/linux/drivers/net/ethernet/mellanox/mlx5/core/accel/ |
A D | ipsec.c | 116 if (!xfrm->attrs.is_ipv6) { in mlx5_accel_esp_create_hw_context() 117 saddr[3] = xfrm->attrs.saddr.a4; in mlx5_accel_esp_create_hw_context() 118 daddr[3] = xfrm->attrs.daddr.a4; in mlx5_accel_esp_create_hw_context() 124 return ipsec_ops->create_hw_context(mdev, xfrm, saddr, daddr, xfrm->attrs.spi, in mlx5_accel_esp_create_hw_context() 125 xfrm->attrs.is_ipv6, sa_handle); in mlx5_accel_esp_create_hw_context() 144 struct mlx5_accel_esp_xfrm *xfrm; in mlx5_accel_esp_create_xfrm() local 150 if (IS_ERR(xfrm)) in mlx5_accel_esp_create_xfrm() 151 return xfrm; in mlx5_accel_esp_create_xfrm() 153 xfrm->mdev = mdev; in mlx5_accel_esp_create_xfrm() 154 return xfrm; in mlx5_accel_esp_create_xfrm() [all …]
|
A D | ipsec.h | 50 struct mlx5_accel_esp_xfrm *xfrm, 62 struct mlx5_accel_esp_xfrm *xfrm, 71 int (*esp_modify_xfrm)(struct mlx5_accel_esp_xfrm *xfrm, 73 void (*esp_destroy_xfrm)(struct mlx5_accel_esp_xfrm *xfrm); 82 struct mlx5_accel_esp_xfrm *xfrm, in mlx5_accel_esp_create_hw_context() argument
|
A D | ipsec_offload.c | 118 static void mlx5_ipsec_offload_esp_destroy_xfrm(struct mlx5_accel_esp_xfrm *xfrm) in mlx5_ipsec_offload_esp_destroy_xfrm() argument 120 struct mlx5_ipsec_esp_xfrm *mxfrm = container_of(xfrm, struct mlx5_ipsec_esp_xfrm, in mlx5_ipsec_offload_esp_destroy_xfrm() 330 static int mlx5_ipsec_offload_esp_modify_xfrm(struct mlx5_accel_esp_xfrm *xfrm, in mlx5_ipsec_offload_esp_modify_xfrm() argument 334 struct mlx5_core_dev *mdev = xfrm->mdev; in mlx5_ipsec_offload_esp_modify_xfrm() 339 if (!memcmp(&xfrm->attrs, attrs, sizeof(xfrm->attrs))) in mlx5_ipsec_offload_esp_modify_xfrm() 345 mxfrm = container_of(xfrm, struct mlx5_ipsec_esp_xfrm, accel_xfrm); in mlx5_ipsec_offload_esp_modify_xfrm() 363 memcpy(&xfrm->attrs, attrs, sizeof(xfrm->attrs)); in mlx5_ipsec_offload_esp_modify_xfrm()
|
/linux/net/xfrm/ |
A D | xfrm_sysctl.c | 9 net->xfrm.sysctl_aevent_etime = XFRM_AE_ETIME; in __xfrm_sysctl_init() 10 net->xfrm.sysctl_aevent_rseqth = XFRM_AE_SEQT_SIZE; in __xfrm_sysctl_init() 11 net->xfrm.sysctl_larval_drop = 1; in __xfrm_sysctl_init() 12 net->xfrm.sysctl_acq_expires = 30; in __xfrm_sysctl_init() 53 table[0].data = &net->xfrm.sysctl_aevent_etime; in xfrm_sysctl_init() 54 table[1].data = &net->xfrm.sysctl_aevent_rseqth; in xfrm_sysctl_init() 55 table[2].data = &net->xfrm.sysctl_larval_drop; in xfrm_sysctl_init() 56 table[3].data = &net->xfrm.sysctl_acq_expires; in xfrm_sysctl_init() 63 if (!net->xfrm.sysctl_hdr) in xfrm_sysctl_init() 77 table = net->xfrm.sysctl_hdr->ctl_table_arg; in xfrm_sysctl_fini() [all …]
|
A D | xfrm_policy.c | 2395 xfrm[nx++] = x; in xfrm_tmpl_resolve_one() 2415 xfrm_state_put(xfrm[nx]); in xfrm_tmpl_resolve_one() 2595 if (xfrm[i]->props.smark.v || xfrm[i]->props.smark.m) in xfrm_bundle_create() 2607 dst1->xfrm = xfrm[i]; in xfrm_bundle_create() 2658 xfrm_state_put(xfrm[i]); in xfrm_bundle_create() 3152 if (dst && dst->xfrm && in xfrm_lookup_with_ifid() 3817 } while (dst->xfrm); in xfrm_bundle_ok() 3856 while (dst->xfrm) { in xfrm_get_dst_nexthop() 3857 const struct xfrm_state *xfrm = dst->xfrm; in xfrm_get_dst_nexthop() local 3864 daddr = xfrm->coaddr; in xfrm_get_dst_nexthop() [all …]
