From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id 6EC32A0513; Wed, 15 Jan 2020 16:46:03 +0100 (CET) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 92EC71BFA3; Wed, 15 Jan 2020 16:46:02 +0100 (CET) Received: from EUR02-VE1-obe.outbound.protection.outlook.com (mail-eopbgr20085.outbound.protection.outlook.com [40.107.2.85]) by dpdk.org (Postfix) with ESMTP id 08EA61BF99 for ; Wed, 15 Jan 2020 16:46:00 +0100 (CET) ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=nqHQkkJaZ/DjXYqqYuhxOE8hpKGAztMploGb3H1r6q/GUCn4JN67ev1oA9ccd6e99y6ttWfVSSEVPq2OtOS/KXGGxaPLDbiJeKuTn517AtC/dGw9iMQi60k08Zx4X/cjfp6Y9JyEbj84LCYGI+YyJKVZog2U0HH9COmPrdBSCA/yWDeXeuyHwNaA7OtCieEwc17IOlcbKSu2EQ2EPP05lk4/7Cl3doTyK4bnDVKjwN8p3Om1Y63r42OVEMb8eQZwcqDeoGmHl1/d4OygayVvskkoyr9051ND4mtl3o+PZ1wDy+R5A5E/+8kLdMVVD0Ms6LXqst0raOMDgPQyeU/WhA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rl1DPr/9DuldKqmp7269o7Pg4TpQBvFd4BY21TqW06M=; b=U6sVF1+bViHJbM3I/9+Z3qzFHOSzWaPojd6B4OxTzes1r6oobAIT6A1mMQrxpCsDEXwJPMrHuwU7p1LqoLsyfS7N2y14w0pLvsHaCz5lNyqwP3yAbn4OGnh9f7fL9lgmlkXVzYBx5m5iR1IrqbHSWmBlT0hP3ACAFAcVCj52mN+wN6J/dTiQP264A4NrF5O3yNdvEqVhlkmNQQhDaCRFfN4t57Gw5EEdkl2wPQ/EVNa/xo0ss9feuOovJitdfwlzkiCbExjBTtdLYXOJzpRdGnvbyp3P+HuHqDu0gTB+Su0GOI29jbiqQipAWeuXTPHvJojRkB1m1X0iAMd8VXIZ/A== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=nxp.com; dmarc=pass action=none header.from=nxp.com; dkim=pass header.d=nxp.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=nxp.com; s=selector2; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=rl1DPr/9DuldKqmp7269o7Pg4TpQBvFd4BY21TqW06M=; b=Kb6/0MX9ovqPRSaazxWL6W1XlBDeYYxrn+0lwVbyTEwVTeqwfv3rFvdrHaqq3TQFJRO09lj++U3UR0Rzf8/quf9hmxOF+Cp6zcaN2YR9oQb8ykUwLVkP7DZg+P1MLyBcTIRVvmb3Q4lIaxcCrhhDIbopR5Hvxlbi1d8KFiRbnBw= Received: from VE1PR04MB6639.eurprd04.prod.outlook.com (10.255.118.11) by VE1PR04MB6591.eurprd04.prod.outlook.com (20.179.234.139) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.2623.10; Wed, 15 Jan 2020 15:45:58 +0000 Received: from VE1PR04MB6639.eurprd04.prod.outlook.com ([fe80::25b0:b1ac:aed0:63e1]) by VE1PR04MB6639.eurprd04.prod.outlook.com ([fe80::25b0:b1ac:aed0:63e1%7]) with mapi id 15.20.2644.015; Wed, 15 Jan 2020 15:45:58 +0000 From: Akhil Goyal To: Vladimir Medvedkin , "dev@dpdk.org" CC: "konstantin.ananyev@intel.com" Thread-Topic: [PATCH v4 0/5] integrate librte_ipsec SAD into ipsec-secgw Thread-Index: AQHVyua84DHp0xL2Skqjd3ora8PiU6fr337Q Date: Wed, 15 Jan 2020 15:45:58 +0000 Message-ID: References: <1578920122-228017-1-git-send-email-vladimir.medvedkin@intel.com> <1579012036-326214-1-git-send-email-vladimir.medvedkin@intel.com> In-Reply-To: <1579012036-326214-1-git-send-email-vladimir.medvedkin@intel.com> Accept-Language: en-IN, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: authentication-results: spf=none (sender IP is ) smtp.mailfrom=akhil.goyal@nxp.com; x-originating-ip: [92.120.1.66] x-ms-publictraffictype: Email x-ms-office365-filtering-ht: Tenant x-ms-office365-filtering-correlation-id: 4e292196-4662-4db2-0887-08d799d2041b x-ms-traffictypediagnostic: VE1PR04MB6591: x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:457; x-forefront-prvs: 02830F0362 x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(4636009)(366004)(396003)(136003)(39860400002)(376002)(346002)(199004)(189003)(4326008)(86362001)(2906002)(5660300002)(8676002)(478600001)(81166006)(71200400001)(8936002)(9686003)(81156014)(55016002)(66476007)(66946007)(44832011)(76116006)(7696005)(66556008)(66446008)(26005)(64756008)(186003)(53546011)(6506007)(110136005)(33656002)(316002)(52536014); DIR:OUT; SFP:1101; SCL:1; SRVR:VE1PR04MB6591; H:VE1PR04MB6639.eurprd04.prod.outlook.com; FPR:; SPF:None; LANG:en; PTR:InfoNoRecords; A:1; MX:1; received-spf: