]> www.infradead.org Git - users/jedix/linux-maple.git/commit
xfrm: prevent configuration of interface index when offload is used
authorLeon Romanovsky <leonro@nvidia.com>
Tue, 13 May 2025 10:59:19 +0000 (13:59 +0300)
committerSteffen Klassert <steffen.klassert@secunet.com>
Thu, 15 May 2025 07:56:20 +0000 (09:56 +0200)
commitc82b48b63a939e9b0f40bd00f95bcea4502fcada
tree367ac427b2601b71da5f0fc6bd1d927837a65f65
parente86212b6b13a20c5ad404c5597933f57fd0f1519
xfrm: prevent configuration of interface index when offload is used

Both packet and crypto offloads perform decryption while packet is
arriving to the HW from the wire. It means that there is no possible
way to perform lookup on XFRM if_id as it can't be set to be "before' HW.

So instead of silently ignore this configuration, let's warn users about
misconfiguration.

Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
net/xfrm/xfrm_device.c