Page MenuHomeFreeBSD

ktls: Always create a software backend for receive sessions.
ClosedPublic

Authored by jhb on Oct 19 2021, 5:51 PM.
Tags
None
Referenced Files
Unknown Object (File)
Jan 16 2024, 5:40 AM
Unknown Object (File)
Jan 12 2024, 8:54 AM
Unknown Object (File)
Dec 22 2023, 8:46 PM
Unknown Object (File)
Dec 20 2023, 6:26 AM
Unknown Object (File)
Nov 20 2023, 2:46 PM
Unknown Object (File)
Oct 15 2023, 1:26 PM
Unknown Object (File)
Sep 24 2023, 12:02 PM
Unknown Object (File)
Sep 23 2023, 1:37 AM
Subscribers

Details

Summary

A future change to TOE TLS will require a software fallback for the
first few TLS records received. Future support for NIC TLS on receive
will also require a software fallback for certain cases.

Sponsored by: Chelsio Communications

Diff Detail

Repository
rS FreeBSD src repository - subversion
Lint
Lint Passed
Unit
No Test Coverage
Build Status
Buildable 42260
Build 39148: arc lint + arc unit

Event Timeline

jhb requested review of this revision.Oct 19 2021, 5:51 PM

FYI, this effectively disables support for AES-CBC ciphers via TOE TLS. In the future I may add it back by adding a software decryption for MTE, but probably restrict it by default to only being enabled for TOE where the software route is only used for a few records.

This revision is now accepted and ready to land.Oct 19 2021, 10:19 PM