commit 73b9fc49b4c0116a04eda3979f64ed9b540b153c
author Steffen Klassert <steffen.klassert@secunet.com> Mon Oct 30 10:04:04 2017 +0100
committer Steffen Klassert <steffen.klassert@secunet.com> Tue Oct 31 09:20:35 2017 +0100
tree 362ece5f48012511aabacfe60ba66a8104d8c12c
parent 2b06cdf3e688b98fcc9945873b5d42792bd4eee0

xfrm: Fix GSO for IPsec with GRE tunnel.

We reset the encapsulation field of the skb too early
in xfrm_output. As a result, the GRE GSO handler does
not segment the packets. This leads to a performance
drop down. We fix this by resetting the encapsulation
field right before we do the transformation, when
the inner headers become invalid.

Fixes: f1bd7d659ef0 ("xfrm: Add encapsulation header offsets while SKB is not encrypted")
Reported-by: Vicente De Luca <vdeluca@zendesk.com>
Signed-off-by: Steffen Klassert <steffen.klassert@secunet.com>