This is the first part of the IPsec offload work we talked at the IPsec workshop at the last netdev conference. I plan to apply this to ipsec-next after this round of review.
Patch 1 and 2 try to avoid skb linearization in the ESP layer. Patch 3 introduces a hepler to seup the esp trailer. Patch 4 prepares the generic network code for IPsec GRO. The main reason why we need this, is that we need to reinject the decrypted inner packet back to the GRO layer. Patch 5 introduces GRO handlers for ESP, GRO can enabled with a IPsec offload config option. This config option will also be used for the upcomming hardware offload. David, patch 3 touches generic networking code. Is it ok to integrate such a generic preparation patch into an IPsec pull request, or do you prefer to get it as a separate patch?
