OSDN Git Service

net/mlx5: Configure MACsec steering for ingress RoCEv2 traffic
authorPatrisious Haddad <phaddad@nvidia.com>
Thu, 11 Aug 2022 03:09:18 +0000 (06:09 +0300)
committerLeon Romanovsky <leon@kernel.org>
Sun, 20 Aug 2023 09:35:24 +0000 (12:35 +0300)
commit8c14a2c7c96f1624ffb8406accd082b4aff36883
tree9266326550772c4413bb744d3f7d631f8a3cabcd
parent9b240d1094cba5ca4e1bf80ea9f6ef55e6961af9
net/mlx5: Configure MACsec steering for ingress RoCEv2 traffic

Add steering tables/rules to check if the decrypted traffic is RoCEv2,
if so copy reg_b_metadata to a temp reg and forward it to RDMA_RX domain.
The rules are added once the MACsec device is assigned an IP address
where we verify that the packet ip is for MACsec device and that the temp
reg has MACsec operation and a valid SCI inside.

Signed-off-by: Patrisious Haddad <phaddad@nvidia.com>
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c
drivers/net/ethernet/mellanox/mlx5/core/lib/macsec_fs.c