lagg: do not advertize support for ipsec offload

It is not implemented, and most likely cannot be, in a robust manner. Reviewed by: Ariel Ehrenberg <[email protected]>, slavash Sponsored by: NVidia networking
freebsd · Dec 17, 2024 · c7d1368 · c7d1368
1 parent 22bb70a
commit c7d1368
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/sys/net/if_lagg.c b/sys/net/if_lagg.c
@@ -692,6 +692,7 @@ lagg_capabilities(struct lagg_softc *sc)
 			ena2 &= lp->lp_ifp->if_capenable2;
 		}
 	} while (pena != ena || pena2 != ena2);
+	ena2 &= ~IFCAP2_BIT(IFCAP2_IPSEC_OFFLOAD);
 
 	/* Get other capabilities from the lagg ports */
 	cap = cap2 = ~0;
@@ -703,6 +704,7 @@ lagg_capabilities(struct lagg_softc *sc)
 		hwa &= lp->lp_ifp->if_hwassist;
 		if_hw_tsomax_common(lp->lp_ifp, &hw_tsomax);
 	}
+	cap2 &= ~IFCAP2_BIT(IFCAP2_IPSEC_OFFLOAD);
 	if (CK_SLIST_FIRST(&sc->sc_ports) == NULL)
 		cap = cap2 = hwa = 0;