From aa1322aed5f22479458615bc7184e88a7d07b6ca Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 10 May 2021 16:23:20 +0200
Subject: [PATCH] include: Add XFRM identifiers for per-CPU SAs/acquires

---
 src/include/linux/xfrm.h                                    | 3 +++
 src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c | 2 ++
 2 files changed, 5 insertions(+)

diff --git a/src/include/linux/xfrm.h b/src/include/linux/xfrm.h
index 0c2191bf9..3a9865bd6 100644
--- a/src/include/linux/xfrm.h
+++ b/src/include/linux/xfrm.h
@@ -317,6 +317,8 @@ enum xfrm_attr_type_t {
 	XFRMA_IF_ID,		/* __u32 */
 	XFRMA_MTIMER_THRESH,	/* __u32 in seconds for input SA */
 	XFRMA_SA_DIR,		/* __u8 */
+	XFRMA_NAT_KEEPALIVE_INTERVAL,	/* __u32 in seconds for NAT keepalive */
+	XFRMA_SA_PCPU,		/* __u32 */
 	__XFRMA_MAX
 
 #define XFRMA_OUTPUT_MARK XFRMA_SET_MARK	/* Compatibility */
@@ -432,6 +434,7 @@ struct xfrm_userpolicy_info {
 #define XFRM_POLICY_LOCALOK	1	/* Allow user to override global policy */
 	/* Automatically expand selector to include matching ICMP payloads. */
 #define XFRM_POLICY_ICMP	2
+#define XFRM_POLICY_CPU_ACQUIRE	4
 	__u8				share;
 };
 
diff --git a/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c b/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
index 138e42075..dd205aa0a 100644
--- a/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
+++ b/src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c
@@ -203,6 +203,8 @@ ENUM(xfrm_attr_type_names, XFRMA_UNSPEC, __XFRMA_MAX,
 	"XFRMA_IF_ID",
 	"XFRMA_MTIMER_THRESH",
 	"XFRMA_SA_DIR",
+	"XFRMA_NAT_KEEPALIVE_INTERVAL",
+	"XFRMA_SA_PCPU",
 	"XFRMA_MAX",
 );