git: 7ffc9b15ba9c - main - ktls: Update documentation for software backends.
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Tue, 14 Dec 2021 19:01:18 UTC
The branch main has been updated by jhb: URL: https://cgit.FreeBSD.org/src/commit/?id=7ffc9b15ba9cd10d3bec232a3741f5fce0b93e7c commit 7ffc9b15ba9cd10d3bec232a3741f5fce0b93e7c Author: John Baldwin <jhb@FreeBSD.org> AuthorDate: 2021-12-14 19:01:05 +0000 Commit: John Baldwin <jhb@FreeBSD.org> CommitDate: 2021-12-14 19:01:05 +0000 ktls: Update documentation for software backends. KTLS no longer supports multiple software backends. Instead, it always uses OCF for software crypto. In particular, the ktls_ocf.ko module no longer exists. The OCF bits for KTLS are compiled into th kernel instead. Sponsored by: Netflix --- share/man/man4/ktls.4 | 19 +++++-------------- 1 file changed, 5 insertions(+), 14 deletions(-) diff --git a/share/man/man4/ktls.4 b/share/man/man4/ktls.4 index 876e9fa57ac0..efb5d7e3cc0a 100644 --- a/share/man/man4/ktls.4 +++ b/share/man/man4/ktls.4 @@ -31,7 +31,7 @@ .\" .\" $FreeBSD$ .\" -.Dd May 26, 2021 +.Dd December 14, 2021 .Dt KTLS 4 .Os .Sh NAME @@ -77,10 +77,10 @@ The available modes are: is not enabled. .It Dv TCP_TLS_MODE_SW TLS records are encrypted or decrypted in the kernel in the socket -layer. -Typically the encryption or decryption is performed in software, -but it may also be performed by co-processors via +layer via .Xr crypto 9 . +Typically the encryption or decryption is performed in software, +but it may also be performed by co-processors. .It Dv TCP_TLS_MODE_IFNET TLS records are encrypted or decrypted by the network interface card (NIC). In this mode, the network stack does not work with encrypted data. @@ -204,16 +204,7 @@ The .Va kern.ipc.mb_use_ext_pgs sysctl controls whether the kernel may use unmapped mbufs. They are required for TLS transmit. -.Ss Backends -The base system includes a software backend for the -.Dv TCP_TLS_MODE_SW -mode which uses -.Xr crypto 9 -to encrypt and decrypt TLS records. -This backend can be enabled by loading the -.Pa ktls_ocf.ko -kernel module. -.Pp +.Ss Supported Hardware The .Xr cxgbe 4 and