Merge pull request #437 from trueos/fbsdm-update-20191210 Fbsdm update 20191210
| Delta | File | |
|---|---|---|
| +3,014 | -2,901 | sys/dev/syscons/syscons.c |
| +834 | -0 | sys/dev/mlx5/mlx5_en/mlx5_en_hw_tls.c |
| +666 | -0 | lib/libkvm/kvm_minidump_powerpc64_hpt.c |
| +496 | -0 | sys/arm/mv/a37x0_spi.c |
| +484 | -0 | sys/arm/mv/a37x0_iic.c |
| +233 | -201 | sys/kern/vfs_subr.c |
| +5,727 | -3,102 | 640 files not shown |
| +13,394 | -6,513 | 646 files |
Merge pull request #436 from trueos/fbsd-head-20191210 Fbsd head 20191210
| Delta | File | |
|---|---|---|
| +3,014 | -2,901 | sys/dev/syscons/syscons.c |
| +834 | -0 | sys/dev/mlx5/mlx5_en/mlx5_en_hw_tls.c |
| +666 | -0 | lib/libkvm/kvm_minidump_powerpc64_hpt.c |
| +496 | -0 | sys/arm/mv/a37x0_spi.c |
| +484 | -0 | sys/arm/mv/a37x0_iic.c |
| +233 | -201 | sys/kern/vfs_subr.c |
| +5,727 | -3,102 | 640 files not shown |
| +13,394 | -6,513 | 646 files |
Merge branch 'master' of https://github.com/freebsd/freebsd into fbsdm-update-20191210 Signed-off-by: Martin Wilke <miwi at ixsystems.com>
| Delta | File | |
|---|---|---|
| +3,014 | -2,901 | sys/dev/syscons/syscons.c |
| +834 | -0 | sys/dev/mlx5/mlx5_en/mlx5_en_hw_tls.c |
| +666 | -0 | lib/libkvm/kvm_minidump_powerpc64_hpt.c |
| +496 | -0 | sys/arm/mv/a37x0_spi.c |
| +484 | -0 | sys/arm/mv/a37x0_iic.c |
| +233 | -201 | sys/kern/vfs_subr.c |
| +5,727 | -3,102 | 640 files not shown |
| +13,394 | -6,513 | 646 files |
Merge branch 'master' of https://github.com/freebsd/freebsd into fbsd-head-20191210 Signed-off-by: Martin Wilke <miwi at ixsystems.com>
| Delta | File | |
|---|---|---|
| +3,014 | -2,901 | sys/dev/syscons/syscons.c |
| +834 | -0 | sys/dev/mlx5/mlx5_en/mlx5_en_hw_tls.c |
| +666 | -0 | lib/libkvm/kvm_minidump_powerpc64_hpt.c |
| +496 | -0 | sys/arm/mv/a37x0_spi.c |
| +484 | -0 | sys/arm/mv/a37x0_iic.c |
| +233 | -201 | sys/kern/vfs_subr.c |
| +5,727 | -3,102 | 640 files not shown |
| +13,394 | -6,513 | 646 files |
Implement hardware TLS via send tags for mlx5en(4), which is supported by
ConnectX-6 DX.
Currently TLS v1.2 and v1.3 with AES 128/256 crypto over TCP/IP (v4
and v6) is supported.
A per PCI device UMA zone is used to manage the memory of the send
tags. To optimize performance some crypto contexts may be cached by
the UMA zone, until the UMA zone finishes the memory of the given send
tag.
An asynchronous task is used manage setup of the send tags towards the
firmware. Most importantly setting the AES 128/256 bit pre-shared keys
for the crypto context.
Updating the state of the AES crypto engine and encrypting data, is
all done in the fast path. Each send tag tracks the TCP sequence
number in order to detect non-contiguous blocks of data, which may
require a dump of prior unencrypted data, to restore the crypto state
[15 lines not shown]| Delta | File | |
|---|---|---|
| +834 | -0 | sys/dev/mlx5/mlx5_en/mlx5_en_hw_tls.c |
| +299 | -73 | sys/dev/mlx5/mlx5_en/mlx5_en_tx.c |
| +104 | -0 | sys/dev/mlx5/mlx5_en/en_hw_tls.h |
| +66 | -9 | sys/dev/mlx5/mlx5_en/mlx5_en_main.c |
| +26 | -4 | sys/dev/mlx5/mlx5_en/en.h |
| +20 | -0 | sys/dev/mlx5/mlx5_en/mlx5_en_ethtool.c |
| +1,349 | -86 | 5 files not shown |
| +1,372 | -88 | 11 files |