Steffen Klassert f203b76d78 xfrm: Add virtual xfrm interfaces ...

This patch adds support for virtual xfrm interfaces.
Packets that are routed through such an interface
are guaranteed to be IPsec transformed or dropped.
It is a generic virtual interface that ensures IPsec
transformation, no need to know what happens behind
the interface. This means that we can tunnel IPv4 and
IPv6 through the same interface and support all xfrm
modes (tunnel, transport and beet) on it.

Co-developed-by: Lorenzo Colitti <lorenzo@google.com>
Co-developed-by: Benedict Wong <benedictwong@google.com>
Signed-off-by: Lorenzo Colitti <lorenzo@google.com>
Signed-off-by: Benedict Wong <benedictwong@google.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
Acked-by: Shannon Nelson <shannon.nelson@oracle.com>
Tested-by: Benedict Wong <benedictwong@google.com>
Tested-by: Antony Antony <antony@phenome.org>
Reviewed-by: Eyal Birger <eyal.birger@gmail.com>

2018-06-23 16:07:25 +02:00

..

Kconfig

xfrm: Add virtual xfrm interfaces

2018-06-23 16:07:25 +02:00

Makefile

xfrm: Add virtual xfrm interfaces

2018-06-23 16:07:25 +02:00

xfrm_algo.c

xfrm: use IS_ENABLED() instead of checking for built-in or module

2016-09-10 21:19:11 -07:00

xfrm_device.c

xfrm: Extend the output_mark to support input direction and masking.

2018-06-23 16:06:57 +02:00

xfrm_hash.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_hash.h

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_input.c

xfrm: Add virtual xfrm interfaces

2018-06-23 16:07:25 +02:00

xfrm_interface.c

xfrm: Add virtual xfrm interfaces

2018-06-23 16:07:25 +02:00

xfrm_ipcomp.c

net: xfrm: use preempt-safe this_cpu_read() in ipcomp_alloc_tfms()

2018-03-13 07:46:37 +01:00

xfrm_output.c

xfrm: Extend the output_mark to support input direction and masking.

2018-06-23 16:06:57 +02:00

xfrm_policy.c

xfrm: Add virtual xfrm interfaces

2018-06-23 16:07:25 +02:00

xfrm_proc.c

proc: introduce proc_create_net_single

2018-05-16 07:24:30 +02:00

xfrm_replay.c

xfrm: Fix ESN sequence number handling for IPsec GSO packets.

2018-03-01 08:14:50 +01:00

xfrm_state.c

xfrm: Add a new lookup key to match xfrm interfaces.

2018-06-23 16:07:15 +02:00

xfrm_sysctl.c

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

xfrm_user.c

xfrm: Add a new lookup key to match xfrm interfaces.

2018-06-23 16:07:15 +02:00