DPDK patches and discussions
 help / color / mirror / Atom feed
From: Sergio Gonzalez Monroy <sergio.gonzalez.monroy@intel.com>
To: dev@dpdk.org
Subject: [dpdk-dev] [PATCH 9/9] doc: update ipsec sample guide
Date: Fri,  6 May 2016 17:31:42 +0100	[thread overview]
Message-ID: <1462552302-5852-10-git-send-email-sergio.gonzalez.monroy@intel.com> (raw)
In-Reply-To: <1462552302-5852-1-git-send-email-sergio.gonzalez.monroy@intel.com>

Signed-off-by: Sergio Gonzalez Monroy <sergio.gonzalez.monroy@intel.com>
---
 doc/guides/sample_app_ug/ipsec_secgw.rst | 583 ++++++++++++++++++++-----------
 1 file changed, 381 insertions(+), 202 deletions(-)

diff --git a/doc/guides/sample_app_ug/ipsec_secgw.rst b/doc/guides/sample_app_ug/ipsec_secgw.rst
index c11c7e7..5dbee2e 100644
--- a/doc/guides/sample_app_ug/ipsec_secgw.rst
+++ b/doc/guides/sample_app_ug/ipsec_secgw.rst
@@ -76,10 +76,10 @@ Path for IPsec Outbound traffic:
 
 Constraints
 -----------
-*  IPv4 traffic
-*  ESP tunnel mode
-*  EAS-CBC, HMAC-SHA1 and NULL
-*  Each SA must be handle by a unique lcore (1 RX queue per port)
+*  No IPv6 options headers
+*  No AH mode
+*  Currently only EAS-CBC, HMAC-SHA1 and NULL
+*  Each SA must be handle by a unique lcore (*1 RX queue per port*)
 *  No chained mbufs
 
 Compiling the Application
@@ -108,6 +108,14 @@ To compile the application:
 
        make
 
+#. [Optional] Build the application for debugging:
+   This option adds some extra flags, disables compiler optimizations and
+   is verbose.
+
+   .. code-block:: console
+
+       make DEBUG=1
+
 Running the Application
 -----------------------
 
@@ -141,8 +149,9 @@ where,
 *   --ep1: configure the app as Endpoint 1.
 
 Either one of --ep0 or --ep1 *must* be specified.
-The main purpose of these options is two easily configure two systems
-back-to-back that would forward traffic through an IPsec tunnel.
+The main purpose of these options is to easily configure two systems
+back-to-back that would forward traffic through an IPsec tunnel (see
+:ref:`figure_ipsec_endpoints`).
 
 The mapping of lcores to port/queues is similar to other l3fwd applications.
 
@@ -196,7 +205,8 @@ Refer to the *DPDK Getting Started Guide* for general information on running
 applications and the Environment Abstraction Layer (EAL) options.
 
 The application would do a best effort to "map" crypto devices to cores, with
-hardware devices having priority.
+hardware devices having priority. Basically, hardware devices if present would
+be assign to a core before software ones.
 This means that if the application is using a single core and both hardware
 and software crypto devices are detected, hardware devices will be used.
 
@@ -221,6 +231,20 @@ The following sections provide some details on the default values used to
 initialize the SP, SA and Routing tables.
 Currently all the configuration is hard coded into the application.
 
+The following image illustrate a few of the concepts regarding IPSec, such
+as protected/unprotected and inbound/outbound traffic, from the point of
+view of two back-to-back endpoints:
+
+.. _figure_ipsec_endpoints:
+
+.. figure:: img/ipsec_endpoints.svg
+
+   IPSec Inbound/Outbound traffic
+
+Note that the above image only displays uniderectional traffic per port
+for illustration purposes.
+The application supports bidirectional traffic on all ports,
+
 Security Policy Initialization
 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
@@ -228,107 +252,122 @@ As mention in the overview, the Security Policies are ACL rules.
 The application defines two ACLs, one each of Inbound and Outbound, and
 it replicates them per socket in use.
 
-Following are the default rules:
+Following are the default rules which show only the relevant information,
+assuming ANY value is valid for the fields not mentioned (src ip, proto,
+src/dst ports).
 
