// SPDX-License-Identifier: GPL-2.0 OR Linux-OpenIB
|
// Copyright (c) 2019 Mellanox Technologies.
|
|
#include "en.h"
|
#include "en_accel/ktls.h"
|
#include "en_accel/ktls_utils.h"
|
#include "en_accel/fs_tcp.h"
|
|
static int mlx5e_ktls_add(struct net_device *netdev, struct sock *sk,
|
enum tls_offload_ctx_dir direction,
|
struct tls_crypto_info *crypto_info,
|
u32 start_offload_tcp_sn)
|
{
|
struct mlx5e_priv *priv = netdev_priv(netdev);
|
struct mlx5_core_dev *mdev = priv->mdev;
|
int err;
|
|
if (!mlx5e_ktls_type_check(mdev, crypto_info))
|
return -EOPNOTSUPP;
|
|
if (direction == TLS_OFFLOAD_CTX_DIR_TX)
|
err = mlx5e_ktls_add_tx(netdev, sk, crypto_info, start_offload_tcp_sn);
|
else
|
err = mlx5e_ktls_add_rx(netdev, sk, crypto_info, start_offload_tcp_sn);
|
|
return err;
|
}
|
|
static void mlx5e_ktls_del(struct net_device *netdev,
|
struct tls_context *tls_ctx,
|
enum tls_offload_ctx_dir direction)
|
{
|
if (direction == TLS_OFFLOAD_CTX_DIR_TX)
|
mlx5e_ktls_del_tx(netdev, tls_ctx);
|
else
|
mlx5e_ktls_del_rx(netdev, tls_ctx);
|
}
|
|
static int mlx5e_ktls_resync(struct net_device *netdev,
|
struct sock *sk, u32 seq, u8 *rcd_sn,
|
enum tls_offload_ctx_dir direction)
|
{
|
if (unlikely(direction != TLS_OFFLOAD_CTX_DIR_RX))
|
return -EOPNOTSUPP;
|
|
mlx5e_ktls_rx_resync(netdev, sk, seq, rcd_sn);
|
return 0;
|
}
|
|
static const struct tlsdev_ops mlx5e_ktls_ops = {
|
.tls_dev_add = mlx5e_ktls_add,
|
.tls_dev_del = mlx5e_ktls_del,
|
.tls_dev_resync = mlx5e_ktls_resync,
|
};
|
|
void mlx5e_ktls_build_netdev(struct mlx5e_priv *priv)
|
{
|
struct net_device *netdev = priv->netdev;
|
struct mlx5_core_dev *mdev = priv->mdev;
|
|
if (mlx5_accel_is_ktls_tx(mdev)) {
|
netdev->hw_features |= NETIF_F_HW_TLS_TX;
|
netdev->features |= NETIF_F_HW_TLS_TX;
|
}
|
|
if (mlx5_accel_is_ktls_rx(mdev))
|
netdev->hw_features |= NETIF_F_HW_TLS_RX;
|
|
netdev->tlsdev_ops = &mlx5e_ktls_ops;
|
}
|
|
int mlx5e_ktls_set_feature_rx(struct net_device *netdev, bool enable)
|
{
|
struct mlx5e_priv *priv = netdev_priv(netdev);
|
int err = 0;
|
|
mutex_lock(&priv->state_lock);
|
if (enable)
|
err = mlx5e_accel_fs_tcp_create(priv);
|
else
|
mlx5e_accel_fs_tcp_destroy(priv);
|
mutex_unlock(&priv->state_lock);
|
|
return err;
|
}
|
|
int mlx5e_ktls_init_rx(struct mlx5e_priv *priv)
|
{
|
int err = 0;
|
|
if (priv->netdev->features & NETIF_F_HW_TLS_RX)
|
err = mlx5e_accel_fs_tcp_create(priv);
|
|
return err;
|
}
|
|
void mlx5e_ktls_cleanup_rx(struct mlx5e_priv *priv)
|
{
|
if (priv->netdev->features & NETIF_F_HW_TLS_RX)
|
mlx5e_accel_fs_tcp_destroy(priv);
|
}
|
