Commit 340e2a73 authored by Bagas Sanjaya's avatar Bagas Sanjaya Committed by Steffen Klassert
Browse files

Documentation: xfrm_device: Use numbered list for offloading steps 



Format xfrm offloading steps as numbered list.

Reviewed-by: default avatarRandy Dunlap <rdunlap@infradead.org>
Tested-by: default avatarRandy Dunlap <rdunlap@infradead.org>
Signed-off-by: default avatarBagas Sanjaya <bagasdotme@gmail.com>
Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
parent 68ec5df1

Documentation/networking/xfrm_device.rst

+5 −5
Original line number Diff line number Diff line
@@ -153,26 +153,26 @@ the packet's skb. At this point the data should be decrypted but the 
IPsec headers are still in the packet data; they are removed later up

the stack in xfrm_input().



	find and hold the SA that was used to the Rx skb::

1. Find and hold the SA that was used to the Rx skb::



		get spi, protocol, and destination IP from packet headers

		/* get spi, protocol, and destination IP from packet headers */

		xs = find xs from (spi, protocol, dest_IP)

		xfrm_state_hold(xs);



	store the state information into the skb::

2. Store the state information into the skb::



		sp = secpath_set(skb);

		if (!sp) return;

		sp->xvec[sp->len++] = xs;

		sp->olen++;



	indicate the success and/or error status of the offload::

3. Indicate the success and/or error status of the offload::



		xo = xfrm_offload(skb);

		xo->flags = CRYPTO_DONE;

		xo->status = crypto_status;



	hand the packet to napi_gro_receive() as usual

4. Hand the packet to napi_gro_receive() as usual.



In ESN mode, xdo_dev_state_advance_esn() is called from

xfrm_replay_advance_esn() for RX, and xfrm_replay_overflow_offload_esn for TX.