 Endpoint 0 Outbound Security Policies:
 
-+---------+------------------+-----------+------------+
-| **Src** | **Dst**          | **proto** | **SA idx** |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.105.0/24 | Any       | 5          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.106.0/24 | Any       | 6          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.107.0/24 | Any       | 7          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.108.0/24 | Any       | 8          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.200.0/24 | Any       | 9          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.250.0/24 | Any       | BYPASS     |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
++-----------------------------------+------------+
+| **Dst**                           | **SA idx** |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.105.0/24                  | 5          |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.106.0/24                  | 6          |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.175.0/24                  | 10         |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.176.0/24                  | 11         |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.200.0/24                  | 15         |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.201.0/24                  | 16         |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.55.0/24                   | 25         |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.56.0/24                   | 26         |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.240.0/24                  | BYPASS     |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.241.0/24                  | BYPASS     |
+|                                   |            |
++-----------------------------------+------------+
+| 0:0:0:0:5555:5555:0:0/96          | 5          |
+|                                   |            |
++-----------------------------------+------------+
+| 0:0:0:0:6666:6666:0:0/96          | 6          |
+|                                   |            |
++-----------------------------------+------------+
+| 0:0:1111:1111:0:0:0:0/96          | 10         |
+|                                   |            |
++-----------------------------------+------------+
+| 0:0:1111:1111:1111:1111:0:0/96    | 11         |
+|                                   |            |
++-----------------------------------+------------+
+| 0:0:0:0:aaaa:aaaa:0:0/96          | 25         |
+|                                   |            |
++-----------------------------------+------------+
+| 0:0:0:0:bbbb:bbbb:0:0/96          | 26         |
+|                                   |            |
++-----------------------------------+------------+
 
 Endpoint 0 Inbound Security Policies:
 
-+---------+------------------+-----------+------------+
-| **Src** | **Dst**          | **proto** | **SA idx** |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.115.0/24 | Any       | 5          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.116.0/24 | Any       | 6          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.117.0/24 | Any       | 7          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.118.0/24 | Any       | 8          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.210.0/24 | Any       | 9          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.240.0/24 | Any       | BYPASS     |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-
-Endpoint 1 Outbound Security Policies:
-
-+---------+------------------+-----------+------------+
-| **Src** | **Dst**          | **proto** | **SA idx** |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.115.0/24 | Any       | 5          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.116.0/24 | Any       | 6          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.117.0/24 | Any       | 7          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.118.0/24 | Any       | 8          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.210.0/24 | Any       | 9          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.240.0/24 | Any       | BYPASS     |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-
-Endpoint 1 Inbound Security Policies:
-
-+---------+------------------+-----------+------------+
-| **Src** | **Dst**          | **proto** | **SA idx** |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.105.0/24 | Any       | 5          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.106.0/24 | Any       | 6          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.107.0/24 | Any       | 7          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.108.0/24 | Any       | 8          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.200.0/24 | Any       | 9          |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
-| Any     | 192.168.250.0/24 | Any       | BYPASS     |
-|         |                  |           |            |
-+---------+------------------+-----------+------------+
++-----------------------------------+------------+
+| **Dst**                           | **SA idx** |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.115.0/24                  | 105        |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.116.0/24                  | 106        |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.185.0/24                  | 110        |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.186.0/24                  | 111        |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.210.0/24                  | 115        |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.211.0/24                  | 116        |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.65.0/24                   | 125        |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.66.0/24                   | 126        |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.245.0/24                  | BYPASS     |
+|                                   |            |
++-----------------------------------+------------+
+| 192.168.246.0/24                  | BYPASS     |
+|                                   |            |
++-----------------------------------+------------+
+| ffff:0:0:0:5555:5555:0:0/96       | 105        |
+|                                   |            |
++-----------------------------------+------------+
+| ffff:0:0:0:6666:6666:0:0/96       | 106        |
+|                                   |            |
++-----------------------------------+------------+
+| ffff:0:1111:1111:0:0:0:0/96       | 110        |
+|                                   |            |
++-----------------------------------+------------+
+| ffff:0:1111:1111:1111:1111:0:0/96 | 111        |
+|                                   |            |
++-----------------------------------+------------+
+| ffff:0:0:0:aaaa:aaaa:0:0/96       | 125        |
+|                                   |            |
++-----------------------------------+------------+
+| ffff:0:0:0:bbbb:bbbb:0:0/96       | 126        |
+|                                   |            |
++-----------------------------------+------------+
+
+For Endpoint 1, we use the same policies in reverse, meaning the Inbound SP
+entries are set as Outbound and vice versa.
 
