From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id 34B8AA0352; Sat, 9 Nov 2019 12:26:23 +0100 (CET) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 455C61BFDF; Sat, 9 Nov 2019 12:26:22 +0100 (CET) Received: from mx0b-0016f401.pphosted.com (mx0a-0016f401.pphosted.com [67.231.148.174]) by dpdk.org (Postfix) with ESMTP id 3AABE1BFDD for ; Sat, 9 Nov 2019 12:26:21 +0100 (CET) Received: from pps.filterd (m0045849.ppops.net [127.0.0.1]) by mx0a-0016f401.pphosted.com (8.16.0.42/8.16.0.42) with SMTP id xA9BPU4l030018; Sat, 9 Nov 2019 03:26:19 -0800 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=marvell.com; h=from : to : cc : subject : date : message-id : references : in-reply-to : content-type : content-transfer-encoding : mime-version; s=pfpt0818; bh=tiMllDwjnu1WflHOz2OSPQKoBuXZ6bvF8v7JcfxjOC8=; b=uF166TGdcLuy4A23i7MFCjbE0bFBTzaZ2pVZ3khNYf7GanKFV4LGv4XKaWRTxdiM+254 NJVNtZIhMcnaELS12jjW5diW8BEr6dcZU7Fjg4wuHWp6LK6iBxBNyhYbbjqS/YQhYwUg rPf6y7uFQrxY0s3NH1Y6J8pm533KCrTmxW+qBME6RB6CDugWBdQhMkhYdo/flCHxmUtJ aTtPkMOL5L2lnbFzPQXTpKS+DftRRJFjhcq3ofyoDP/MEwQaJVuyLZhrgF2Bokl40yOB yo3Xi9aRYXLusmMHNW5yMHBRHDf5cos2bCW1JujDWfZwgOuLWCsbg2sHg2mNKKI6dUyD kw== Received: from sc-exch02.marvell.com ([199.233.58.182]) by mx0a-0016f401.pphosted.com with ESMTP id 2w5upur4h9-1 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-SHA384 bits=256 verify=NOT); Sat, 09 Nov 2019 03:26:19 -0800 Received: from SC-EXCH02.marvell.com (10.93.176.82) by SC-EXCH02.marvell.com (10.93.176.82) with Microsoft SMTP Server (TLS) id 15.0.1367.3; Sat, 9 Nov 2019 03:26:18 -0800 Received: from NAM05-CO1-obe.outbound.protection.outlook.com (104.47.48.59) by SC-EXCH02.marvell.com (10.93.176.82) with Microsoft SMTP Server (TLS) id 15.0.1367.3 via Frontend Transport; Sat, 9 Nov 2019 03:26:18 -0800 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=jpmoORVGaFr/5ck61EoDlYA20cpqBgpg/OX6p9LOf0ZB555HlSRGC4SQhB+7dAuRxL/OgiFDU5SuXLhwP8w15FlEwLc5X0SDOCgQSMka5dnNSZONCK54Bbm4lqqGm3PRFKBRU8LFlKqFaJmthtHGAXZ+X8mEvgoOsqVJtyXFTKdMkCC6a+hBfOA0gm4oEYzr8yruQtc9gbGYYFOSpMhWk39uU2YXiJ6IrHV7Qi94NvzZWHhneXgLQ28zOjiQZj3n8EzeHLkZvcDZfGmw3tRR26UUgiEhCzhTc+ssKAMsWqR/eg0c4aMz3Wrye6OMNQ9/Tq/7+2uI1NmAIdc98ekqsQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tiMllDwjnu1WflHOz2OSPQKoBuXZ6bvF8v7JcfxjOC8=; b=L05F7D5v+eXpkRoa8kf3Dd8iE5xAhHSfBOLOYFiGZk/cwfyfhqWXwaC6sLG1jZZpRjX+smLAntndnXf7bWWcKmqkhkVSJw8pKk0Rm80m/aEDZPP6VXOpa8U6Vj7MKzxsBm9HgcUZOc2vPQ4JjiRinp2FnkBFx8y8F7zqhb2YKSazoYYWTiUSZRoOR4VnggZDqMUkWD9UHLPUosoNIPWAooVFsYU+pjUSCxE/PHe23RBmJr6Qal8dkWWgkJduoFQAZFJk/ASgBdffFgyv/xiEMIS9HMzGa3OG/cAF799Tr1BusDsSneERux53R+cymTQqt9F/9GFAxb7HDqeTHN0GJg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=marvell.com; dmarc=pass action=none header.from=marvell.com; dkim=pass header.d=marvell.