net: Add a xfrm validate function to validate_xmit_skb
authorSteffen Klassert <steffen.klassert@secunet.com>
Fri, 14 Apr 2017 08:07:28 +0000 (10:07 +0200)
committerSteffen Klassert <steffen.klassert@secunet.com>
Fri, 14 Apr 2017 08:07:28 +0000 (10:07 +0200)
commitf6e27114a60a0afdec40db1bf7f6da37b565745a
tree2465286baa3d77a51e27c2249db8d14f402b540f
parentb3859c8ebffe26ddf7aec0b23a83389d6f2419f9
net: Add a xfrm validate function to validate_xmit_skb

When we do IPsec offloading, we need a fallback for
packets that were targeted to be IPsec offloaded but
rerouted to a device that does not support IPsec offload.
For that we add a function that checks the offloading
features of the sending device and and flags the
requirement of a fallback before it calls the IPsec
output function. The IPsec output function adds the IPsec
trailer and does encryption if needed.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
include/net/xfrm.h
net/core/dev.c
net/xfrm/xfrm_device.c