Rev 1.8
22
Mellanox Technologies
4.1.1 Offloaded IPsec Protocols and Internet Protocols
This section lists IPsec protocols and Internet Protocols that can be offloaded to the Mellanox
Innova IPsec adapter.
4.1.1.1 IPsec Protocols
• ESP modes - Tunnel mode, Transport mode
4.1.1.2 Internet Protocols
• IPv4
• IPv6
4.2
IPsec Offload Kernel and Driver
In order to install the kernel and driver, please refer to
Chapter 5,“IPsec Offload Software
Installation and Operation” on page 25
The Mellanox Innova IPsec offload solution is integrated into the latest IPsec framework in the
Linux kernel, IP-XFRM framework, using the IP-XFRM offload API provided by the kernel.
The IP-XFRM framework is exposed to the user through various software implementations for
IPsec connection creation and management (such as iproute2, libreswan, strongswan and others).
Upon setting up an IPsec connection, the user can choose whether to enable the Mellanox Innova
IPsec offload on the specific IPsec security association (SA) that is created once the connection is
generated. See
Section 5.3.2, “Setting up an Offloaded IPsec Connection,” on page 37
. Security
associations that are not set to be offloaded will still undergo encryption/decryption operations by
the Linux kernel.
4.2.1 Mellanox Innova IPsec Ethernet Driver Module
The Mellanox Innova IPsec adapter has a dedicated driver in the form of a kernel module,
mlx5_core.ko. The driver performs the following:
• Configures the offload settings and modes in HW.
• Manages the offloaded security associations database in HW and ensures its validity.
• Ensures and maintains the flow of packets from kernel network stack to the Mellanox Innova
IPsec adapter for offloading of encryption and from the Mellanox Innova IPsec adapter to
kernel network stack after decryption offloading.
illustrates the IPsec solution layers and components.
For list of supported protocols, please refer to
Mellanox Innova IPsec EN Release Notes.
Содержание Innova IPsec
Страница 1: ...Mellanox Technologies www mellanox com Mellanox Innova IPsec Ethernet Adapter Card User Manual Rev 1 8...
Страница 53: ...Specifications Rev 1 8 53 Mellanox Technologies Figure 5 Mechanical Drawing of MNV101512A BCIT 167 65 68 90...
Страница 54: ...Rev 1 8 54 Mellanox Technologies 9 5 Bracket Mechanical Drawing Figure 6 Single Port Tall Bracket 21 6 120 02...
Страница 55: ...Specifications Rev 1 8 55 Mellanox Technologies Figure 7 Single Port Short Bracket 80 3 22 83...