None (protection.outlook.com: nxp.com does not designate permitted sender hosts) x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: 33m8u+wgFnsISX5tBMGIBGoyuJFj3WlglE5DyPrRqzWvpRN48zgPU5PuOrSoQgR2fOKq88YRu+54iTeeuCaDSgZQBqYrorwqrUGSwoXq0TsDyAdhIvr89wZNcjWejgdh+N3EehB4IEz8yXNr+GfvZ4fAxRKoMssmw3t5Dw2itMr2k2uZDXbnXXBbaPbQAsoSv75zeg0hjuxsJ8Sm0xxp3tL2GKP1l10our6vVgIuyQFQ852D2Q8HU3pifAFAzvxqGnDgLw8Czwwabu3Rs5QJ65XlIAdfGcQ84TZkiKFXtfrI00hoO8lfcch0JHGd11ddamiNeTC6QYoEuaqzmfESjV4JTsaxqIyQ59PiHb1XmqjABnea8S7XbrzTMZPMA8zY+6eHMwH12JUEweI/1pxPPbuOfFTEG80Qi3euBwOPYSGFR5n2BXBMXX+vN5+3r+dT x-ms-exchange-transport-forked: True Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: nxp.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4e292196-4662-4db2-0887-08d799d2041b X-MS-Exchange-CrossTenant-originalarrivaltime: 15 Jan 2020 15:45:58.6007 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 686ea1d3-bc2b-4c6f-a92c-d99c5c301635 X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: wiVdgBsDkiKGin8RG4CwtExqroBpPkAoIIN7cDlIz269kGPb0DKiMFVjwekpGaM1acgM1QhnnGgJHmoMfxX5gw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1PR04MB6591 Subject: Re: [dpdk-dev] [PATCH v4 0/5] integrate librte_ipsec SAD into ipsec-secgw X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" Hi Vladimir, There is more than 10% drop with this patchset on NXP hardware with both le= gacy mode and the ipsec lib mode. This would need some debugging. Didn't you see any drop on intel? Regards, Akhil > -----Original Message----- > From: Vladimir Medvedkin > Sent: Tuesday, January 14, 2020 7:57 PM > To: dev@dpdk.org > Cc: konstantin.ananyev@intel.com; Akhil Goyal > Subject: [PATCH v4 0/5] integrate librte_ipsec SAD into ipsec-secgw >=20 > This series integrates SA database (SAD) capabilities from ipsec library. > The goal is to make ipsec-secgw RFC compliant regarding inbound SAD. > Also patch series removes hardcoded limitation for maximum number of SA's > and SP's. >=20 > v4: > - put tunnel SA's into SAD with SPI_ONLY type for performance reason >=20 > v3: > - parse SA and SP into sorted array instead of linked list >=20 > v2: > - get rid of maximum sp limitation >=20 > Vladimir Medvedkin (5): > ipsec: move ipsec sad name length into .h > examples/ipsec-secgw: implement inbound SAD > examples/ipsec-secgw: integrate inbound SAD > examples/ipsec-secgw: get rid of maximum sa limitation > examples/ipsec-secgw: get rid of maximum sp limitation >=20 > examples/ipsec-secgw/Makefile | 1 + > examples/ipsec-secgw/ipsec-secgw.c | 4 +- > examples/ipsec-secgw/ipsec.h | 11 +- > examples/ipsec-secgw/meson.build | 2 +- > examples/ipsec-secgw/parser.c | 4 + > examples/ipsec-secgw/parser.h | 9 ++ > examples/ipsec-secgw/sa.c | 256 +++++++++++++++++++++++--------= ------ > examples/ipsec-secgw/sad.c | 90 +++++++++++++ > examples/ipsec-secgw/sad.h | 74 +++++++++++ > examples/ipsec-secgw/sp4.c | 114 ++++++++++++----- > examples/ipsec-secgw/sp6.c | 112 +++++++++++----- > lib/librte_ipsec/ipsec_sad.c | 20 +-- > lib/librte_ipsec/rte_ipsec_sad.h | 2 + > 13 files changed, 528 insertions(+), 171 deletions(-) > create mode 100644 examples/ipsec-secgw/sad.c > create mode 100644 examples/ipsec-secgw/sad.h >=20 > -- > 2.7.4