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=marvell.onmicrosoft.com; s=selector2-marvell-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=tiMllDwjnu1WflHOz2OSPQKoBuXZ6bvF8v7JcfxjOC8=; b=pZkmZ84q2bntZPqmmNIOIbPeXbkV5Dl9EBtYyFYaORJvkKK5EM+R9Uq2b8h3dic/lnn0Oz4Ogz3LgFkk+4r6/wA7aH98aRkTPvq73EIKefNy+lJjUKVvp6UeQJ+pUlwKgD9VJrItVcI4XF1CH5Q4s9euqnAOESEX6AoYKiBGTbw= Received: from MN2PR18MB2877.namprd18.prod.outlook.com (20.179.20.218) by MN2PR18MB3279.namprd18.prod.outlook.com (10.255.237.144) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2430.20; Sat, 9 Nov 2019 11:26:17 +0000 Received: from MN2PR18MB2877.namprd18.prod.outlook.com ([fe80::10fb:1671:dbff:6710]) by MN2PR18MB2877.namprd18.prod.outlook.com ([fe80::10fb:1671:dbff:6710%4]) with mapi id 15.20.2430.023; Sat, 9 Nov 2019 11:26:17 +0000 From: Anoob Joseph To: Lukas Bartosik , "konstantin.ananyev@intel.com" , "akhil.goyal@nxp.com" , "radu.nicolau@intel.com" CC: "dev@dpdk.org" , Lukas Bartosik Thread-Topic: [PATCH] examples/ipsec-secgw: update default configuration Thread-Index: AQHVlLmeB2dVA8sWvEOJO/zVd2b6nqeCtvqg Date: Sat, 9 Nov 2019 11:26:17 +0000 Message-ID: References: <1573055294-32502-1-git-send-email-lbartosik@marvell.com> In-Reply-To: <1573055294-32502-1-git-send-email-lbartosik@marvell.com> Accept-Language: en-IN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [111.125.206.214] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 7a26f107-6ee0-4b81-e2b3-08d76507a31f x-ms-traffictypediagnostic: MN2PR18MB3279: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:2399; x-forefront-prvs: 021670B4D2 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(39860400002)(376002)(366004)(346002)(396003)(136003)(13464003)(199004)(189003)(54906003)(478600001)(74316002)(55236004)(110136005)(305945005)(102836004)(446003)(186003)(26005)(9686003)(8936002)(2201001)(6436002)(25786009)(76176011)(99286004)(7696005)(5660300002)(14454004)(476003)(53546011)(52536014)(4326008)(6506007)(7736002)(316002)(229853002)(86362001)(11346002)(2501003)(8676002)(71190400001)(71200400001)(486006)(15650500001)(107886003)(33656002)(55016002)(66066001)(3846002)(6116002)(6246003)(256004)(14444005)(2906002)(76116006)(66946007)(64756008)(66556008)(66476007)(81166006)(66446008)(81156014); DIR:OUT; SFP:1101; SCL:1; SRVR:MN2PR18MB3279; H:MN2PR18MB2877.namprd18.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: marvell.