 
 Security Association Initialization
@@ -350,91 +389,81 @@ Following are the default values:
 
 Endpoint 0 Outbound Security Associations:
 
-+---------+------------+-----------+----------------+------------------+
-| **SPI** | **Cipher** | **Auth**  | **Tunnel src** | **Tunnel dst**   |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 5       | AES-CBC    | HMAC-SHA1 | 172.16.1.5     | 172.16.2.5       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 6       | AES-CBC    | HMAC-SHA1 | 172.16.1.6     | 172.16.2.6       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 7       | AES-CBC    | HMAC-SHA1 | 172.16.1.7     | 172.16.2.7       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 8       | AES-CBC    | HMAC-SHA1 | 172.16.1.8     | 172.16.2.8       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 9       | NULL       | NULL      | 172.16.1.5     | 172.16.2.5       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
++---------+----------+------------+-----------+----------------+----------------+
+| **SPI** | **Mode** | **Cipher** | **Auth**  | **Tunnel src** | **Tunnel dst** |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 5       | Tunnel   | AES-CBC    | HMAC-SHA1 | 172.16.1.5     | 172.16.2.5     |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 6       | Tunnel   | AES-CBC    | HMAC-SHA1 | 172.16.1.6     | 172.16.2.6     |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 10      | Trans    | AES-CBC    | HMAC-SHA1 | N/A            | N/A            |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 11      | Trans    | AES-CBC    | HMAC-SHA1 | N/A            | N/A            |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 15      | Tunnel   | NULL       | NULL      | 172.16.1.5     | 172.16.2.5     |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 16      | Tunnel   | NULL       | NULL      | 172.16.1.6     | 172.16.2.6     |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 25      | Tunnel   | AES-CBC    | HMAC-SHA1 | 1111:1111:     | 2222:2222:     |
+|         |          |            |           | 1111:1111:     | 2222:2222:     |
+|         |          |            |           | 1111:1111:     | 2222:2222:     |
+|         |          |            |           | 1111:5555      | 2222:5555      |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 26      | Tunnel   | AES-CBC    | HMAC-SHA1 | 1111:1111:     | 2222:2222:     |
+|         |          |            |           | 1111:1111:     | 2222:2222:     |
+|         |          |            |           | 1111:1111:     | 2222:2222:     |
+|         |          |            |           | 1111:6666      | 2222:6666      |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
 
 Endpoint 0 Inbound Security Associations:
 