|
A D | xfrm_state.c | 170 ohashmask = net->xfrm.state_hmask; in xfrm_hash_resize() 693 net->xfrm.state_num--; in __xfrm_state_delete() 1023 net->xfrm.state_num > net->xfrm.state_hmask) in xfrm_hash_grow_check() 1183 net->xfrm.state_num++; in xfrm_state_find() 1304 net->xfrm.state_num++; in __xfrm_state_insert() 1415 net->xfrm.state_num++; in __find_acq_core() 2697 if (!net->xfrm.state_bydst) in xfrm_state_init() 2700 if (!net->xfrm.state_bysrc) in xfrm_state_init() 2703 if (!net->xfrm.state_byspi) in xfrm_state_init() 2706 if (!net->xfrm.state_byseq) in xfrm_state_init() [all …]
|
A D | xfrm_user.c | 1219 spt4.lbits = net->xfrm.policy_hthresh.lbits4; in build_spdinfo() 1220 spt4.rbits = net->xfrm.policy_hthresh.rbits4; in build_spdinfo() 1221 spt6.lbits = net->xfrm.policy_hthresh.lbits6; in build_spdinfo() 1222 spt6.rbits = net->xfrm.policy_hthresh.rbits6; in build_spdinfo() 1269 write_seqlock(&net->xfrm.policy_hthresh.lock); in xfrm_set_spdinfo() 2122 err = nlmsg_unicast(net->xfrm.nlsk, resp_skb, in xfrm_get_policy() 2933 mutex_lock(&net->xfrm.xfrm_cfg_mutex); in xfrm_netlink_rcv() 2935 mutex_unlock(&net->xfrm.xfrm_cfg_mutex); in xfrm_netlink_rcv() 3589 rcu_assign_pointer(net->xfrm.nlsk, nlsk); in xfrm_user_net_init() 3595 RCU_INIT_POINTER(net->xfrm.nlsk, NULL); in xfrm_user_net_pre_exit() [all …]
|
A D | xfrm_output.c | 493 struct xfrm_state *x = dst->xfrm; in xfrm_output_one() 570 x = dst->xfrm; in xfrm_output_one() 585 struct net *net = xs_net(skb_dst(skb)->xfrm); in xfrm_output_resume() 594 if (!skb_dst(skb)->xfrm) in xfrm_output_resume() 684 struct xfrm_state *x = skb_dst(skb)->xfrm; in xfrm_output()
|
/linux/tools/testing/selftests/net/ |
A D | xfrm_policy.sh | 123 ip -net $ns xfrm policy get src $lnet dst $rnet dir out > /dev/null 130 ip -net $ns xfrm policy get src $rnet dst $lnet dir fwd > /dev/null 274 ip -net ns1 xfrm policy set hthresh6 0 28 || break 277 ip -net ns1 xfrm policy set hthresh6 0 28 || break 298 ip -net $ns xfrm policy flush 311 ip -net $ns xfrm policy flush 325 ip -net $ns xfrm policy flush 455 ip -net $n xfrm policy set hthresh4 28 24 hthresh6 126 125 462 ip -net ns3 xfrm policy flush 468 ip -net ns3 xfrm policy set hthresh4 16 16 [all …]
|
A D | l2tp.sh | 234 run_cmd host-1 ip xfrm policy add \ 238 run_cmd host-1 ip xfrm policy add \ 242 run_cmd host-2 ip xfrm policy add \ 246 run_cmd host-2 ip xfrm policy add \ 250 ip -netns host-1 xfrm state add \ 255 ip -netns host-1 xfrm state add \ 260 ip -netns host-2 xfrm state add \ 265 ip -netns host-2 xfrm state add \ 312 run_cmd host-1 ip xfrm state flush 313 run_cmd host-1 ip xfrm policy flush [all …]
|
A D | vrf-xfrm-tests.sh | 202 ip -netns ${ns} xfrm ${x} flush 203 ip -6 -netns ${ns} xfrm ${x} flush 221 ip -netns host1 xfrm policy add \ 226 ip -netns host2 xfrm policy add \ 231 ip -netns host1 xfrm policy add \ 236 ip -netns host2 xfrm policy add \ 242 ip -6 -netns host1 xfrm policy add \ 247 ip -6 -netns host2 xfrm policy add \ 252 ip -6 -netns host1 xfrm policy add \ 257 ip -6 -netns host2 xfrm policy add \ [all …]