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: fuYETE84U1Y9L/ZqSywgGOg3I0l057aoBiN5RfSgt9ZBZs+K3Ous4e9N2PUnR6aTf+tKEKoDidywygGTwUr0b3S3yCUZZpG0HmnHH/oBjia3rn2OYKGR1ykYO/Pm5kuW6I0H3gLzOsf0a8oJuL8eiEwl3yujXnVbxI8AX/Zm06KEqH9Aa5uTjrWfRTOVvDE1j40tDB/bpWTNWeBTNjCXGbcc7jxO07mRDm1CmK9yxWQ53ej6O+DehnaQUSLEs3CNZXyPotmQMsrumTjVLxe63QPG/kSlNaOUKv0qmGCBhb3J4T2n2EeD/C9n1hSmkehmoRAxu9kwa9Ixaf9bTLKv3Huhwa7Aqg0qIsCkpCBpOfhplWuIKx0Qog3+EawGJ0ylH6Gx/1452xC3Kmm0Sg+wg8X5eqniUdWskj3oQXZkwT6A4TKOc18Ko0i1jskaMBKq Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-Network-Message-Id: 7a26f107-6ee0-4b81-e2b3-08d76507a31f X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Nov 2019 11:26:17.0727 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 70e1fb47-1155-421d-87fc-2e58f638b6e0 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: k4auNBTbnRUn6U7RNjozpL/7Ahbq1pZV7RP+xCnhmOUrRrlEh16f63hegJ4rnG2G9+7jCkG0L7xs1DjtbSE0mA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: MN2PR18MB3279 X-OriginatorOrg: marvell.com X-Proofpoint-Virus-Version: vendor=fsecure engine=2.50.10434:6.0.95,18.0.572 definitions=2019-11-09_03:2019-11-08,2019-11-09 signatures=0 Subject: Re: [dpdk-dev] [PATCH] examples/ipsec-secgw: update default configuration X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" @Akhil, do we need this submitted to dpdk-stable? Acked-by: Anoob Joseph > -----Original Message----- > From: Lukasz Bartosik > Sent: Wednesday, November 6, 2019 9:18 PM > To: konstantin.ananyev@intel.com; akhil.goyal@nxp.com; > radu.nicolau@intel.com > Cc: dev@dpdk.org; Anoob Joseph ; Lukas Bartosik > > Subject: [PATCH] examples/ipsec-secgw: update default configuration >=20 > Update default configuration of ipsec-secgw: > 1.In ep0.cfg change SPI value used by two inbound IPv6 security policies = from 15 > to 115 and 16 to 116 to point to existing inbound SAs. There are no inbou= nd SAs > with SPI value 15, 16. > - In ep1.cfg change SPI value used by two outbound IPv6 security policies= from > 15 to 115 and 16 to 116 to point to existing outbound SAs. There are no > outbound SAs with SPI value 15, 16. Add missing priority parameter in two > inbound IPv4 security policies. >=20 > Signed-off-by: Lukasz Bartosik > --- > examples/ipsec-secgw/ep0.cfg | 8 ++++---- examples/ipsec-secgw/ep1.cfg= | > 12 ++++++------ > 2 files changed, 10 insertions(+), 10 deletions(-) >=20 > diff --git a/examples/ipsec-secgw/ep0.cfg b/examples/ipsec-secgw/ep0.cfg > index 299aa9e..dfd4aca 100644 > --- a/examples/ipsec-secgw/ep0.cfg > +++ b/examples/ipsec-secgw/ep0.cfg > @@ -49,14 +49,14 @@ sport 0:65535 dport 0:65535 sp ipv6 out esp protect = 26 > pri 1 dst 0000:0000:0000:0000:bbbb:bbbb:0000:0000/96 \ sport 0:65535 dpo= rt > 0:65535 >=20 > -sp ipv6 in esp protect 15 pri 1 dst ffff:0000:0000:0000:5555:5555:0000:0= 000/96 > \ -sport 0:65535 dport 0:65535 -sp ipv6 in esp protect 16 pri 1 dst > ffff:0000:0000:0000:6666:6666:0000:0000/96 \ -sport 0:65535 dport 0:65535 > sp ipv6 in esp protect 110 pri 1 dst