On 9/12/2019 6:01 AM, Steffen Klassert wrote:
The ixgbe driver currently does IPsec TX offloading
based on an existing secpath. However, the secpath
can also come from the RX side, in this case it is
misinterpreted for TX offload and the packets are
dropped with a "bad sa_idx" error. Fix this by using
the xfrm_offload() function to test for TX offload.
Does this patch also need to be ported to the ixgbevf driver? I can
replicate the bad sa_idx error using a VM that's using a VF & the
ixgebvf driver.
