STRUCT MACSEC_OPS(9)

💖 struct macsec_ops(9) 💖

okay so this is struct macsec_ops from the Kernel API Manual — literally the whole vibe is "MACsec offloading operations", i.e. the ops table a driver fills in so hardware can do the MACsec thing instead of your poor CPU 😭 it's giving very much "let the NIC cook" energy 🔥

---

✨ NAME ✨

struct macsec_ops — the MACsec offloading operations struct 🎀

---

🌸 SYNOPSIS 🌸

bestie, here's the whole thing, look at all these function pointers 👑

struct macsec_ops {
    int (*mdo_dev_open)(struct macsec_context *ctx);
    int (*mdo_dev_stop)(struct macsec_context *ctx);
    int (*mdo_add_secy)(struct macsec_context *ctx);
    int (*mdo_upd_secy)(struct macsec_context *ctx);
    int (*mdo_del_secy)(struct macsec_context *ctx);
    int (*mdo_add_rxsc)(struct macsec_context *ctx);
    int (*mdo_upd_rxsc)(struct macsec_context *ctx);
    int (*mdo_del_rxsc)(struct macsec_context *ctx);
    int (*mdo_add_rxsa)(struct macsec_context *ctx);
    int (*mdo_upd_rxsa)(struct macsec_context *ctx);
    int (*mdo_del_rxsa)(struct macsec_context *ctx);
    int (*mdo_add_txsa)(struct macsec_context *ctx);
    int (*mdo_upd_txsa)(struct macsec_context *ctx);
    int (*mdo_del_txsa)(struct macsec_context *ctx);
    int (*mdo_get_dev_stats)(struct macsec_context *ctx);
    int (*mdo_get_tx_sc_stats)(struct macsec_context *ctx);
    int (*mdo_get_tx_sa_stats)(struct macsec_context *ctx);
    int (*mdo_get_rx_sc_stats)(struct macsec_context *ctx);
    int (*mdo_get_rx_sa_stats)(struct macsec_context *ctx);
    int (*mdo_insert_tx_tag)(struct phy_device *phydev, struct sk_buff *skb);
    unsigned int needed_headroom;
    unsigned int needed_tailroom;
    bool rx_uses_md_dst;
};

---

🦋 Members 🦋

so every single one of these is a callback the kernel will hit up when the matching thing happens. no skipping, we're listing all of them 🫶

• mdo_dev_open — gets called when the MACsec interface transitions to the up state ⭐
• mdo_dev_stop — gets called when the MACsec interface transitions to the down state 💀
• mdo_add_secy — gets called when a new SecY is added ✨
• mdo_upd_secy — gets called when the SecY flags are changed or the MAC address of the MACsec interface is changed 🌈
• mdo_del_secy — gets called when the hw offload is disabled or the MACsec interface is removed 💅
• mdo_add_rxsc — gets called when a new RX SC is added 🎀
• mdo_upd_rxsc — gets called when a certain RX SC is updated 🦋
• mdo_del_rxsc — gets called when a certain RX SC is removed 🍓
• mdo_add_rxsa — gets called when a new RX SA is added 🌸
• mdo_upd_rxsa — gets called when a certain RX SA is updated 💜
• mdo_del_rxsa — gets called when a certain RX SA is removed 🧚
• mdo_add_txsa — gets called when a new TX SA is added ⭐
• mdo_upd_txsa — gets called when a certain TX SA is updated ✨
• mdo_del_txsa — gets called when a certain TX SA is removed 🦋
• mdo_get_dev_stats — gets called when dev stats are read 🔥
• mdo_get_tx_sc_stats — gets called when TX SC stats are read 🔥
• mdo_get_tx_sa_stats — gets called when TX SA stats are read 🔥
• mdo_get_rx_sc_stats — gets called when RX SC stats are read 🔥
• mdo_get_rx_sa_stats — gets called when RX SA stats are read 🔥
• mdo_insert_tx_tag — gets called to insert the TX tag 🏷️
• needed_headroom — number of bytes reserved at the beginning of the sk_buff for the TX tag 📏
• needed_tailroom — number of bytes reserved at the end of the sk_buff for the TX tag 📏
• rx_uses_md_dst — whether MACsec device offload supports sk_buff md_dst 👑

---

🌟 SEE ALSO 🌟

go read the Kernel file ./include/net/macsec.h bestie, and also these iconic structs:

• struct macsec_key(9)
• struct macsec_rx_sa(9)
• struct macsec_rx_sc(9)
• struct macsec_tx_sa(9)
• struct macsec_tx_sc(9)
• struct macsec_secy(9)
• struct macsec_context(9)

---

ngl this page came from ./include/net and it's dated October 2026 — yes we're being that specific. mwah, go off 💋✨

okay that's the whole page, you ate that fr fr 🫶💖