ffff:0000:1111:1111:0000:0000:0000:0= 000/96 > \ sport 0:65535 dport 0:65535 sp ipv6 in esp protect 111 pri 1 dst > ffff:0000:1111:1111:1111:1111:0000:0000/96 \ sport 0:65535 dport 0:65535 > +sp ipv6 in esp protect 115 pri 1 dst > +ffff:0000:0000:0000:5555:5555:0000:0000/96 \ sport 0:65535 dport > +0:65535 sp ipv6 in esp protect 116 pri 1 dst > +ffff:0000:0000:0000:6666:6666:0000:0000/96 \ sport 0:65535 dport > +0:65535 > sp ipv6 in esp protect 125 pri 1 dst > ffff:0000:0000:0000:aaaa:aaaa:0000:0000/96 \ sport 0:65535 dport 0:65535= sp > ipv6 in esp protect 126 pri 1 dst ffff:0000:0000:0000:bbbb:bbbb:0000:0000= /96 \ > diff --git a/examples/ipsec-secgw/ep1.cfg b/examples/ipsec-secgw/ep1.cfg > index 3f6ff81..19bdc68 100644 > --- a/examples/ipsec-secgw/ep1.cfg > +++ b/examples/ipsec-secgw/ep1.cfg > @@ -19,8 +19,8 @@ sp ipv4 in esp protect 15 pri 1 dst 192.168.200.0/24 sp= ort > 0:65535 dport 0:65535 sp ipv4 in esp protect 16 pri 1 dst 192.168.201.0/= 24 sport > 0:65535 dport 0:65535 sp ipv4 in esp protect 25 pri 1 dst 192.168.55.0/2= 4 sport > 0:65535 dport 0:65535 sp ipv4 in esp protect 26 pri 1 dst 192.168.56.0/2= 4 sport > 0:65535 dport 0:65535 -sp ipv4 in esp bypass dst 192.168.240.0/24 sport > 0:65535 dport 0:65535 -sp ipv4 in esp bypass dst 192.168.241.0/24 sport > 0:65535 dport 0:65535 > +sp ipv4 in esp bypass pri 1 dst 192.168.240.0/24 sport 0:65535 dport > +0:65535 sp ipv4 in esp bypass pri 1 dst 192.168.241.0/24 sport 0:65535 > +dport 0:65535 >=20 > sp ipv4 out esp protect 105 pri 1 dst 192.168.115.0/24 sport 0:65535 dpo= rt > 0:65535 sp ipv4 out esp protect 106 pri 1 dst 192.168.116.0/24 sport 0:6= 5535 > dport 0:65535 @@ -49,14 +49,14 @@ sport 0:65535 dport 0:65535 sp ipv6 in > esp protect 26 pri 1 dst 0000:0000:0000:0000:bbbb:bbbb:0000:0000/96 \ sp= ort > 0:65535 dport 0:65535 >=20 > -sp ipv6 out esp protect 15 pri 1 dst > ffff:0000:0000:0000:5555:5555:0000:0000/96 \ -sport 0:65535 dport 0:65535= - > sp ipv6 out esp protect 16 pri 1 dst > ffff:0000:0000:0000:6666:6666:0000:0000/96 \ -sport 0:65535 dport 0:65535 > sp ipv6 out esp protect 110 pri 1 dst > ffff:0000:1111:1111:0000:0000:0000:0000/96 \ sport 0:65535 dport 0:65535= sp > ipv6 out esp protect 111 pri 1 dst ffff:0000:1111:1111:1111:1111:0000:000= 0/96 > \ sport 0:65535 dport 0:65535 > +sp ipv6 out esp protect 115 pri 1 dst > +ffff:0000:0000:0000:5555:5555:0000:0000/96 \ sport 0:65535 dport > +0:65535 sp ipv6 out esp protect 116 pri 1 dst > +ffff:0000:0000:0000:6666:6666:0000:0000/96 \ sport 0:65535 dport > +0:65535 > sp ipv6 out esp protect 125 pri 1 dst > ffff:0000:0000:0000:aaaa:aaaa:0000:0000/96 \ sport 0:65535 dport 0:65535= sp > ipv6 out esp protect 126 pri 1 dst ffff:0000:0000:0000:bbbb:bbbb:0000:000= 0/96 > \ > -- > 2.7.4