints to both the xfrm and NIC driver about whether or not
    they're operating on a slave device.
    
    I've tested this atop an Intel x520 device (ixgbe) using libreswan in
    transport mode, succesfully achieving ~4.3Gbps throughput with netperf
    (more or less identical to throughput on a bare NIC in this system),
    as well as successful failover and recovery mid-netperf.
    
    v2: just use CONFIG_XFRM_OFFLOAD for wrapping, isolate more code with it
    
    CC: Jay Vosburgh <j.vosburgh@gmail.com>
    CC: Veaceslav Falico <vfalico@gmail.com>
    CC: Andy Gospodarek <andy@greyhouse.net>
    CC: "David S. Miller" <davem@davemloft.net>
    CC: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
    CC: Jakub Kicinski <kuba@kernel.org>
    CC: Steffen Klassert <steffen.klassert@secunet.com>
    CC: Herbert Xu <herbert@gondor.apana.org.au>
    CC: netdev@vger.kernel.org
    CC: intel-wired-lan@lists.osuosl.org
    Signed-off-by: default avatarJarod Wilson <jarod@redhat.com>
    Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
    18cb261a
bond_main.c 146 KB