[0/11] pull request (net-next): ipsec-next 2024-09-09

Pull-request

git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git tags/ipsec-next-2024-09-09

Message

Steffen Klassert Sept. 9, 2024, 10:03 a.m. UTC

1) Remove an unneeded WARN_ON on packet offload.
   From Patrisious Haddad.

2) Add a copy from skb_seq_state to buffer function.
   This is needed for the upcomming IPTFS patchset.
   From Christian Hopps.

3) Spelling fix in xfrm.h.
   From Simon Horman.

4) Speed up xfrm policy insertions.
   From Florian Westphal.

5) Add and revert a patch to support xfrm interfaces
   for packet offload. This patch was just half coocked.

6) Extend usage of the new xfrm_policy_is_dead_or_sk helper.
   From Florian Westphal.

7) Update comments on sdb and xfrm_policy.
   From Florian Westphal.

Please pull or let me know if there are problems.

Thanks!

The following changes since commit 8e0c0ec9b7dc2aec84f141c26c501e24906ff765:

  Merge branch 'ethernet-convert-from-tasklet-to-bh-workqueue' (2024-07-31 19:05:20 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next.git tags/ipsec-next-2024-09-09

for you to fetch changes up to 69716a3babe1165a9ab1b3770b55d303d5bb5fa3:

  Revert "xfrm: add SA information to the offloaded packet" (2024-09-09 11:43:39 +0200)

----------------------------------------------------------------
ipsec-next-2024-09-09

----------------------------------------------------------------
Christian Hopps (1):
      net: add copy from skb_seq_state to buffer function

Florian Westphal (6):
      selftests: add xfrm policy insertion speed test script
      xfrm: policy: don't iterate inexact policies twice at insert time
      xfrm: switch migrate to xfrm_policy_lookup_bytype
      xfrm: policy: remove remaining use of inexact list
      xfrm: policy: use recently added helper in more places
      xfrm: minor update to sdb and xfrm_policy comments

Patrisious Haddad (1):
      xfrm: Remove documentation WARN_ON to limit return values for offloaded SA

Simon Horman (1):
      xfrm: Correct spelling in xfrm.h

Steffen Klassert (2):
      Merge branch 'xfrm: speed up policy insertions'
      Revert "xfrm: add SA information to the offloaded packet"

wangfe (1):
      xfrm: add SA information to the offloaded packet

 include/linux/skbuff.h                             |   1 +
 include/net/xfrm.h                                 |  45 ++++-
 net/core/skbuff.c                                  |  35 ++++
 net/xfrm/xfrm_device.c                             |   6 +-
 net/xfrm/xfrm_policy.c                             | 220 +++++++++------------
 tools/testing/selftests/net/Makefile               |   2 +-
 .../testing/selftests/net/xfrm_policy_add_speed.sh |  83 ++++++++
 7 files changed, 256 insertions(+), 136 deletions(-)
 create mode 100755 tools/testing/selftests/net/xfrm_policy_add_speed.sh

Comments

Steffen Klassert Sept. 9, 2024, 1:21 p.m. UTC | #1

On Mon, Sep 09, 2024 at 12:03:17PM +0200, Steffen Klassert wrote:
> 1) Remove an unneeded WARN_ON on packet offload.
>    From Patrisious Haddad.
> 
> 2) Add a copy from skb_seq_state to buffer function.
>    This is needed for the upcomming IPTFS patchset.
>    From Christian Hopps.
> 
> 3) Spelling fix in xfrm.h.
>    From Simon Horman.
> 
> 4) Speed up xfrm policy insertions.
>    From Florian Westphal.
> 
> 5) Add and revert a patch to support xfrm interfaces
>    for packet offload. This patch was just half coocked.
> 
> 6) Extend usage of the new xfrm_policy_is_dead_or_sk helper.
>    From Florian Westphal.
> 
> 7) Update comments on sdb and xfrm_policy.
>    From Florian Westphal.
> 
> Please pull or let me know if there are problems.

Please wait with pulling, I forgot to apply two fixes
for the policy changes. Will send another pull request
tomorrow.