commit | 8ac52a65171038ef07e27cc2864e47c47b2e37fa | [log] [tgz] |
---|---|---|
author | developer <developer@mediatek.com> | Mon Jul 01 16:11:43 2024 +0800 |
committer | developer <developer@mediatek.com> | Wed Jul 10 10:55:12 2024 +0800 |
tree | d7236cbec04bf6b623442c2d7d2a8cab37595712 | |
parent | 95b8e2936e1a03f8c7a434385ce3464e8e026de0 [diff] |
[][openwrt][mt7988][crypto][Add support for route-based IPSec] [Description] Add support for route-based IPSec. 1. Refactor dst mac dicover for IPSec In the past, we use tunnel dst IP to find a nexthop, then use nexthop to find dst mac. However, for the route-based vti, we can't find the real nexthop. We should use tunnel dst IP to find dst mac directly. 2. Add check for VTI If the packet has passed through VTI (ex. route-based IPSec), the 'dev_queue_xmit' function called at network layer will cause both skb->mac_header and skb->network_header to point to the IP header. In this situation, 'skb_to_hnat_info' cannot correctly fill in the inner layer information, and it needs to be filled in by 'hnat_bind_crypto_entry'. [Release-log] N/A Change-Id: Ie63a7d18f0cee5b9caca63251fc5fba5f52f1ee3 Reviewed-on: https://gerrit.mediatek.inc/c/openwrt/feeds/mtk_openwrt_feeds/+/9298628
Currently two release branches are supported:
21.02 This is the current in-use branch
git clone -b openwrt-21.02 https://git.openwrt.org/openwrt/openwrt.git
master (will be 24.0x branch later) The next version in development
git clone https://git.openwrt.org/openwrt/openwrt.git
cd openwrt echo "src-git mtk_openwrt_feed https://git01.mediatek.com/openwrt/feeds/mtk-openwrt-feeds" >> feeds.conf.default ./scripts/feeds update -a ./scripts/feeds install -a
21.02 branch
cp -af ./feeds/mtk_openwrt_feed/21.02/files/* . cp -af ./feeds/mtk_openwrt_feed/tools . for file in $(find ./feeds/mtk_openwrt_feed/21.02/patches-base -name "*.patch" | sort); do patch -f -p1 -i ${file}; done for file in $(find ./feeds/mtk_openwrt_feed/21.02/patches-feeds -name "*.patch" | sort); do patch -f -p1 -i ${file}; done
master branch
cp -af ./feeds/mtk_openwrt_feed/master/files/* . for file in $(find ./feeds/mtk_openwrt_feed/master/patches-base -name "*.patch" | sort); do patch -f -p1 -i ${file}; done
make menuconfig
21.02 branch
Target System -> MediaTek Ralink ARM Subtarget -> MT7981 / MT7986 / MT7988 Target Profile -> select as needed
master branch
Target System -> MediaTek Ralink ARM Subtarget -> Filogic 8x0 (MT798x) Target Profile -> select as needed
make V=s -j$(nproc)