RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.

Description of problem:

KTLS is a Linux Kernel implementation of the TLS protocol.

Using it give the application access to features such as hardware offloading, and 'zerocopy' on sending, due to encryption being handled in kernel space. (It encrypts directly in the desired send buffer)

Having KTLS in QEMU live migration may save up a significant amount of cpu time, and probably improve Live Migration performance.


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

I did some studying on KTLS usage, and tried to understand how to apply that on QEMU.

After some reading in the theme, and talking to David Gilbert, I found out GnuTLS (which is currently used in QEMU) is already implementing this:
https://gitlab.com/gnutls/gnutls/-/issues/1113 

I did some reading in the QEMU code that interfaces with GnuTLS, and even tested some WIP code.

Next steps:
- Wait for this feature to be completed (merge request in gitlab),
- Make the required changes in QEMU to make use of KTLS,
- Help reviewing the change in GnuTLS, sending any acquired numbers,
- Send QEMU change upstream.

Move RHEL-AV bugs to RHEL9. If necessary to resolve in RHEL8, then clone to the current RHEL8 release.