system/freebsd-src
system/freebsd-src
1
0
Fork 0
mirror of https://github.com/freebsd/freebsd-src synced 2024-09-06 17:18:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

ktls: Update documentation for software backends.

Browse source 
KTLS no longer supports multiple software backends.  Instead, it
always uses OCF for software crypto.  In particular, the ktls_ocf.ko
module no longer exists.  The OCF bits for KTLS are compiled into th
kernel instead.

Sponsored by:	Netflix
This commit is contained in:
John Baldwin 2021-12-14 11:01:05 -08:00
parent 05a1d0f5d7
commit 7ffc9b15ba
1 changed files with 5 additions and 14 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

19
share/man/man4/ktls.4
View file

@ -31,7 +31,7 @@
.\"
.\" $FreeBSD$
.\"
.Dd May 26, 2021
.Dd December 14, 2021
.Dt KTLS 4
.Os
.Sh NAME
@ -77,10 +77,10 @@ The available modes are:
is not enabled.
.It Dv TCP_TLS_MODE_SW
TLS records are encrypted or decrypted in the kernel in the socket
layer.
Typically the encryption or decryption is performed in software,
but it may also be performed by co-processors via
layer via
.Xr crypto 9 .
Typically the encryption or decryption is performed in software,
but it may also be performed by co-processors.
.It Dv TCP_TLS_MODE_IFNET
TLS records are encrypted or decrypted by the network interface card (NIC).
In this mode, the network stack does not work with encrypted data.
@ -204,16 +204,7 @@ The
.Va kern.ipc.mb_use_ext_pgs
sysctl controls whether the kernel may use unmapped mbufs.
They are required for TLS transmit.
.Ss Backends
The base system includes a software backend for the
.Dv TCP_TLS_MODE_SW
mode which uses
.Xr crypto 9
to encrypt and decrypt TLS records.
This backend can be enabled by loading the
.Pa ktls_ocf.ko
kernel module.
.Pp
.Ss Supported Hardware
The
.Xr cxgbe 4
and