]> www.infradead.org Git - users/jedix/linux-maple.git/commit
xfrm: Cache used outbound xfrm states at the policy.
authorSteffen Klassert <steffen.klassert@secunet.com>
Wed, 23 Oct 2024 10:53:43 +0000 (12:53 +0200)
committerSteffen Klassert <steffen.klassert@secunet.com>
Tue, 29 Oct 2024 10:56:12 +0000 (11:56 +0100)
commit0045e3d80613cc7174dc15f189ee6fc4e73b9365
treeb6f1062ea58d90a23f73499db175c105d02ffc18
parent1ddf9916ac09313128e40d6581cef889c0b4ce84
xfrm: Cache used outbound xfrm states at the policy.

Now that we can have percpu xfrm states, the number of active
states might increase. To get a better lookup performance,
we cache the used xfrm states at the policy for outbound
IPsec traffic.

Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Tested-by: Antony Antony <antony.antony@secunet.com>
Tested-by: Tobias Brunner <tobias@strongswan.org>
include/net/xfrm.h
net/xfrm/xfrm_policy.c
net/xfrm/xfrm_state.c