Re: [PATCH net-next 0/8] net/mlx5e: Move IPSec policy check after decryption
From: patchwork-bot+netdevbpf
Date: Mon Feb 24 2025 - 21:30:19 EST
Hello:
This series was applied to netdev/net-next.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:
On Thu, 20 Feb 2025 23:39:50 +0200 you wrote:
> Hi,
>
> This series by Jianbo adds IPsec policy check after decryption.
>
> In current mlx5 driver, the policy check is done before decryption for
> IPSec crypto and packet offload. This series changes that order to
> make it consistent with the processing in kernel xfrm. Besides, RX
> state with UPSPEC selector is supported correctly after new steering
> table is added after decryption and before the policy check.
>
> [...]
Here is the summary with links:
- [net-next,1/8] net/mlx5e: Add helper function to update IPSec default destination
https://git.kernel.org/netdev/net-next/c/3400ae49cd1a
- [net-next,2/8] net/mlx5e: Change the destination of IPSec RX SA miss rule
https://git.kernel.org/netdev/net-next/c/20d5fdc8951a
- [net-next,3/8] net/mlx5e: Add correct match to check IPSec syndromes for switchdev mode
https://git.kernel.org/netdev/net-next/c/85e4a808af25
- [net-next,4/8] net/mlx5e: Move IPSec policy check after decryption
https://git.kernel.org/netdev/net-next/c/7d9e292ecd67
- [net-next,5/8] net/mlx5e: Skip IPSec RX policy check for crypto offload
https://git.kernel.org/netdev/net-next/c/aa2961e19ff6
- [net-next,6/8] net/mlx5e: Add num_reserved_entries param for ipsec_ft_create()
https://git.kernel.org/netdev/net-next/c/e20674a7e5b1
- [net-next,7/8] net/mlx5e: Add pass flow group for IPSec RX status table
https://git.kernel.org/netdev/net-next/c/78e77a41e401
- [net-next,8/8] net/mlx5e: Support RX xfrm state selector's UPSPEC for packet offload
https://git.kernel.org/netdev/net-next/c/c69046c3f2dc
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html