On Tue, Nov 28, 2017 at 11:49:30AM +0200, yoss...@mellanox.com wrote: > From: Yossef Efraim <yoss...@mellanox.com> > > This patch adds ESN support to IPsec device offload. > Adding new xfrm device operation to synchronize device ESN. > > Signed-off-by: Yossef Efraim <yoss...@mellanox.com> > --- > include/linux/netdevice.h | 1 + > include/net/xfrm.h | 12 ++++++++++++ > net/xfrm/xfrm_device.c | 4 ++-- > net/xfrm/xfrm_replay.c | 2 ++ > 4 files changed, 17 insertions(+), 2 deletions(-) > > diff --git a/include/linux/netdevice.h b/include/linux/netdevice.h > index 7de7656..d4e9198 100644 > --- a/include/linux/netdevice.h > +++ b/include/linux/netdevice.h > @@ -825,6 +825,7 @@ struct xfrmdev_ops { > void (*xdo_dev_state_free) (struct xfrm_state *x); > bool (*xdo_dev_offload_ok) (struct sk_buff *skb, > struct xfrm_state *x); > + void (*xdo_dev_state_advance_esn) (struct xfrm_state *x);
We now have a documentation for the xfrm offloadin API in the ipsec-next tree. Please document the new device operation there and resubmit. Thanks!