[Swan] How to tell if an IPSec tunnel uses HW offloading

[Paul Wouters]

On Tue, 6 Jun 2023, Brady Johnson wrote:

> I created an IPSec tunnel using an XFRM interface and would like to know if there is a way to check if it is using NIC HW offloading.
> 
> I checked the logs, and the only mention of offloading that I see is the following:


> And here is the IPSec tunnel config file:

Can you set plutodebug=all and then check for these messages:

                dbg("xfrm: esp-hw-offload set via interface %s for IPsec SA", sa->nic_offload_dev);
         } else {
                 dbg("xfrm: esp-hw-offload not set for IPsec SA");

We should probably have a non-dbg message for these.

Paul