From: Sergio Gonzalez Monroy <sergio.gonzalez.monroy@intel.com>
To: Chinmaya Dwibedy <ckdwibedy@gmail.com>, users@dpdk.org
Subject: Re: [dpdk-users] Issue with IPsec Security Gateway sample application (on VM) at 1Gbps traffic
Date: Mon, 15 Aug 2016 16:29:34 +0100 [thread overview]
Message-ID: <056207d1-51de-cd5e-fb63-4420512fb02b@intel.com> (raw)
In-Reply-To: <CAMHS8RHNcdpscWznGQOqUZjKfORGXwh06t+7-u+3AunbHqo7Kg@mail.gmail.com>
Hi Chinmaya,
What DPDK version are you using? Does it happen with latest DPDK 16.07?
On 11/08/2016 09:26, Chinmaya Dwibedy wrote:
> Hi,
>
>
> I changed the classify algorithm to RTE_ACL_CLASSIFY_SCALAR via
> rte_acl_set_ctx_classify() . Did not find the aforesaid crash issue. How
> does DPDK decide the classify method for the given platform (default) at
> startup ACL library? Furthermore how to know which classify method it has
> chosen?
My understanding is that SCALAR should be the default unless you change it.
That can be done by manually setting it or doing rte_acl_init();
Sergio
>
> The VM where I am running the dpdk application supports SSE/ AVX
> instructions set. They why it gets crashed during rte_acl_classify () with
> 1000 Mbps traffic and 100 IPsec tunnels.
>
>
> Thank you in advance for support and time.
>
>
> [root@vpn-server ipsec-secgw]# grep -o sse /proc/cpuinfo
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> sse
>
> [root@vpn-server ipsec-secgw]# grep -o avx /proc/cpuinfo
>
> avx
>
> avx
>
> avx
>
> avx
>
> avx
>
> avx
>
> avx
>
> avx
>
> [root@vpn-server ipsec-secgw]#
>
>
>
> Regards,
>
> Chinmaya
>
> On Wed, Aug 10, 2016 at 7:22 PM, Chinmaya Dwibedy <ckdwibedy@gmail.com>
> wrote:
>
>> Hi ,
>>
>>
>> I am running the IPsec Security Gateway application ( at
>> http://dpdk.org/browse/dpdk/tree/examples/ipsec-secgw) on two VMs. It
>> uses AESNI crypto device.
>>
>>
>> Modified this application to add the Security Associations (SA) as ACL
>> rules like Security Policies (SP). I have added 100 entries of SP and SA. I
>> am also able to send the UDP traffic (one packet) in each of these tunnels.
>> But while sending 1 Gbs traffic (distributed through 100 tunnels) , it is
>> getting crashed . Here is the core dump
>>
>>
>>
>> Core was generated by `./build/ipsec-secgw -l 0 -n 4 --pci-blacklist
>> 0000:00:04.0 -- -p 0x3 --config=('.
>>
>> Program terminated with signal SIGSEGV, Segmentation fault.
>>
>> #0 0x000000000047d8c5 in search_avx2x16 ()
>>
>> Missing separate debuginfos, use: debuginfo-install
>> glibc-2.18-12.fc20.x86_64 openssl-libs-1.0.1e-37.fc20.x8
>>
>> 6_64 zlib-1.2.8-3.fc20.x86_64
>>
>> (gdb) bt
>>
>> #0 0x000000000047d8c5 in search_avx2x16 ()
>>
>> #1 0x0000000000436955 in process_pkts_outbound (ctx=0x9b3800
>> <socket_ctx>, traffic=0x7fff335746d0,
>>
>> portid=1 '\001') at /root/dpdk-2.2.0/examples/
>> ipsec-secgw/ipsec-secgw.c:551
>>
>> #2 0x0000000000437055 in process_pkts (ctx=0x9b3800 <socket_ctx>,
>> pkts=0x7fff33574eb0, nb_pkts=23 '\027',
>>
>> portid=1 '\001') at /root/dpdk-2.2.0/examples/
>> ipsec-secgw/ipsec-secgw.c:677
>>
>> #3 0x0000000000437a08 in main_loop (dummy=0x0) at
>> /root/dpdk-2.2.0/examples/ipsec-secgw/ipsec-secgw.c:890
>>
>> #4 0x00000000004a15f3 in rte_eal_mp_remote_launch ()
>>
>> #5 0x000000000043a3dd in main (argc=9, argv=0x7fff33575270)
>>
>> at /root/dpdk-2.2.0/examples/ipsec-secgw/ipsec-secgw.c:1904
>>
>> (gdb)
>>
>>
>>
>> I am using ESP tunnel mode with AES encryption algorithm and SHA1
>> authentication algorithm . Here is the configuration to lunch the
>> application ./build/ipsec-secgw -l 0 -n 4 --pci-blacklist 0000:00:05.0 --
>> -p 0x3 --config="(0,0,0),(1,0,0)" -u 0x1 --cdev AESNI --ep0
>>
>>
>> There might be packets drop but it should not crash. Note that, with one
>> IPsec tunnel, I do not face this issue. Can anyone please suggest what
>> might be the issues behind this crash? Thank you in advance for your time
>> and support.
>>
>>
>> Please feel free to let me know if additional information is needed.
>>
>>
>>
>>
>> Regards,
>>
>> Chinmaya
>>
prev parent reply other threads:[~2016-08-15 15:30 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-08-10 13:52 Chinmaya Dwibedy
2016-08-11 8:26 ` Chinmaya Dwibedy
2016-08-15 15:29 ` Sergio Gonzalez Monroy [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=056207d1-51de-cd5e-fb63-4420512fb02b@intel.com \
--to=sergio.gonzalez.monroy@intel.com \
--cc=ckdwibedy@gmail.com \
--cc=users@dpdk.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).