Re: Yet another approach for implementing connection tracking offload

2019-02-26 Thread Yossi Kuperman
On 23/02/2019 0:23, Marcelo Leitner wrote: > On Mon, Feb 18, 2019 at 07:00:19PM +0000, Yossi Kuperman wrote: >> Hello All, >> >> Following is a description of yet another possible approach to >> implement connection tracking offload. We would like to hear your >&

Yet another approach for implementing connection tracking offload

2019-02-18 Thread Yossi Kuperman
Hello All, Following is a description of yet another possible approach to implement connection tracking offload. We would like to hear your opinion. There is the “native” way of implementing such an offload by mirroring the software tables to hardware. This way seems straightforward and simple,

RE: ipsec through openvpn broken

2018-02-11 Thread Yossi Kuperman
> -Original Message- > From: Artem Savkov [mailto:artem.sav...@gmail.com] > Sent: Sunday, February 11, 2018 10:34 AM > To: Yossi Kuperman ; Steffen Klassert > > Cc: netdev@vger.kernel.org > Subject: ipsec through openvpn broken > > Hi Yossi, Steffen, > >

RE: [PATCH net-next v2] xfrm: Add ESN support for IPSec HW offload

2018-01-11 Thread Yossi Kuperman
> From: Shannon Nelson [mailto:shannon.nel...@oracle.com] > Sent: Thursday, January 11, 2018 5:21 AM > > On 1/10/2018 3:09 PM, Yossi Kuperman wrote: > >> On 10 Jan 2018, at 19:36, Shannon Nelson wrote: > >> > >>> On 1/10/2018 2:34 AM, yoss...@mel

Re: [PATCH net-next v2] xfrm: Add ESN support for IPSec HW offload

2018-01-10 Thread Yossi Kuperman
> On 10 Jan 2018, at 19:36, Shannon Nelson wrote: > >> On 1/10/2018 2:34 AM, yoss...@mellanox.com wrote: >> From: Yossef Efraim >> This patch adds ESN support to IPsec device offload. >> Adding new xfrm device operation to synchronize device ESN. >> Signed-off-by: Yossef Efraim >> --- >> Chan

RE: [PATCH net v2 2/3] xfrm: Add an activate() offload dev op

2017-12-03 Thread Yossi Kuperman
> -Original Message- > From: Shannon Nelson [mailto:shannon.nel...@oracle.com] > Sent: Sunday, December 3, 2017 12:11 AM > To: Aviv Heller ; Steffen Klassert > > Cc: Herbert Xu ; Boris Pismenny > ; Yossi Kuperman ; > Yevgeny Kliteynik ; netdev@vger.kernel.org &

RE: [PATCH net v2 2/3] xfrm: Add an activate() offload dev op

2017-12-03 Thread Yossi Kuperman
> -Original Message- > From: Shannon Nelson [mailto:shannon.nel...@oracle.com] > Sent: Sunday, December 3, 2017 2:38 AM > To: Yossi Kuperman ; Steffen Klassert > > Cc: Aviv Heller ; Herbert Xu > ; Boris Pismenny ; > Yevgeny Kliteynik ; netdev@vger.kernel.org >

RE: [PATCH net v2 2/3] xfrm: Add an activate() offload dev op

2017-12-03 Thread Yossi Kuperman
> -Original Message- > From: Boris Pismenny > Sent: Sunday, December 3, 2017 1:29 PM > To: Yossi Kuperman ; Steffen Klassert > > Cc: Aviv Heller ; Herbert Xu > ; Yevgeny Kliteynik ; > netdev@vger.kernel.org > Subject: RE: [PATCH net v2 2/3] xfrm: Add a

Re: [PATCH net v2 2/3] xfrm: Add an activate() offload dev op

2017-12-02 Thread Yossi Kuperman
>> On 1 Dec 2017, at 9:09, Steffen Klassert >> wrote: >> >> On Tue, Nov 28, 2017 at 07:55:41PM +0200, av...@mellanox.com wrote: >> From: Aviv Heller >> >> Adding the state to the offload device prior to replay init in >> xfrm_state_construct() will result in NULL dereference if a matching >>

RE: [PATCH] ipv4: esp4: use BUG_ON instead of if condition followed by BUG

2017-10-24 Thread Yossi Kuperman
> Subject: [PATCH] ipv4: esp4: use BUG_ON instead of if condition followed by > BUG > > Use BUG_ON instead of if condition followed by BUG in esp_remove_trailer. > > This issue was detected with the help of Coccinelle. > > Signed-off-by: Gustavo A. R. Silva > --- > net/ipv4/esp4.c | 3 +-- > 1

RE: [PATCH net 1/2] xfrm6: Fix IPv6 payload_len in xfrm6_transport_finish

2017-06-21 Thread Yossi Kuperman
> -Original Message- > From: Yossi Kuperman > Sent: Wednesday, June 21, 2017 7:00 PM > To: 'Steffen Klassert' > Cc: netdev@vger.kernel.org; Herbert Xu ; > Yevgeny Kliteynik ; Boris Pismenny > ; Ilan Tayari > Subject: RE: [PATCH net 1

RE: [PATCH net 1/2] xfrm6: Fix IPv6 payload_len in xfrm6_transport_finish

2017-06-21 Thread Yossi Kuperman
> -Original Message- > From: Steffen Klassert [mailto:steffen.klass...@secunet.com] > Sent: Wednesday, June 21, 2017 2:38 PM > To: Yossi Kuperman > Cc: netdev@vger.kernel.org; Herbert Xu ; > Yevgeny Kliteynik ; Boris Pismenny > ; Ilan Tayari > Subject: Re: [P

RE: [PATCH net 1/2] xfrm6: Fix IPv6 payload_len in xfrm6_transport_finish

2017-06-21 Thread Yossi Kuperman
> -Original Message- > From: Steffen Klassert [mailto:steffen.klass...@secunet.com] > Sent: Wednesday, June 21, 2017 8:37 AM > To: Yossi Kuperman > Cc: netdev@vger.kernel.org; Herbert Xu ; > Yevgeny Kliteynik ; Boris Pismenny > ; Ilan Tayari > Subject: Re: [P