Hello,
I checked the kernel source code and saw that the bonding driver only accepts crypto_offload in active-backup mode.
I wanted to know if there is a solution using switchdev or a DOCA application like IPsec Gateway to enable bonding on ESP traffic, for example?
I can’t use an SF as a secure port in the DOCA IPsec Gateway application because the SF doesn’t have access to the crypto engine resources used for IPsec.
Has anyone here ever managed to perform IPsec packet offload with LACP bonding?
Do you have any ideas on how to achieve this?
Best regards,
Hi armonius,
Thank you for posting your query on NVIDIA Community.
Unfortunately, IPSec with Full Offload over LACP is not currently supported. In addition, there is no committed timeline on the feature request. However, we encourage our customers to stay up-to-date with our new releases as we publish the “New Changes and Features” in every new DOCA/MLNX OFED Release Notes.
Also, I would like to bring to your notice that an active support entitlement is needed to debug issues related to Bluefield2.
If there an active entitlement/support contract in place, please do not hesitate to open a support ticket by emailing enterprisesupport@nvidia.com
For contracts, please reach out to Networking-Contracts@nvidia.com
Thanks,
Namrata.