XFRM Framework

• XFRM device - offloading the IPsec computations
  • Overview
  • Callbacks to implement
  • Flow
• XFRM proc - /proc/net/xfrm_* files
  • Transformation Statistics
• XFRM SA Migrate State
  • Overview
  • SA Identification
  • Supported Attributes
  • Flags
  • Migration Steps
  • Feature Detection
  • Userspace Notification on Success
  • Error Handling
• XFRM sync
  • 1) Message Structure
  • 2) TLVS reflect the different parameters
  • 3) Default configurations for the parameters
  • 4) Message types
  • 5) Exceptions to threshold settings
• XFRM Syscall
  • /proc/sys/net/core/xfrm_* Variables