net/mlx5e: Ignore IPsec replay window values on sender side
authorLeon Romanovsky <leonro@nvidia.com>
Sun, 26 Nov 2023 09:08:10 +0000 (11:08 +0200)
committerSaeed Mahameed <saeedm@nvidia.com>
Wed, 24 Jan 2024 08:15:37 +0000 (00:15 -0800)
commit315a597f9bcfe7fe9980985031413457bee95510
tree202091857ca07c6d2298576820618887204fb207
parent20f5468a7988dedd94a57ba8acd65ebda6a59723
net/mlx5e: Ignore IPsec replay window values on sender side

XFRM stack doesn't prevent from users to configure replay window
in TX side and strongswan sets replay_window to be 1. It causes
to failures in validation logic when trying to offload the SA.

Replay window is not relevant in TX side and should be ignored.

Fixes: cded6d80129b ("net/mlx5e: Store replay window in XFRM attributes")
Signed-off-by: Aya Levin <ayal@nvidia.com>
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Signed-off-by: Saeed Mahameed <saeedm@nvidia.com>
drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c