IPSEC inline offload

2024-03-04 Thread Konstantin Belousov
NVIDIA networking developed support for inline IPSEC offload on FreeBSD. It consists of the common infrastructure part, and changes for mlx5en(4) driver fitting the kernel counterpart. Inline offload moves (almost) all IPSEC processing of the packet from CPU and crypto accelerators, to the networ

[Bug 277349] The net.inet.ip.source_address_validation should ignore CARP IP in backup state

2024-03-04 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277349 --- Comment #5 from Gleb Smirnoff --- I'm not 100% sure there would be no unexpected consequences/regressions. The function modified isn't used by CARP only. I need to think more on that. I'd appreciate more eyes looking at code and evalu

[Bug 277435] [Feature request] Add an option to destroy the tap/tun interface when the descriptor is closed

2024-03-04 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277435 --- Comment #14 from Nikolay Borodin --- (In reply to Kyle Evans from comment #11) If I set net.link.tap.user_open to 1 and try to open tap device (e.g. "/dev/tap"), open returns -1, but the tapN interface still exists. It also creates devi

[Bug 277435] [Feature request] Add an option to destroy the tap/tun interface when the descriptor is closed

2024-03-04 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=277435 --- Comment #13 from Nikolay Borodin --- (In reply to Kyle Evans from comment #11) After applying these changes, everything works as it should. https://reviews.freebsd.org/D44199 -- You are receiving this mail because: You are the assign