kernel-ipsec: Add flag to enable hardware offloading for an IPsec SA

diff --git a/src/libcharon/kernel/kernel_ipsec.h b/src/libcharon/kernel/kernel_ipsec.h
index 0ad566068bf2c7da1ee6615db38be765c3ccd376..6fafeb7605fb3add4c7595c68abdea63c19432e4 100644 (file)
--- a/src/libcharon/kernel/kernel_ipsec.h
+++ b/src/libcharon/kernel/kernel_ipsec.h
@@ -91,6 +91,8 @@ struct kernel_ipsec_add_sa_t {
        uint16_t cpi;
        /** TRUE to enable UDP encapsulation for NAT traversal */
        bool encap;
+       /** TRUE to enable hardware offloading if available */
+       bool hw_offload;
        /** TRUE to use Extended Sequence Numbers */
        bool esn;
        /** TRUE if initiator of the exchange creating the SA */