]> git.ipfire.org Git - thirdparty/kernel/linux.git/commitdiff
xfrm: config: add CONFIG_XFRM_IPTFS
authorChristian Hopps <chopps@labn.net>
Thu, 14 Nov 2024 07:06:58 +0000 (02:06 -0500)
committerSteffen Klassert <steffen.klassert@secunet.com>
Thu, 5 Dec 2024 09:00:53 +0000 (10:00 +0100)
Add new Kconfig option to enable IP-TFS (RFC9347) functionality.

Signed-off-by: Christian Hopps <chopps@labn.net>
Tested-by: Antony Antony <antony.antony@secunet.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>
net/xfrm/Kconfig

index d7b16f2c23e968bf3980e925e67db78462d826c9..f0157702718ff630d0eb055b899b4589a8e43b6d 100644 (file)
@@ -135,6 +135,22 @@ config NET_KEY_MIGRATE
 
          If unsure, say N.
 
+config XFRM_IPTFS
+       tristate "IPsec IP-TFS/AGGFRAG (RFC 9347) encapsulation support"
+       depends on XFRM
+       help
+         Information on the IP-TFS/AGGFRAG encapsulation can be found
+         in RFC 9347. This feature supports demand driven (i.e.,
+         non-constant send rate) IP-TFS to take advantage of the
+         AGGFRAG ESP payload encapsulation. This payload type
+         supports aggregation and fragmentation of the inner IP
+         packet stream which in turn yields higher small-packet
+         bandwidth as well as reducing MTU/PMTU issues. Congestion
+         control is unimplementated as the send rate is demand driven
+         rather than constant.
+
+         If unsure, say N.
+
 config XFRM_ESPINTCP
        bool