denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vici: Update offloading configuration for full packet HW offloading

Browse Source
This commit is contained in:
Tobias Brunner
2023-02-16 13:25:34 +01:00
parent 55719d7de5
commit 2b8f26308f
2 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/vici/vici_config.c
+2
View File
@@ -1042,6 +1042,8 @@ CALLBACK(parse_hw_offload, bool,
enum_map_t map[] = {
{ "no", HW_OFFLOAD_NO },
{ "yes", HW_OFFLOAD_CRYPTO },
{ "crypto", HW_OFFLOAD_CRYPTO },
{ "packet", HW_OFFLOAD_PACKET },
{ "auto", HW_OFFLOAD_AUTO },
};
int d;
src/swanctl/swanctl.opt
+6 -4
View File
@@ -1071,10 +1071,12 @@ connections.<conn>.children.<child>.hw_offload = no
implementation.
Enable hardware offload for this CHILD_SA, if supported by the IPsec
implementation. The value _yes_ enforces offloading and the installation
will fail if it's not supported by either kernel or device. The value _auto_
enables offloading, if it's supported, but the installation does not fail
otherwise.
implementation. The values _crypto_ or _packet_ enforce crypto or full
packet offloading and the installation will fail if the selected mode is not
supported by either kernel or device. On Linux, _packet_ also offloads
policies, including trap policies. The value _auto_ enables full packet
or crypto offloading, if either is supported, but the installation does not
fail otherwise.
connections.<conn>.children.<child>.copy_df = yes
Whether to copy the DF bit to the outer IPv4 header in tunnel mode.