denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vici: Update offloading configuration for full packet HW offloading

Browse Source
This commit is contained in:
Tobias Brunner
2023-02-16 13:25:34 +01:00
parent 55719d7de5
commit 2b8f26308f
2 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/vici/vici_config.c
+2
View File
@@ -1042,6 +1042,8 @@ CALLBACK(parse_hw_offload, bool,
enum_map_t map[] = { enum_map_t map[] = {
{ "no", HW_OFFLOAD_NO }, { "no", HW_OFFLOAD_NO },
{ "yes", HW_OFFLOAD_CRYPTO }, { "yes", HW_OFFLOAD_CRYPTO },
{ "crypto", HW_OFFLOAD_CRYPTO },
{ "packet", HW_OFFLOAD_PACKET },
{ "auto", HW_OFFLOAD_AUTO }, { "auto", HW_OFFLOAD_AUTO },
}; };
int d; int d;
src/swanctl/swanctl.opt
+6 -4
View File
@@ -1071,10 +1071,12 @@ connections.<conn>.children.<child>.hw_offload = no
implementation. implementation.
Enable hardware offload for this CHILD_SA, if supported by the IPsec Enable hardware offload for this CHILD_SA, if supported by the IPsec
implementation. The value _yes_ enforces offloading and the installation implementation. The values _crypto_ or _packet_ enforce crypto or full
will fail if it's not supported by either kernel or device. The value _auto_ packet offloading and the installation will fail if the selected mode is not
enables offloading, if it's supported, but the installation does not fail supported by either kernel or device. On Linux, _packet_ also offloads
otherwise. policies, including trap policies. The value _auto_ enables full packet
or crypto offloading, if either is supported, but the installation does not
fail otherwise.
connections.<conn>.children.<child>.copy_df = yes connections.<conn>.children.<child>.copy_df = yes
Whether to copy the DF bit to the outer IPv4 header in tunnel mode. Whether to copy the DF bit to the outer IPv4 header in tunnel mode.