|
/linux/include/linux/mlx5/ |
A D | accel.h | 137 void mlx5_accel_esp_destroy_xfrm(struct mlx5_accel_esp_xfrm *xfrm); 138 int mlx5_accel_esp_modify_xfrm(struct mlx5_accel_esp_xfrm *xfrm, 150 mlx5_accel_esp_destroy_xfrm(struct mlx5_accel_esp_xfrm *xfrm) {} in mlx5_accel_esp_destroy_xfrm() argument 152 mlx5_accel_esp_modify_xfrm(struct mlx5_accel_esp_xfrm *xfrm, in mlx5_accel_esp_modify_xfrm() argument
|
/linux/net/ipv6/ |
A D | xfrm6_policy.c | 149 } while (xdst->u.dst.xfrm); in xfrm6_dst_ifdown() 190 .data = &init_net.xfrm.xfrm6_dst_ops.gc_thresh, 209 table[0].data = &net->xfrm.xfrm6_dst_ops.gc_thresh; in xfrm6_net_sysctl_init() 253 memcpy(&net->xfrm.xfrm6_dst_ops, &xfrm6_dst_ops_template, in xfrm6_net_init() 255 ret = dst_entries_init(&net->xfrm.xfrm6_dst_ops); in xfrm6_net_init() 261 dst_entries_destroy(&net->xfrm.xfrm6_dst_ops); in xfrm6_net_init() 269 dst_entries_destroy(&net->xfrm.xfrm6_dst_ops); in xfrm6_net_exit()
|
/linux/drivers/net/ethernet/mellanox/mlx5/core/en_accel/ |
A D | ipsec.c | 293 return mlx5e_accel_ipsec_fs_add_rule(priv, &sa_entry->xfrm->attrs, in mlx5e_xfrm_fs_add_rule() 304 mlx5e_accel_ipsec_fs_del_rule(priv, &sa_entry->xfrm->attrs, in mlx5e_xfrm_fs_del_rule() 337 sa_entry->xfrm = in mlx5e_xfrm_add_state() 340 if (IS_ERR(sa_entry->xfrm)) { in mlx5e_xfrm_add_state() 341 err = PTR_ERR(sa_entry->xfrm); in mlx5e_xfrm_add_state() 348 sa_entry->xfrm, in mlx5e_xfrm_add_state() 377 mlx5_accel_esp_destroy_xfrm(sa_entry->xfrm); in mlx5e_xfrm_add_state() 407 mlx5_accel_esp_free_hw_context(sa_entry->xfrm->mdev, sa_entry->hw_context); in mlx5e_xfrm_free_state() 408 mlx5_accel_esp_destroy_xfrm(sa_entry->xfrm); in mlx5e_xfrm_free_state() 489 ret = mlx5_accel_esp_modify_xfrm(sa_entry->xfrm, in _update_xfrm_state()
|
/linux/net/ipv4/ |
A D | xfrm4_policy.c | 163 .data = &init_net.xfrm.xfrm4_dst_ops.gc_thresh, 182 table[0].data = &net->xfrm.xfrm4_dst_ops.gc_thresh; in xfrm4_net_sysctl_init() 226 memcpy(&net->xfrm.xfrm4_dst_ops, &xfrm4_dst_ops_template, in xfrm4_net_init() 228 ret = dst_entries_init(&net->xfrm.xfrm4_dst_ops); in xfrm4_net_init() 234 dst_entries_destroy(&net->xfrm.xfrm4_dst_ops); in xfrm4_net_init() 242 dst_entries_destroy(&net->xfrm.xfrm4_dst_ops); in xfrm4_net_exit()
|
A D | xfrm4_output.c | 20 struct xfrm_state *x = skb_dst(skb)->xfrm; in __xfrm4_output()
|
/linux/tools/testing/selftests/bpf/ |
A D | test_tunnel.sh | 596 ip xfrm state add src 172.16.1.100 dst 172.16.1.200 proto esp \ 600 ip xfrm policy add src 10.1.1.100/32 dst 10.1.1.200/32 dir out \ 605 ip xfrm state add src 172.16.1.200 dst 172.16.1.100 proto esp \ 609 ip xfrm policy add src 10.1.1.200/32 dst 10.1.1.100/32 dir in \ 621 ip xfrm state add src 172.16.1.100 dst 172.16.1.200 proto esp \ 624 ip xfrm policy add src 10.1.1.100/32 dst 10.1.1.200/32 dir in \ 628 ip xfrm state add src 172.16.1.200 dst 172.16.1.100 proto esp \ 631 ip xfrm policy add src 10.1.1.200/32 dst 10.1.1.100/32 dir out \ 690 ip xfrm policy delete dir out src 10.1.1.200/32 dst 10.1.1.100/32 2> /dev/null 691 ip xfrm policy delete dir in src 10.1.1.100/32 dst 10.1.1.200/32 2> /dev/null [all …]
