[Intel-wired-lan] IPSec offload - ixgbe/i40e ..

Avi Cohen (A) avi.cohen at huawei.com
Mon Oct 16 14:58:34 UTC 2017



> -----Original Message-----
> From: Alexander Duyck [mailto:alexander.duyck at gmail.com]
> Sent: Monday, 16 October, 2017 5:18 PM
> To: Avi Cohen (A)
> Cc: intel-wired-lan at osuosl.org
> Subject: Re: [Intel-wired-lan] IPSec offload - ixgbe/i40e ..
> 
> On Sun, Oct 15, 2017 at 11:47 PM, Avi Cohen (A) <avi.cohen at huawei.com>
> wrote:
> >
> >
> >> -----Original Message-----
> >> From: Alexander Duyck [mailto:alexander.duyck at gmail.com]
> >> Sent: Monday, 16 October, 2017 3:15 AM
> >> To: Avi Cohen (A)
> >> Cc: intel-wired-lan at osuosl.org
> >> Subject: Re: [Intel-wired-lan] IPSec offload - ixgbe/i40e ..
> >>
> >> On Sun, Oct 15, 2017 at 8:12 AM, Avi Cohen (A) <avi.cohen at huawei.com>
> >> wrote:
> >> > Hi,
> >> > These Intel  NIC's:  X540, 82599, I40E - supports IPsec offload
> >>
> >> X540 and 82599 are Ethernet Silicon, but i40e is just a driver. I
> >> assume you mean X710 or one of the parts in that product family. Last
> >> I knew the X710 and
> >> XL710 do not support ipsec, only the 82599 and X540.
> > [Avi Cohen (A)]
> > Yes Alex - I meant the X710 family
> >>
> >> > But I don't see that the drivers  supplied by Intel - handle it
> >> > (??) Can someone tell if this is supported somewhere ?
> >> > Best Regards
> >> > Avi
> >>
> >> As far as I am aware there aren't currently any drivers available for
> >> Linux that support ipsec offload on the X540 or 82599.
> > [Avi Cohen (A)]
> > I saw that these drivers are called 'base drivers' - are there other 'enhanced'
> drivers for linux that do support the IPSec offload ?
> > Best Regards
> > Avi
> 
> Hi Avi,
> 
> The 'base' portion of things is more in reference to the driver mode more than
> anything else. For example we have SR-IOV support so we also have a 'VF'
> driver.
> 
> At this time Intel doesn't have any 'enhanced' Linux drivers that have IPSec
> support.
> 
> I hope that helps to clarify the current state of things.
> 
> - Alex
[Avi Cohen (A)] 
Thank You Alex
Just to clarify: for example,  the X540 NIC HW support IPSec offload, so theoretically - I can  change/add (according the device spec) the SW driver to support this. Is that correct ?
Best Regards
Avi  




More information about the Intel-wired-lan mailing list