Commit 340e2a73 authored by Bagas Sanjaya's avatar Bagas Sanjaya Committed by Steffen Klassert
Browse files

Documentation: xfrm_device: Use numbered list for offloading steps



Format xfrm offloading steps as numbered list.

Reviewed-by: default avatarRandy Dunlap <rdunlap@infradead.org>
Tested-by: default avatarRandy Dunlap <rdunlap@infradead.org>
Signed-off-by: default avatarBagas Sanjaya <bagasdotme@gmail.com>
Signed-off-by: default avatarSteffen Klassert <steffen.klassert@secunet.com>
parent 68ec5df1
Loading
Loading
Loading
Loading
+5 −5
Original line number Diff line number Diff line
@@ -153,26 +153,26 @@ the packet's skb. At this point the data should be decrypted but the
IPsec headers are still in the packet data; they are removed later up
the stack in xfrm_input().

	find and hold the SA that was used to the Rx skb::
1. Find and hold the SA that was used to the Rx skb::

		get spi, protocol, and destination IP from packet headers
		/* get spi, protocol, and destination IP from packet headers */
		xs = find xs from (spi, protocol, dest_IP)
		xfrm_state_hold(xs);

	store the state information into the skb::
2. Store the state information into the skb::

		sp = secpath_set(skb);
		if (!sp) return;
		sp->xvec[sp->len++] = xs;
		sp->olen++;

	indicate the success and/or error status of the offload::
3. Indicate the success and/or error status of the offload::

		xo = xfrm_offload(skb);
		xo->flags = CRYPTO_DONE;
		xo->status = crypto_status;

	hand the packet to napi_gro_receive() as usual
4. Hand the packet to napi_gro_receive() as usual.

In ESN mode, xdo_dev_state_advance_esn() is called from
xfrm_replay_advance_esn() for RX, and xfrm_replay_overflow_offload_esn for TX.