net/mlx5e: Fix IPsec tunnel mode offload feature check

Remove faulty check disabling checksum offload and GSO for offload of
simple IPsec tunnel L4 traffic. Comment previously describing the deleted
code incorrectly claimed the check prevented double tunnel (or three layers
of ip headers).

Fixes: f1267798c980 ("net/mlx5: Fix checksum issue of VXLAN and IPsec crypto offload")
Signed-off-by: Rahul Rameshbabu <rrameshbabu@nvidia.com>
Signed-off-by: Tariq Toukan <tariqt@nvidia.com>
Reviewed-by: Simon Horman <horms@kernel.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

diff --git a/drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_rxtx.h b/drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_rxtx.h
index 82064614846f5f88646b12a887bf548ccbe47639..359050f0b54ddc25980bfe7b2ebeb6a9f43c9fde 100644 (file)
--- a/drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_rxtx.h
+++ b/drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec_rxtx.h
@@ -97,18 +97,11 @@ mlx5e_ipsec_feature_check(struct sk_buff *skb, netdev_features_t features)
                if (!x || !x->xso.offload_handle)
                        goto out_disable;
 
-               if (xo->inner_ipproto) {
-                       /* Cannot support tunnel packet over IPsec tunnel mode
-                        * because we cannot offload three IP header csum
-                        */
-                       if (x->props.mode == XFRM_MODE_TUNNEL)
-                               goto out_disable;
-
-                       /* Only support UDP or TCP L4 checksum */
-                       if (xo->inner_ipproto != IPPROTO_UDP &&
-                           xo->inner_ipproto != IPPROTO_TCP)
-                               goto out_disable;
-               }
+               /* Only support UDP or TCP L4 checksum */
+               if (xo->inner_ipproto &&
+                   xo->inner_ipproto != IPPROTO_UDP &&
+                   xo->inner_ipproto != IPPROTO_TCP)
+                       goto out_disable;
 
                return features;