Mellanox Innova IPsec Offload Overview
Rev 1.8
23
Mellanox Technologies
Figure 2: IPsec Solution Layers and Components
4.2.2 mlx5_fpga_tools Module
mlx5_fpga_tools module is included in the new kernel installation.
The module allows opening and configuring the character device to be used by the dedicated
mlx_fpga tool for various purposes. Please refer to
Chapter 6,“mlx_fpga Tool” on page 41.
The module is not loaded by default and not required for IPsec offload.
To load it run:
The module depends on the mlx5_core module.
4.2.3 Key Generation and Exchange
The Mellanox Innova IPsec adapter currently supports offloading of the encryption, decryption
and authentication of IPsec traffic. The key generation and exchange protocol, whether done
manually or through IKE protocol, remains within complete ownership of the userspace software
that is used for IPsec connection creation and management (such as iproute2, libreswan,
strongswan and others) and is not affected by the HW or the supplied IPsec kernel module.
The Mellanox IPsec kernel module will only be invoked by the kernel offload API once the key
and SPI values are determined (whether manually or by IKE) and crypto offload is enabled. The
module will update the security association database on the FPGA/DDR so that crypto offload
can occur while traffic is running.
modprobe mlx5_fpga_tools
Содержание Innova IPsec
Страница 1: ...Mellanox Technologies www mellanox com Mellanox Innova IPsec Ethernet Adapter Card User Manual Rev 1 8...
Страница 53: ...Specifications Rev 1 8 53 Mellanox Technologies Figure 5 Mechanical Drawing of MNV101512A BCIT 167 65 68 90...
Страница 54: ...Rev 1 8 54 Mellanox Technologies 9 5 Bracket Mechanical Drawing Figure 6 Single Port Tall Bracket 21 6 120 02...
Страница 55: ...Specifications Rev 1 8 55 Mellanox Technologies Figure 7 Single Port Short Bracket 80 3 22 83...
