git: c7d13682a1ad - main - lagg: do not advertize support for ipsec offload

[Konstantin Belousov]

The branch main has been updated by kib:

URL: 
https://cgit.FreeBSD.org/src/commit/?id=c7d13682a1ad0e8f35d59989d64546c74da80eed

commit c7d13682a1ad0e8f35d59989d64546c74da80eed
Author:     Konstantin Belousov <k...@freebsd.org>
AuthorDate: 2024-12-16 12:38:39 +0000
Commit:     Konstantin Belousov <k...@freebsd.org>
CommitDate: 2024-12-17 21:49:31 +0000

    lagg: do not advertize support for ipsec offload
    
    It is not implemented, and most likely cannot be, in a robust manner.
    
    Reviewed by:    Ariel Ehrenberg <aehrenb...@nvidia.com>, slavash
    Sponsored by:   NVidia networking
---
 sys/net/if_lagg.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sys/net/if_lagg.c b/sys/net/if_lagg.c
index 988f23fc029c..9bc42cb8cbe6 100644
--- a/sys/net/if_lagg.c
+++ b/sys/net/if_lagg.c
@@ -692,6 +692,7 @@ lagg_capabilities(struct lagg_softc *sc)
                        ena2 &= lp->lp_ifp->if_capenable2;
                }
        } while (pena != ena || pena2 != ena2);
+       ena2 &= ~IFCAP2_BIT(IFCAP2_IPSEC_OFFLOAD);
 
        /* Get other capabilities from the lagg ports */
        cap = cap2 = ~0;
@@ -703,6 +704,7 @@ lagg_capabilities(struct lagg_softc *sc)
                hwa &= lp->lp_ifp->if_hwassist;
                if_hw_tsomax_common(lp->lp_ifp, &hw_tsomax);
        }
+       cap2 &= ~IFCAP2_BIT(IFCAP2_IPSEC_OFFLOAD);
        if (CK_SLIST_FIRST(&sc->sc_ports) == NULL)
                cap = cap2 = hwa = 0;