From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-wm0-f47.google.com (mail-wm0-f47.google.com [74.125.82.47]) by dpdk.org (Postfix) with ESMTP id 6394F58D8 for ; Thu, 11 Aug 2016 10:26:53 +0200 (CEST) Received: by mail-wm0-f47.google.com with SMTP id f65so15345284wmi.0 for ; Thu, 11 Aug 2016 01:26:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to; bh=fzJoEKYbTu1nraIOoK/cN6YA95A9sEOKTrgbBsdcHJw=; b=gg6kA/1pR15PFP5DulhQoJfps4oOCAXGG5F/DOcCDGIx2Eh4wcTTwb9OH+vgZcsYPh fBSbofplt1cRjCZSmuglnjvG7MMYjD6aq9J4BuFcksq9qzu1OGFjyzJj52H3Wnl3EiEB vIyJaPOtpY0EddORE1wUwZM5uJQFsnOPXiCDcF5+cyNvLYhWZSF9fsSkaGQw0YmlwrjF YGs+HPlnTWgNYVWhOXZAdZYhyKvVAZqmUFUFFZ+22Ve0k29eC9/KJdhgOQMGXo625Xm2 CubIfdysxaksQjmj1yPjhXZwgAIbbzFZyJNa51WwLMTT2hJz6OybcndQSpex3U2A9tVA 3Esw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to; bh=fzJoEKYbTu1nraIOoK/cN6YA95A9sEOKTrgbBsdcHJw=; b=HDgOM6cIOQ8NT9lwaEaU3957OlURw9IA2tiOFl74ZkFzp5x4FkVJvVsplPk8Qvigp+ HQKUJCbeCzNn/JyqPWg05uAKMacKqC1TNv9eBAsESYnhkp57gDZKEazKLdSSFDAoRVGj 5gT2J4LeIlNxCpH3fxieDrQXAmnUQjuuc9z/dZHMYgfiUhrmyoXwAFF7GbW/8fY7i106 rfhjbMkfQFP3RFuGsDmsht+dY0sfCM1mIxcojxPi1Lj7QQAM64imHPznjTiCkxR/eV+V RX13KuZO8W5E82bpn9jSFpSZq9HQU4yKjmJ7evpFSR43cEMueRZecOMy7zkaoYgVG5cE fRhQ== X-Gm-Message-State: AEkoousxwmG+aJbiKhfIiD3mVGco6JUw7TJglTUDkXIYPRsdfQo1hnfYkdBYxXKHlj3P7dKYxw7pArGca9b+Bg== X-Received: by 10.28.35.86 with SMTP id j83mr7197657wmj.18.1470904012484; Thu, 11 Aug 2016 01:26:52 -0700 (PDT) MIME-Version: 1.0 Received: by 10.194.9.164 with HTTP; Thu, 11 Aug 2016 01:26:51 -0700 (PDT) In-Reply-To: References: From: Chinmaya Dwibedy Date: Thu, 11 Aug 2016 13:56:51 +0530 Message-ID: To: users@dpdk.org Content-Type: text/plain; charset=UTF-8 X-Content-Filtered-By: Mailman/MimeDel 2.1.15 Subject: Re: [dpdk-users] Issue with IPsec Security Gateway sample application (on VM) at 1Gbps traffic X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Aug 2016 08:26:53 -0000 Hi, I changed the classify algorithm to RTE_ACL_CLASSIFY_SCALAR via rte_acl_set_ctx_classify() . Did not find the aforesaid crash issue. How does DPDK decide the classify method for the given platform (default) at startup ACL library? Furthermore how to know which classify method it has chosen? The VM where I am running the dpdk application supports SSE/ AVX instructions set. They why it gets crashed during rte_acl_classify () with 1000 Mbps traffic and 100 IPsec tunnels. Thank you in advance for support and time. [root@vpn-server ipsec-secgw]# grep -o sse /proc/cpuinfo sse sse sse sse sse sse sse sse sse sse sse sse sse sse sse sse sse sse sse sse [root@vpn-server ipsec-secgw]# grep -o avx /proc/cpuinfo avx avx avx avx avx avx avx avx [root@vpn-server ipsec-secgw]# Regards, Chinmaya On Wed, Aug 10, 2016 at 7:22 PM, Chinmaya Dwibedy wrote: > Hi , > > > I am running the IPsec Security Gateway application ( at > http://dpdk.org/browse/dpdk/tree/examples/ipsec-secgw) on two VMs. It > uses AESNI crypto device. > > > Modified this application to add the Security Associations (SA) as ACL > rules like Security Policies (SP). I have added 100 entries of SP and SA. I > am also able to send the UDP traffic (one packet) in each of these tunnels. > But while sending 1 Gbs traffic (distributed through 100 tunnels) , it is > getting crashed . Here is the core dump > > > > Core was generated by `./build/ipsec-secgw -l 0 -n 4 --pci-blacklist > 0000:00:04.0 -- -p 0x3 --config=('. > > Program terminated with signal SIGSEGV, Segmentation fault. > > #0 0x000000000047d8c5 in search_avx2x16 () > > Missing separate debuginfos, use: debuginfo-install > glibc-2.18-12.fc20.x86_64 openssl-libs-1.0.1e-37.fc20.x8 > > 6_64 zlib-1.2.8-3.fc20.x86_64 > > (gdb) bt > > #0 0x000000000047d8c5 in search_avx2x16 () > > #1 0x0000000000436955 in process_pkts_outbound (ctx=0x9b3800 > , traffic=0x7fff335746d0, > > portid=1 '\001') at /root/dpdk-2.2.0/examples/ > ipsec-secgw/ipsec-secgw.c:551 > > #2 0x0000000000437055 in process_pkts (ctx=0x9b3800 , > pkts=0x7fff33574eb0, nb_pkts=23 '\027', > > portid=1 '\001') at /root/dpdk-2.2.0/examples/ > ipsec-secgw/ipsec-secgw.c:677 > > #3 0x0000000000437a08 in main_loop (dummy=0x0) at > /root/dpdk-2.2.0/examples/ipsec-secgw/ipsec-secgw.c:890 > > #4 0x00000000004a15f3 in rte_eal_mp_remote_launch () > > #5 0x000000000043a3dd in main (argc=9, argv=0x7fff33575270) > > at /root/dpdk-2.2.0/examples/ipsec-secgw/ipsec-secgw.c:1904 > > (gdb) > > > > I am using ESP tunnel mode with AES encryption algorithm and SHA1 > authentication algorithm . Here is the configuration to lunch the > application ./build/ipsec-secgw -l 0 -n 4 --pci-blacklist 0000:00:05.0 -- > -p 0x3 --config="(0,0,0),(1,0,0)" -u 0x1 --cdev AESNI --ep0 > > > There might be packets drop but it should not crash. Note that, with one > IPsec tunnel, I do not face this issue. Can anyone please suggest what > might be the issues behind this crash? Thank you in advance for your time > and support. > > > Please feel free to let me know if additional information is needed. > > > > > Regards, > > Chinmaya >