| From: |
| Cosmin Ratiu <cratiu-AT-nvidia.com> |
| To: |
| <netdev-AT-vger.kernel.org> |
| Subject: |
| [PATCH net v5 0/3] macsec: Add support for VLAN filtering in offload mode |
| Date: |
| Mon, 23 Mar 2026 14:36:30 +0200 |
| Message-ID: |
| <20260323123633.756163-1-cratiu@nvidia.com> |
| Cc: |
| Sabrina Dubroca <sd-AT-queasysnail.net>, Andrew Lunn <andrew+netdev-AT-lunn.ch>, "David S . Miller" <davem-AT-davemloft.net>, Eric Dumazet <edumazet-AT-google.com>, Jakub Kicinski <kuba-AT-kernel.org>, Paolo Abeni <pabeni-AT-redhat.com>, Shuah Khan <shuah-AT-kernel.org>, <linux-kselftest-AT-vger.kernel.org>, Cosmin Ratiu <cratiu-AT-nvidia.com>, Dragos Tatulea <dtatulea-AT-nvidia.com> |
| Archive-link: |
| Article |
This short series adds support for VLANs in macsec devices when offload
mode is enabled. This allows VLAN netdevs on top of macsec netdevs to
function, which accidentally used to be the case in the past, but was
broken. This series adds back proper support.
As part of this, the existing nsim-only macsec offload tests were
translated to Python so they can run against real HW and new
traffic-based tests were added for VLAN filter propagation, since
there's currently no uAPI to check VLAN filters.
---
V5:
- Merged tests and macsec lib in a single file.
- Fixed Python linter issues.
- Added CONFIG_MACSEC to tools/testing/selftests/drivers/net/config
V4:
- Migrated nsim-only macsec tests to Python, usable against real hw.
- Ran these tests against both nsim and mlx5.
- Gave up on nsim patches since the tests no longer use them.
V3: https://lore.kernel.org/netdev/20260306151004.2862198-1-c...
- Moved back to net.
- Added proper rollback support for VLAN filters in case of failure.
- Added VLAN as a requirement for the new macsec tests.
V2: https://lore.kernel.org/netdev/20260227090227.1552512-1-c...
- Sent to net-next instead of net because of apparent complexity.
- Changed VLAN filtering to only function in offload mode.
- Added tests.
V1: https://lore.kernel.org/netdev/20260107104723.2750725-1-c...
Cosmin Ratiu (3):
selftests: Migrate nsim-only MACsec tests to Python
selftests: Add MACsec VLAN propagation traffic test
macsec: Support VLAN-filtering lower devices
drivers/net/macsec.c | 44 ++-
tools/testing/selftests/drivers/net/Makefile | 1 +
tools/testing/selftests/drivers/net/config | 1 +
tools/testing/selftests/drivers/net/macsec.py | 305 ++++++++++++++++++
.../selftests/drivers/net/netdevsim/Makefile | 1 -
.../drivers/net/netdevsim/macsec-offload.sh | 117 -------
6 files changed, 346 insertions(+), 123 deletions(-)
create mode 100755 tools/testing/selftests/drivers/net/macsec.py
delete mode 100755 tools/testing/selftests/drivers/net/netdevsim/macsec-offload.sh
--
2.53.0
