net/mlx5e: Support routed networks during IPsec MACs initialization
authorAlexandre Cassen <acassen@corp.free.fr>
Tue, 22 Jul 2025 14:23:47 +0000 (17:23 +0300)
committerJakub Kicinski <kuba@kernel.org>
Fri, 25 Jul 2025 22:27:54 +0000 (15:27 -0700)
commit71670f766b8f4c1490e07ad4394e8e27c03b2e91
treeb4c600e202d74a7d06ce1cf9ba80e9f919f70f9a
parentcf51016ba8c343329f1495194fd1354d4c6e5cf1
net/mlx5e: Support routed networks during IPsec MACs initialization

Remote IPsec tunnel endpoint may refer to a network segment that is
not directly connected to the host. In such a case, IPsec tunnel
endpoints are connected to a router and reachable via a routing path.
In IPsec packet offload mode, HW is initialized with the MAC address
of both IPsec tunnel endpoints.

Extend the current IPsec init MACs procedure to resolve nexthop for
routed networks. Direct neighbour lookup and probe is still used
for directly connected networks and as a fallback mechanism if fib
lookup fails.

Signed-off-by: Alexandre Cassen <acassen@corp.free.fr>
Signed-off-by: Leon Romanovsky <leonro@nvidia.com>
Reviewed-by: Cosmin Ratiu <cratiu@nvidia.com>
Signed-off-by: Tariq Toukan <tariqt@nvidia.com>
Reviewed-by: Michal Swiatkowski <michal.swiatkowski@linux.intel.com>
Link: https://patch.msgid.link/1753194228-333722-2-git-send-email-tariqt@nvidia.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
drivers/net/ethernet/mellanox/mlx5/core/en_accel/ipsec.c