[PATCH net-next v3] xfrm: Add ESN support for IPSec HW offload

From: Yossef Efraim This patch adds ESN support to IPsec device offload. Adding new xfrm device operation to synchronize device ESN. Signed-off-by: Yossef Efraim --- Changes from v1: - Added documentation Changes from v2: - Due to Shannon Nelson's request, xfrm_dev_state_add() fails if ESN i

[PATCH net-next v2] xfrm: Add ESN support for IPSec HW offload

From: Yossef Efraim This patch adds ESN support to IPsec device offload. Adding new xfrm device operation to synchronize device ESN. Signed-off-by: Yossef Efraim --- Changes from v1: - Added documentation --- Documentation/networking/xfrm_device.txt | 3 +++ include/linux/netdevice.h

[PATCH net-next 1/3] xfrm: Fix xfrm_replay_overflow_offload_esn

From: Yossef Efraim In case of wrap around, replay_esn->oseq_hi is not updated before it is tested for it's actual value, leading function to fail with overflow indication and packets being dropped. This patch updates replay_esn->oseq_hi in the right place. Fixes: d7dbefc45cf5 ("xfrm: Add xfrm_

[PATCH net-next 2/3] xfrm: Fix xfrm_dev_state_add to fail for unsupported HW SA option

From: Yossef Efraim xfrm_dev_state_add function returns success for unsupported HW SA options. Resulting the calling function to create SW SA without corrlating HW SA. Desipte IPSec device offloading option was chosen. These not supported HW SA options are hard coded within xfrm_dev_state_add fun

[PATCH net-next 3/3] xfrm: Add ESN support for IPSec HW offload

From: Yossef Efraim This patch adds ESN support to IPsec device offload. Adding new xfrm device operation to synchronize device ESN. Signed-off-by: Yossef Efraim --- include/linux/netdevice.h | 1 + include/net/xfrm.h| 12 net/xfrm/xfrm_device.c| 4 ++-- net/xfrm/xfr