-+---------+------------+-----------+----------------+------------------+
-| **SPI** | **Cipher** | **Auth**  | **Tunnel src** | **Tunnel dst**   |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 5       | AES-CBC    | HMAC-SHA1 | 172.16.2.5     | 172.16.1.5       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 6       | AES-CBC    | HMAC-SHA1 | 172.16.2.6     | 172.16.1.6       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 7       | AES-CBC    | HMAC-SHA1 | 172.16.2.7     | 172.16.1.7       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 8       | AES-CBC    | HMAC-SHA1 | 172.16.2.8     | 172.16.1.8       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 9       | NULL       | NULL      | 172.16.2.5     | 172.16.1.5       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-
-Endpoint 1 Outbound Security Associations:
-
-+---------+------------+-----------+----------------+------------------+
-| **SPI** | **Cipher** | **Auth**  | **Tunnel src** | **Tunnel dst**   |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 5       | AES-CBC    | HMAC-SHA1 | 172.16.2.5     | 172.16.1.5       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 6       | AES-CBC    | HMAC-SHA1 | 172.16.2.6     | 172.16.1.6       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 7       | AES-CBC    | HMAC-SHA1 | 172.16.2.7     | 172.16.1.7       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 8       | AES-CBC    | HMAC-SHA1 | 172.16.2.8     | 172.16.1.8       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 9       | NULL       | NULL      | 172.16.2.5     | 172.16.1.5       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-
-Endpoint 1 Inbound Security Associations:
-
-+---------+------------+-----------+----------------+------------------+
-| **SPI** | **Cipher** | **Auth**  | **Tunnel src** | **Tunnel dst**   |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 5       | AES-CBC    | HMAC-SHA1 | 172.16.1.5     | 172.16.2.5       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 6       | AES-CBC    | HMAC-SHA1 | 172.16.1.6     | 172.16.2.6       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 7       | AES-CBC    | HMAC-SHA1 | 172.16.1.7     | 172.16.2.7       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 8       | AES-CBC    | HMAC-SHA1 | 172.16.1.8     | 172.16.2.8       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
-| 9       | NULL       | NULL      | 172.16.1.5     | 172.16.2.5       |
-|         |            |           |                |                  |
-+---------+------------+-----------+----------------+------------------+
++---------+----------+------------+-----------+----------------+----------------+
+| **SPI** | **Mode** | **Cipher** | **Auth**  | **Tunnel src** | **Tunnel dst** |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 105     | Tunnel   | AES-CBC    | HMAC-SHA1 | 172.16.2.5     | 172.16.1.5     |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 106     | Tunnel   | AES-CBC    | HMAC-SHA1 | 172.16.2.6     | 172.16.1.6     |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 110     | Trans    | AES-CBC    | HMAC-SHA1 | N/A            | N/A            |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 111     | Trans    | AES-CBC    | HMAC-SHA1 | N/A            | N/A            |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 115     | Tunnel   | NULL       | NULL      | 172.16.2.5     | 172.16.1.5     |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 116     | Tunnel   | NULL       | NULL      | 172.16.2.6     | 172.16.1.6     |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 125     | Tunnel   | AES-CBC    | HMAC-SHA1 | 2222:2222:     | 1111:1111:     |
+|         |          |            |           | 2222:2222:     | 1111:1111:     |
+|         |          |            |           | 2222:2222:     | 1111:1111:     |
+|         |          |            |           | 2222:5555      | 1111:5555      |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+| 126     | Tunnel   | AES-CBC    | HMAC-SHA1 | 2222:2222:     | 1111:1111:     |
+|         |          |            |           | 2222:2222:     | 1111:1111:     |
+|         |          |            |           | 2222:2222:     | 1111:1111:     |
+|         |          |            |           | 2222:6666      | 1111:6666      |
+|         |          |            |           |                |                |
++---------+----------+------------+-----------+----------------+----------------+
+
+For Endpoint 1, we use the same policies in reverse, meaning the Inbound SP
+entries are set as Outbound and vice versa.
+
 
