drivers/net/ethernet/chelsio/inline_crypto/ch_ktls

Chelsio Terminator 6 inline kernel TLS crypto offload

Hardware-accelerated TLS/SSL encryption and decryption built into Chelsio's Terminator 6 (T6) family of 40/50/100 GbE server NICs, such as the T62100-LP-CR. It lets the kernel hand TLS record processing directly to the adapter, offloading the CPU on busy storage and web-front-end servers.

keep conf=0.88 last_sold=2026 deploy=low replacement=none subsystem=net category=crypto
88%

recommendation

It should stay because Chelsio still sells T6 adapters new in 2025 and the code is actively maintained upstream — netdev and linux-crypto patches were touching it as recently as 2026, including an update to the kernel's new AES library API. Deployments are niche, but the hardware is current and the driver is not abandoned.

repository signals

4 files
2,503 source lines
15 commits, 5y
+167 / −71 lines added / removed, 5y
13 authors, 5y
monthly commits · 2021-04-21 → 2026-04-21 · 15 total · active in 13/61 months
2021 2022 2023 2024 2025 2026 2021-04: 1 commit · +4 −6 2021-05: 1 commit · +81 −1 2021-06: 0 commits · +0 −0 2021-07: 0 commits · +0 −0 2021-08: 0 commits · +0 −0 2021-09: 0 commits · +0 −0 2021-10: 0 commits · +0 −0 2021-11: 0 commits · +0 −0 2021-12: 0 commits · +0 −0 2022-01: 0 commits · +0 −0 2022-02: 0 commits · +0 −0 2022-03: 0 commits · +0 −0 2022-04: 1 commit · +1 −1 2022-05: 0 commits · +0 −0 2022-06: 1 commit · +3 −3 2022-07: 0 commits · +0 −0 2022-08: 1 commit · +7 −1 2022-09: 0 commits · +0 −0 2022-10: 0 commits · +0 −0 2022-11: 1 commit · +12 −14 2022-12: 0 commits · +0 −0 2023-01: 0 commits · +0 −0 2023-02: 0 commits · +0 −0 2023-03: 0 commits · +0 −0 2023-04: 0 commits · +0 −0 2023-05: 0 commits · +0 −0 2023-06: 1 commit · +1 −1 2023-07: 0 commits · +0 −0 2023-08: 0 commits · +0 −0 2023-09: 0 commits · +0 −0 2023-10: 1 commit · +46 −33 2023-11: 0 commits · +0 −0 2023-12: 0 commits · +0 −0 2024-01: 0 commits · +0 −0 2024-02: 0 commits · +0 −0 2024-03: 0 commits · +0 −0 2024-04: 2 commits · +2 −1 2024-05: 1 commit · +1 −1 2024-06: 0 commits · +0 −0 2024-07: 0 commits · +0 −0 2024-08: 0 commits · +0 −0 2024-09: 0 commits · +0 −0 2024-10: 0 commits · +0 −0 2024-11: 0 commits · +0 −0 2024-12: 0 commits · +0 −0 2025-01: 0 commits · +0 −0 2025-02: 0 commits · +0 −0 2025-03: 0 commits · +0 −0 2025-04: 0 commits · +0 −0 2025-05: 1 commit · +1 −1 2025-06: 0 commits · +0 −0 2025-07: 0 commits · +0 −0 2025-08: 0 commits · +0 −0 2025-09: 0 commits · +0 −0 2025-10: 0 commits · +0 −0 2025-11: 0 commits · +0 −0 2025-12: 0 commits · +0 −0 2026-01: 1 commit · +4 −4 2026-02: 2 commits · +4 −4 2026-03: 0 commits · +0 −0 2026-04: 0 commits · +0 −0

sources

  1. lore.kernel.org

    Recent netdev patch traffic in 2026 still touches ch_ktls, indicating active upstream maintenance rather than abandonment.

  2. lore.kernel.org

    linux-crypto changes in January 2026 updated the Chelsio code to a new AES library API, another sign of current upkeep.

  3. chelsio.com

    A 2025-published Chelsio T62100-LP-CR product brief advertises T6 adapters with TLS/SSL and related crypto offload features.

  4. store.chelsio.com

    Chelsio's online store still listed a T6-based adapter for sale, supporting the view that T6 hardware was still sold new in 2025/2026.

  5. kernel.org

    Canonical kernel.org reference for the upstream kernel tree; local Kconfig/source inspection shows CONFIG_CHELSIO_TLS_DEVICE is specifically for Chelsio T6 kernel TLS offload.

codex reasoning notes (technical)

Local shell inspection showed this is a real module-backed driver directory (`chcr_ktls.c`, `module_init`, MODULE_DESCRIPTION) and Kconfig says `CONFIG_CHELSIO_TLS_DEVICE` is for Chelsio T6 kernel TLS offload. `lore_file_timeline` on `drivers/net/ethernet/chelsio/inline_crypto/ch_ktls/chcr_ktls.c` returned active 2026 maintenance URLs on netdev and linux-crypto. A removal-focused `lore_regex` query timed out once and was not retried; timeline evidence showed no removal pattern. Web search found Chelsio's 2025 PDF brief and current store listing for T6 adapters with TLS/SSL crypto offload. Conclusion: niche but still-sold, still-maintained hardware/driver; keep. Source acquisition: lore URLs via `lore_file_timeline`, Chelsio URLs via `web.search`, kernel.org URL by canonical recall from local tree path context.