|
/linux/arch/x86/kvm/vmx/ |
A D | sgx.c | 146 u64 attributes, xfrm, size; in __handle_encls_ecreate() local 160 xfrm = contents->xfrm; in __handle_encls_ecreate() 176 (u32)xfrm & ~sgx_12_1->ecx || in __handle_encls_ecreate() 177 (u32)(xfrm >> 32) & ~sgx_12_1->edx) { in __handle_encls_ecreate()
|
/linux/net/netfilter/ |
A D | xt_policy.c | 90 if (dst->xfrm == NULL) in match_policy_out() 93 for (i = 0; dst && dst->xfrm; in match_policy_out() 100 if (match_xfrm_state(dst->xfrm, e, family)) { in match_policy_out()
|
A D | nft_xfrm.c | 180 for (i = 0; dst && dst->xfrm; in nft_xfrm_get_eval_out() 185 nft_xfrm_state_get_key(priv, regs, dst->xfrm); in nft_xfrm_get_eval_out()
|
/linux/tools/testing/selftests/net/forwarding/ |
A D | ip6_forward_instats_vrf.sh | 149 ip xfrm policy add dst 2001:1:2::2/128 dir fwd action block 152 ip xfrm policy del dst 2001:1:2::2/128 dir fwd
|
/linux/arch/x86/include/asm/ |
A D | sgx.h | 135 u64 xfrm; member 328 u64 xfrm; member
|
/linux/include/net/ |
A D | xfrm.h | 938 if (dst->xfrm || (dst->flags & DST_XFRM_QUEUE)) { in xfrm_dst_path() 950 if (dst->xfrm || (dst->flags & DST_XFRM_QUEUE)) { in xfrm_dst_child() 968 if (likely(xdst->u.dst.xfrm)) in xfrm_dst_destroy() 969 xfrm_state_put(xdst->u.dst.xfrm); in xfrm_dst_destroy() 1081 u8 def = net->xfrm.policy_default; in xfrm_default_allow() 1166 return !net->xfrm.policy_count[XFRM_POLICY_OUT] || in xfrm_route_forward() 1748 nlsk = rcu_dereference(net->xfrm.nlsk); in xfrm_aevent_is_on() 1761 nlsk = rcu_dereference(net->xfrm.nlsk); in xfrm_acquire_is_on() 1883 struct xfrm_state *x = dst->xfrm; in xfrm_dst_offload_ok() 1890 if (!x->xso.offload_handle && !xdst->child->xfrm) in xfrm_dst_offload_ok() [all …]
|
/linux/drivers/net/ethernet/mellanox/mlx5/core/fpga/ |
A D | ipsec.c | 1481 static void mlx5_fpga_esp_destroy_xfrm(struct mlx5_accel_esp_xfrm *xfrm) in mlx5_fpga_esp_destroy_xfrm() argument 1484 container_of(xfrm, struct mlx5_fpga_esp_xfrm, in mlx5_fpga_esp_destroy_xfrm() 1490 static int mlx5_fpga_esp_modify_xfrm(struct mlx5_accel_esp_xfrm *xfrm, in mlx5_fpga_esp_modify_xfrm() argument 1493 struct mlx5_core_dev *mdev = xfrm->mdev; in mlx5_fpga_esp_modify_xfrm() 1501 if (!memcmp(&xfrm->attrs, attrs, sizeof(xfrm->attrs))) in mlx5_fpga_esp_modify_xfrm() 1514 fpga_xfrm = container_of(xfrm, struct mlx5_fpga_esp_xfrm, accel_xfrm); in mlx5_fpga_esp_modify_xfrm() 1529 mlx5_fpga_ipsec_build_hw_xfrm(xfrm->mdev, attrs, in mlx5_fpga_esp_modify_xfrm() 1558 memcpy(&xfrm->attrs, attrs, sizeof(xfrm->attrs)); in mlx5_fpga_esp_modify_xfrm()
|
/linux/tools/testing/selftests/netfilter/ |
A D | nft_flowtable.sh | 473 …ip -net $ns xfrm state add src $remote dst $me proto esp spi $spi_in enc aes $KEY_AES auth sha1 … 474 …ip -net $ns xfrm state add src $me dst $remote proto esp spi $spi_out enc aes $KEY_AES auth sha1 … 477 …ip -net $ns xfrm policy add src $lnet dst $rnet dir out tmpl src $me dst $remote proto esp mode tu… 479 …ip -net $ns xfrm policy add src $rnet dst $lnet dir fwd tmpl src $remote dst $me proto esp mode tu…
|