From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <avi.cohen@huawei.com> Received: from lhrrgout.huawei.com (lhrrgout.huawei.com [194.213.3.17]) by dpdk.org (Postfix) with ESMTP id 22C191B616 for <users@dpdk.org>; Tue, 7 Nov 2017 14:36:35 +0100 (CET) Received: from 172.18.7.190 (EHLO LHREML713-CAH.china.huawei.com) ([172.18.7.190]) by lhrrg02-dlp.huawei.com (MOS 4.3.7-GA FastPath queued) with ESMTP id DSD92089; Tue, 07 Nov 2017 13:36:34 +0000 (GMT) Received: from FRAEML701-CAH.china.huawei.com (10.206.14.32) by LHREML713-CAH.china.huawei.com (10.201.108.36) with Microsoft SMTP Server (TLS) id 14.3.361.1; Tue, 7 Nov 2017 13:36:34 +0000 Received: from FRAEML521-MBX.china.huawei.com ([169.254.1.209]) by FRAEML701-CAH.china.huawei.com ([10.206.14.32]) with mapi id 14.03.0361.001; Tue, 7 Nov 2017 14:36:27 +0100 From: "Avi Cohen (A)" <avi.cohen@huawei.com> To: "De Lara Guarch, Pablo" <pablo.de.lara.guarch@intel.com>, Thomas Monjalon <thomas@monjalon.net> CC: "users@dpdk.org" <users@dpdk.org>, "olgas@mellanox.com" <olgas@mellanox.com> Thread-Topic: [dpdk-users] IPsec offload Thread-Index: AdNWEJZww10MSYRtTmqj3ER7vsBW+wAgf84AABWgwGD///12AP//of+ggAC4lAD//+5ZQIAAFKCA//7iG6AASrfkAP//y4NQ Date: Tue, 7 Nov 2017 13:36:27 +0000 Message-ID: <B84047ECBD981D4B93EAE5A6245AA361013F10DD@FRAEML521-MBX.china.huawei.com> References: <B84047ECBD981D4B93EAE5A6245AA361013EFADB@FRAEML521-MBX.china.huawei.com> <4048707.fcLJULAWd5@xps> <B84047ECBD981D4B93EAE5A6245AA361013EFB60@FRAEML521-MBX.china.huawei.com> <7246948.uKqDaxhOvY@xps> <B84047ECBD981D4B93EAE5A6245AA361013F0FF1@FRAEML521-MBX.china.huawei.com> <E115CCD9D858EF4F90C690B0DCB4D8976CC43EE3@IRSMSX108.ger.corp.intel.com> <B84047ECBD981D4B93EAE5A6245AA361013F1010@FRAEML521-MBX.china.huawei.com> <E115CCD9D858EF4F90C690B0DCB4D8976CC43F2A@IRSMSX108.ger.corp.intel.com> <B84047ECBD981D4B93EAE5A6245AA361013F1092@FRAEML521-MBX.china.huawei.com> <E115CCD9D858EF4F90C690B0DCB4D8976CC45A21@IRSMSX108.ger.corp.intel.com> In-Reply-To: <E115CCD9D858EF4F90C690B0DCB4D8976CC45A21@IRSMSX108.ger.corp.intel.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [10.200.202.145] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-CFilter-Loop: Reflected X-Mirapoint-Virus-RAPID-Raw: score=unknown(0), refid=str=0001.0A090202.5A01B6E3.0112, ss=1, re=0.000, recu=0.000, reip=0.000, cl=1, cld=1, fgs=0, ip=169.254.1.209, so=2013-06-18 04:22:30, dmn=2013-03-21 17:37:32 X-Mirapoint-Loop-Id: 49c02e895fcedd6271fad424c17d48d4 Subject: Re: [dpdk-users] IPsec offload X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK usage discussions <users.dpdk.org> List-Unsubscribe: <http://dpdk.org/ml/options/users>, <mailto:users-request@dpdk.org?subject=unsubscribe> List-Archive: <http://dpdk.org/ml/archives/users/> List-Post: <mailto:users@dpdk.org> List-Help: <mailto:users-request@dpdk.org?subject=help> List-Subscribe: <http://dpdk.org/ml/listinfo/users>, <mailto:users-request@dpdk.org?subject=subscribe> X-List-Received-Date: Tue, 07 Nov 2017 13:36:36 -0000 Thank you Pablo 1. Now I have multiple build errors 'undeclared here' when building dpdk fo= r example aes_gcm_enc_128_sse . I'm trying to find where these are declared 2. Regarding the crypto-device - I have Intel x540-AT2 Nic Regards Avi > -----Original Message----- > From: De Lara Guarch, Pablo [mailto:pablo.de.lara.guarch@intel.com] > Sent: Tuesday, 07 November, 2017 1:24 PM > To: Avi Cohen (A); Thomas Monjalon > Cc: users@dpdk.org; olgas@mellanox.com > Subject: RE: [dpdk-users] IPsec offload >=20 > Hi Avi, >=20 > > -----Original Message----- > > From: Avi Cohen (A) [mailto:avi.cohen@huawei.com] > > Sent: Tuesday, November 7, 2017 8:55 AM > > To: De Lara Guarch, Pablo <pablo.de.lara.guarch@intel.com>; Thomas > > Monjalon <thomas@monjalon.net> > > Cc: users@dpdk.org; olgas@mellanox.com > > Subject: RE: [dpdk-users] IPsec offload > > > > > > > > Thank you Pablo > > > > Can you supply an example command line to run the ipsec-secgw ? > > > > > > ./examples/ipsec-secgw/build/ipsec-secgw -l 10,11 -n 4 -- > > > vdev=3D"crypto_aesni_gcm0" / > > > -- -p 0x1 -P --config=3D"(0,0,10)" -f ep-sample.cfg > > > > > > Where ep-sample.cfg contains: > > > > > > sp ipv4 out esp protect 0010 pri 1 dst 001.0.0.0/24 sport 0:65535 > > > dport 0:65535 sa out 0010 aead_algo aes-128-gcm aead_key > > de:ad:be:ef:de:ad:be:ef:de:ad:be: > > > ef:de:ad:be:ef:de:ad:be:ef mode ipv4-tunnel src 20.0.0.0 dst > > > 21.0.0.0 rt ipv4 dst > > > 21.0.0.0/8 port 0 > > > > > [Avi Cohen (A)] > > > > When running it almost all parameters from the config file starting fro= m " > > sa out 0010" are not recognized by the application Do I have to > > create any additional objects before running it ? I don't see it in the > documentation . > > I want to run IPsec offload over ethernet port Best Regards Avi >=20 > You need to make sure that you have a crypto device (SW or HW) that suppo= rt > the algorithms set in the sa lines. > For instance, the "SA line" above is using AES-GCM, so you could use the = AESNI > GCM PMD, with the command line above (using --vdev). >=20 > Regards, > Pablo