Re: [PATCH net] net/mlx5e: IPsec, don't match upper proto selectors in crypto offload TX

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <kuba@xxxxxxxxxx>:

On Wed, 11 Nov 2026 10:13:37 +0200 you wrote:
> From: Cosmin Ratiu <cratiu@xxxxxxxxxx>
> 
> The mentioned commit introduced support for upper protocol selectors
> (protocol & ports) to mlx5 IPsec offload. In crypto offload mode this
> causes offloaded TX SAs to stop matching traffic.
> 
> In tx_add_rule(), setup_fte_upper_proto_match() is called for all
> offload types and programs a match on the upper protocol (TCP/UDP) and
> ports. For crypto offload, setup_fte_esp() is then called and sets
> ip_protocol to ESP. The resulting rule requires both ESP as the IP
> protocol and TCP/UDP ports, which no packet can satisfy, so TX crypto
> offload silently stops working for such SAs.
> 
> [...]

Here is the summary with links:
  - [net] net/mlx5e: IPsec, don't match upper proto selectors in crypto offload TX
    https://git.kernel.org/netdev/net/c/5ed47bd79ceb

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html