net/mlx5: Configure IPsec steering for egress RoCEv2 MPV traffic
authorPatrisious Haddad <phaddad@nvidia.com>
Thu, 21 Sep 2023 12:10:33 +0000 (15:10 +0300)
committerLeon Romanovsky <leon@kernel.org>
Mon, 2 Oct 2023 08:21:21 +0000 (11:21 +0300)
commitdfbd229abeee76a0bcf015e93c85dca8d18568d4
treeaf72f2ce2553c0e7093e63b367026ff14c941f3c
parent69c08efcbe7fa87ec89f28e0eed0c8c1deedfd83
net/mlx5: Configure IPsec steering for egress RoCEv2 MPV traffic

Add steering tables/rules in RDMA_TX master domain, to forward all traffic
to IPsec crypto table in NIC domain.
But in case the traffic is coming from the slave, have to first send the
traffic to an alias table in order to switch gvmi and from there we can
go to the appropriate gvmi crypto table in NIC domain.

Signed-off-by: Patrisious Haddad <phaddad@nvidia.com>
Reviewed-by: Mark Bloch <mbloch@nvidia.com>
Link: https://lore.kernel.org/r/7ca5cf1ac5c6979359b8726e97510574e2b3d44d.1695296682.git.leon@kernel.org
Signed-off-by: Leon Romanovsky <leon@kernel.org>
drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_fs.c
drivers/net/ethernet/mellanox/mlx5/core/fs_core.c
drivers/net/ethernet/mellanox/mlx5/core/lib/ipsec_fs_roce.c
drivers/net/ethernet/mellanox/mlx5/core/lib/ipsec_fs_roce.h