Add crypto offload support - #54
Open
lxin wants to merge 2 commits into
Open
Conversation
The hp_key and key fields are brought back to quic_crypto to allow setting QUIC offload flows in NIC drivers. Signed-off-by: Xin Long <lucien.xin@gmail.com>
This patch adds support for offloading QUIC encryption and decryption to NICs via the quicdev_ops interface. Functions quic_sock_dev_add and quic_sock_dev_del program TX and RX flows using struct quic_crypto_info and set the offload flags in the crypto module. The build system detects quic_offload.h and defines -DQUIC_OFFLOAD to enable offload support conditionally. With this patch, kernel QUIC sockets can leverage NIC hardware to reduce CPU usage and improve performance. Signed-off-by: Xin Long <lucien.xin@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This patch introduces support for QUIC crypto offload, allowing the driver to program NIC hardware with encryption keys and initialization vectors. This enables the NIC to handle QUIC record encryption and decryption directly.
This is currently a draft implementation intended to test hardware offload functionality. It depends on the kernel changes from lxin/net-next: quic-offload, and is being tested on select Broadcom bnxt NICs.