From owner-freebsd-drivers@FreeBSD.ORG Fri Oct 9 19:03:33 2009 Return-Path: Delivered-To: freebsd-drivers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id E618B1065679 for ; Fri, 9 Oct 2009 19:03:33 +0000 (UTC) (envelope-from julian@elischer.org) Received: from outH.internet-mail-service.net (outh.internet-mail-service.net [216.240.47.231]) by mx1.freebsd.org (Postfix) with ESMTP id C8FA18FC15 for ; Fri, 9 Oct 2009 19:03:33 +0000 (UTC) Received: from idiom.com (mx0.idiom.com [216.240.32.160]) by out.internet-mail-service.net (Postfix) with ESMTP id A107DDB4C9; Fri, 9 Oct 2009 12:03:33 -0700 (PDT) X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e X-Client-Authorized: MaGic Cook1e Received: from julian-mac.elischer.org (home.elischer.org [216.240.48.38]) by idiom.com (Postfix) with ESMTP id D60AC2D601B; Fri, 9 Oct 2009 12:03:32 -0700 (PDT) Message-ID: <4ACF8907.9000905@elischer.org> Date: Fri, 09 Oct 2009 12:03:35 -0700 From: Julian Elischer User-Agent: Thunderbird 2.0.0.23 (Macintosh/20090812) MIME-Version: 1.0 To: pyunyh@gmail.com References: <20091008174521.GE3843@michelle.cdnetworks.com> <2a41acea0910091117q6cfab252sa8d5dfcf0182b660@mail.gmail.com> <20091009184831.GH3843@michelle.cdnetworks.com> In-Reply-To: <20091009184831.GH3843@michelle.cdnetworks.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Siquijor Philips , freebsd-net@freebsd.org, sam@FreeBSD.org, Jack Vogel , freebsd-drivers@freebsd.org Subject: Re: intel 82576 ipsec offload? X-BeenThere: freebsd-drivers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Writing device drivers for FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 09 Oct 2009 19:03:34 -0000 Pyun YongHyeon wrote: > On Fri, Oct 09, 2009 at 11:17:00AM -0700, Jack Vogel wrote: >> I am Jack, the network engineer at Intel responsible for all FreeBSD wired >> lan drivers. >> This is the first I've seen about this. Our understanding was that the >> infrastructure needed >> to do IPSec was not available for either Linux or FreeBSD, can you please >> explain things? >> > > I guess we already have crypto(9) infrastructure to support IPSec > in kernel. CCed to sam who may know what is required to implement > IPSec offloading in ethernet driver. > I guess what is required is dependent on whether it's just crypto support, or whether the card is expected to track all the security associations, or whether it expects to track just a subset of them. I'm guessing that the latter may be the case.