From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id 7D0C7A04AF for ; Wed, 19 Aug 2020 13:08:25 +0200 (CEST) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 39A291C044; Wed, 19 Aug 2020 13:08:22 +0200 (CEST) Received: from mail-ej1-f46.google.com (mail-ej1-f46.google.com [209.85.218.46]) by dpdk.org (Postfix) with ESMTP id ACDA41DB9; Wed, 19 Aug 2020 13:08:19 +0200 (CEST) Received: by mail-ej1-f46.google.com with SMTP id o18so25776602eje.7; Wed, 19 Aug 2020 04:08:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=ZAxcN5CLR58ASIJ7OqSlJ3JkS7KzZtlyMLtAT0Fneds=; b=iUKiAwQ6sab4ezmyq40Z/+zWgCAaqMzY3A2tbqGFnDqwMcTL4yDoj/WwyTPdtFZ0vX F75YKB89DVmfGwg1XfW/Caw50Ca8AnG6w8RNvp8to+2KSI6GXJ9AGruRcH6bDg8O2s9w iV8TMoSI7FGKrOGRuZ9IBluJ5F9nYrflmdsO8FtOVthXa/Ut9x5Cl3+WKwSj0wltS0HG xAF1pAFWcc/t6mwKTw2EVsTU6aL+0OyVctDPzb2ht4MS/98fd/kfmV2FTmuLl1ae9SwX 1/1ipkgi0heck0FRnnNw5VijvGsmuNdeoGsULcUYZoBrmXTdmVRuPb7r9dWap4Zvdmf4 vUzw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=ZAxcN5CLR58ASIJ7OqSlJ3JkS7KzZtlyMLtAT0Fneds=; b=ULjBAzCfEf5fu174N8SMV+/nAw+iSsk5PrVilMFHH8/w08ucs2Nu6+kKvY6FaAnVe8 Au9n6EvgrWplPkTLdOcvYBWMN73Y5KmLyufVM63/Zwyw7aiNSLCInk/T1MFsJq5/momv NvdUfWkdyd3IodA1mvQb4Qero9Rzi9QydheUx6InzVyqo80Lmrrmpwr2kPKwHrymjuT2 Q9eAgdh3lHrSBi6NwiG9nY9gIzMZJTeZDYLzKUMKTsY8hhd8Qtf4xqSWFBS2XVlv/y61 3r9GD18fu6FE4ntrN47Vi4PSV07bzRKeOTPbrvIioanHVCp+hYWAmrNJxaLQXrGlWBNb Jyww== X-Gm-Message-State: AOAM531xSxdyNLsT4zg8Hx/s7lO6mC80j4vWA4yn7tYmDvpRIh9B13S5 mYtax+x6PuArikrsaJLz5x1tYlMnLOL0ACz0xE5oQcGR X-Google-Smtp-Source: ABdhPJxzYSY90BIoH2io67dDu5cerTpz5lUavOivVQNaMIXkhyTFc6thSk1AAiTTBf48skLWMLf8/f3CwyVrLxj4OlI= X-Received: by 2002:a17:906:e50:: with SMTP id q16mr25950577eji.155.1597835299337; Wed, 19 Aug 2020 04:08:19 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: satyavalli rama Date: Wed, 19 Aug 2020 16:38:06 +0530 Message-ID: To: Anoob Joseph Cc: dev@dpdk.org, users@dpdk.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.15 Subject: Re: [dpdk-users] [dpdk-dev] Ipsec-secgw packet processing X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: users-bounces@dpdk.org Sender: "users" Hi Anoob We are using the following hardware details, HOST: x722 (i40e) intel. VM: e1000 (82540) intel. We have launched Virtual machine on host , and executing ipsec-secgw application on VM. Please find below the CLI and configuration for TRANSPORT MODE. CLI: ./build/ipsec-secgw -l 0 -n 4 --socket-mem 1024,0 --vdev "crypto_null" -- -p 0x3 -P -u 0x1 --config="(0,0,0),(1,0,0)" -f ep0.cfg #TRANSPORT: #SP IPv4 rules sp ipv4 out esp protect 10 pri 1 dst 192.168.122.0/24 sport 0:65535 dport 0:65535 #SA rules sa out 10 cipher_algo aes-128-cbc cipher_key a1:a1:a1:a1:a1:a1:a1:a1:a1:a1:a1:\ a1:a1:a1:a1:a1 auth_algo sha1-hmac auth_key a1:a1:a1:a1:a1:a1:a1:a1:a1:a1:a1:\ a1:a1:a1:a1:a1:a1:a1:a1:a1 mode transport #Routing rules rt ipv4 dst 192.168.122.0/24 port 1 Please find below the CLI and configuration for TUNNEL MODE. CLI: ./build/ipsec-secgw -l 0 -n 4 --socket-mem 1024,0 --vdev "crypto_null" -- -p 0x3 -P -u 0x1 --config="(0,0,0),(1,0,0)" -f ep0.cfg #TUNNEL End Point-0: #SP IPv4 rules sp ipv4 out esp protect 5 pri 1 dst 192.168.122.0/24 sport 0:65535 dport 0:65535 #SA rules sa out 5 cipher_algo aes-128-cbc cipher_key 0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0 \ auth_algo sha1-hmac auth_key 0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0 \ mode ipv4-tunnel src 192.168.122.96 dst 192.168.122.213 #Routing rules rt ipv4 dst 192.168.122.0/24 port 1 On Tue, 18 Aug, 2020, 4:29 pm Anoob Joseph, wrote: > Hi Satya, > > Are you attempting to enable inline protocol (IPsec) functionality? If > yes, which PMD (& h/w) are you using for the same? > > Thanks, > Anoob > > > -----Original Message----- > > From: dev On Behalf Of satyavalli rama > > Sent: Tuesday, August 18, 2020 4:08 PM > > To: dev@dpdk.org; users@dpdk.org > > Subject: Re: [dpdk-dev] Ipsec-secgw packet processing > > > > We further debugged and we observed that while running ipsec-secgw > > application in transport-mode dpdk-19.02/11, we found that inline packet > > processing is not happening. > > We observed that ol_flags is not setting from driver level. We are > expecting > > that , because of ol_flags not set , inline packet processing is not > > happening.Any idea What could be the reason for this, I think ol_flags > will be > > configured from driver level Or else do we need to provide any external > > configuration for setting ol_flags. > > And also we are not observing encrypt/decrypt packets on pdump before > > sending packets out from tx-port(rte_eth_tx_burst()). > > Please help us on this...to proceed further. > > > > Thanks & Regards > > Satya > > > > > > > > On Mon, 17 Aug, 2020, 4:11 pm satyavalli rama, < > satyavalli.rama@gmail.com> > > wrote: > > > > > > > > Hello, > > > > > > While we are running ipsec-secgw application in transport-mode on > > > dpdk-19.02, we found that inline packet processing is not happening. > > > > > > And also we are not observing any encrypt/decrypt packets on pdump > > > before sending packets out from tx-port(rte_eth_tx_burst()). > > > > > > Please help us on how to proceed further. > > > > > > Thanks, > > > Jagadeesh > > > > > > >