From: Jakub Kicinski Date: Tue, 25 Feb 2025 02:15:19 +0000 (-0800) Subject: Merge branch 'net-mlx5e-move-ipsec-policy-check-after-decryption' X-Git-Url: https://www.infradead.org/git/?a=commitdiff_plain;h=79936fcb77023a2275b028b323d3b50f33ad5947;p=users%2Fjedix%2Flinux-maple.git Merge branch 'net-mlx5e-move-ipsec-policy-check-after-decryption' Tariq Toukan says: ==================== net/mlx5e: Move IPSec policy check after decryption This series by Jianbo adds IPsec policy check after decryption. In current mlx5 driver, the policy check is done before decryption for IPSec crypto and packet offload. This series changes that order to make it consistent with the processing in kernel xfrm. Besides, RX state with UPSPEC selector is supported correctly after new steering table is added after decryption and before the policy check. ==================== Link: https://patch.msgid.link/20250220213959.504304-1-tariqt@nvidia.com Signed-off-by: Jakub Kicinski --- 79936fcb77023a2275b028b323d3b50f33ad5947