I have a connectx6 dx with crypto. ethtool shows esp-hw-offload: on. I create some virtual functions, pass one to a virtual machine and the vm works, i.e. has functional networking but ethtool in the vm shows esp_hw_offload: off. I am certain this is a proper crypto enabled card, MCX623435AC-CDA_Ax. CRYPTO_POLICY is set to 2 (tried 1 earlier), mstconfig doesnt show any other crypto or ipsec parameters. I’ve tried switchdev and legacy modes. Is this supposed to work?
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| How to enable IPsec crypto offload on CX6? | 2 | 997 | January 3, 2024 | |
| ConnectX-6 Dx Crypto Enable, impossible to enable ipsec_packet on VF | 3 | 281 | July 6, 2026 | |
| How to use function esp offload? | 2 | 954 | March 30, 2024 | |
| How to remove [fixed] offload on CX6 | 2 | 774 | March 30, 2024 | |
| IPSec Offload in ConnectX-6 NIC | 2 | 1731 | January 11, 2024 | |
| IPsec Crypto Offload on Crypto Enabled BF-3 | 1 | 488 | March 15, 2024 | |
| ConnectX-6 Dx Crypto and Secure Boot, XDP Hardware offload not possible because of IPSec? | 1 | 1622 | February 14, 2021 | |
| Missing "full_offload" parameter for full IPSec offload on ConnectX-6 DX | 2 | 790 | October 13, 2021 | |
| How to enable ConnectX-5 NIC ipsec_offload capability | 2 | 696 | July 8, 2021 | |
| CX6-DX Crypto enable card IPsec full offload performance | 1 | 61 | July 21, 2026 |