Steffen Klassert 73b9fc49b4 xfrm: Fix GSO for IPsec with GRE tunnel. ...

We reset the encapsulation field of the skb too early
in xfrm_output. As a result, the GRE GSO handler does
not segment the packets. This leads to a performance
drop down. We fix this by resetting the encapsulation
field right before we do the transformation, when
the inner headers become invalid.

Fixes: f1bd7d659ef0 ("xfrm: Add encapsulation header offsets while SKB is not encrypted")
Reported-by: Vicente De Luca <vdeluca@zendesk.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>

2017-10-31 09:20:35 +01:00

..

Kconfig

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next

2017-02-16 21:25:49 -05:00

Makefile

xfrm: fix xfrm_dev_event() missing when compile without CONFIG_XFRM_OFFLOAD

2017-06-07 08:16:27 +02:00

xfrm_algo.c

xfrm: use IS_ENABLED() instead of checking for built-in or module

2016-09-10 21:19:11 -07:00

xfrm_device.c

xfrm: Fix negative device refcount on offload failure.

2017-09-11 10:36:51 +02:00

xfrm_hash.c

…

xfrm_hash.h

xfrm: use "unsigned int" in __xfrm6_pref_hash()

2017-03-24 07:03:12 +01:00

xfrm_input.c

vti: fix NULL dereference in xfrm_input()

2017-09-13 10:15:24 +02:00

xfrm_ipcomp.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2013-11-04 13:48:30 -05:00

xfrm_output.c

xfrm: Fix GSO for IPsec with GRE tunnel.

2017-10-31 09:20:35 +01:00

xfrm_policy.c

xfrm: Fix xfrm_dst_cache memleak

2017-10-24 13:40:36 +02:00

xfrm_proc.c

proc: Reduce cache miss in xfrm_statistics_seq_show

2016-09-30 01:50:45 -04:00

xfrm_replay.c

xfrm: Add xfrm_replay_overflow functions for offloading

2017-04-14 10:07:01 +02:00

xfrm_state.c

xfrm: Clear sk_dst_cache when applying per-socket policy.

2017-10-26 08:19:03 +02:00

xfrm_sysctl.c

net: xfrm: Change u32 sysctl entries to use proc_douintvec

2016-09-07 23:17:53 -07:00

xfrm_user.c

ipsec: Fix aborted xfrm policy dump crash

2017-10-23 09:35:48 +02:00