 Routing Initialization
 ~~~~~~~~~~~~~~~~~~~~~~
@@ -452,34 +481,109 @@ Endpoint 0 Routing Table:
 | 172.16.2.5/32    | 0        |
 |                  |          |
 +------------------+----------+
-| 172.16.2.6/32    | 0        |
+| 172.16.2.6/32    | 1        |
+|                  |          |
++------------------+----------+
+| 192.168.175.0/24 | 0        |
+|                  |          |
++------------------+----------+
+| 192.168.176.0/24 | 1        |
 |                  |          |
 +------------------+----------+
-| 172.16.2.7/32    | 1        |
+| 192.168.240.0/24 | 0        |
 |                  |          |
 +------------------+----------+
-| 172.16.2.8/32    | 1        |
+| 192.168.241.0/24 | 1        |
 |                  |          |
 +------------------+----------+
 | 192.168.115.0/24 | 2        |
 |                  |          |
 +------------------+----------+
-| 192.168.116.0/24 | 2        |
+| 192.168.116.0/24 | 3        |
+|                  |          |
++------------------+----------+
+| 192.168.65.0/24  | 2        |
+|                  |          |
++------------------+----------+
+| 192.168.66.0/24  | 3        |
 |                  |          |
 +------------------+----------+
-| 192.168.117.0/24 | 3        |
+| 192.168.185.0/24 | 2        |
 |                  |          |
 +------------------+----------+
-| 192.168.118.0/24 | 3        |
+| 192.168.186.0/24 | 3        |
 |                  |          |
 +------------------+----------+
 | 192.168.210.0/24 | 2        |
 |                  |          |
 +------------------+----------+
-| 192.168.240.0/24 | 2        |
+| 192.168.211.0/24 | 3        |
+|                  |          |
++------------------+----------+
+| 192.168.245.0/24 | 2        |
+|                  |          |
++------------------+----------+
+| 192.168.246.0/24 | 3        |
+|                  |          |
++------------------+----------+
+| 2222:2222:       | 0        |
+| 2222:2222:       |          |
+| 2222:2222:       |          |
+| 2222:5555/116    |          |
+|                  |          |
++------------------+----------+
+| 2222:2222:       | 1        |
+| 2222:2222:       |          |
+| 2222:2222:       |          |
+| 2222:6666/116    |          |
 |                  |          |
 +------------------+----------+
-| 192.168.250.0/24 | 0        |
+| 0000:0000:       | 0        |
+| 1111:1111:       |          |
+| 0000:0000:       |          |
+| 0000:0000/116    |          |
+|                  |          |
++------------------+----------+
+| 0000:0000:       | 1        |
+| 1111:1111:       |          |
+| 1111:1111:       |          |
+| 0000:0000/116    |          |
+|                  |          |
++------------------+----------+
+| ffff:0000:       | 2        |
+| 0000:0000:       |          |
+| aaaa:aaaa:       |          |
+| 0000:0/116       |          |
+|                  |          |
++------------------+----------+
+| ffff:0000:       | 3        |
+| 0000:0000:       |          |
+| bbbb:bbbb:       |          |
+| 0000:0/116       |          |
+|                  |          |
++------------------+----------+
+| ffff:0000:       | 2        |
+| 0000:0000:       |          |
+| 5555:5555:       |          |
+| 0000:0/116       |          |
+|                  |          |
++------------------+----------+
+| ffff:0000:       | 3        |
+| 0000:0000:       |          |
+| 6666:6666:       |          |
+| 0000:0/116       |          |
+|                  |          |
++------------------+----------+
+| ffff:0000:       | 2        |
+| 1111:1111:       |          |
+| 0000:0000:       |          |
+| 0000:0000/116    |          |
+|                  |          |
++------------------+----------+
+| ffff:0000:       | 3        |
+| 1111:1111:       |          |
+| 1111:1111:       |          |
+| 0000:0000/116    |          |
 |                  |          |
 +------------------+----------+
 
@@ -489,36 +593,111 @@ Endpoint 1 Routing Table:
 | **Dst addr**     | **Port** |
 |                  |          |
 +------------------+----------+
-| 172.16.1.5/32    | 2        |
+| 172.16.1.5/32    | 0        |
+|                  |          |
++------------------+----------+
+| 172.16.1.6/32    | 1        |
+|                  |          |
++------------------+----------+
+| 192.168.185.0/24 | 0        |
 |                  |          |
 +------------------+----------+
-| 172.16.1.6/32    | 2        |
+| 192.168.186.0/24 | 1        |
 |                  |          |
 +------------------+----------+
-| 172.16.1.7/32    | 3        |
+| 192.168.245.0/24 | 0        |
 |                  |          |
 +------------------+----------+
-| 172.16.1.8/32    | 3        |
+| 192.168.246.0/24 | 1        |
 |                  |          |
 +------------------+----------+
-| 192.168.105.0/24 | 0        |
+| 192.168.105.0/24 | 2        |
 |                  |          |
 +------------------+----------+
-| 192.168.106.0/24 | 0        |
+| 192.168.106.0/24 | 3        |
 |                  |          |
 +------------------+----------+
-| 192.168.107.0/24 | 1        |
+| 192.168.55.0/24  | 2        |
 |                  |          |
 +------------------+----------+
-| 192.168.108.0/24 | 1        |
+| 192.168.56.0/24  | 3        |
 |                  |          |
 +------------------+----------+
-| 192.168.200.0/24 | 0        |
+| 192.168.175.0/24 | 2        |
+|                  |          |
++------------------+----------+
+| 192.168.176.0/24 | 3        |
+|                  |          |
++------------------+----------+
+| 192.168.200.0/24 | 2        |
+|                  |          |
++------------------+----------+
+| 192.168.201.0/24 | 3        |
 |                  |          |
 +------------------+----------+
 | 192.168.240.0/24 | 2        |
 |                  |          |
 +------------------+----------+
-| 192.168.250.0/24 | 0        |
+| 192.168.241.0/24 | 3        |
+|                  |          |
++------------------+----------+
+| 1111:1111:       | 0        |
+| 1111:1111:       |          |
+| 1111:1111:       |          |
+| 1111:5555/116    |          |
+|                  |          |
++------------------+----------+
+| 1111:1111:       | 1        |
+| 1111:1111:       |          |
+| 1111:1111:       |          |
+| 1111:6666/116    |          |
+|                  |          |
++------------------+----------+
+| ffff:0000:       | 0        |
+| 1111:1111:       |          |
+| 0000:0000:       |          |
+| 0000:0000/116    |          |
+|                  |          |
++------------------+----------+
+| ffff:0000:       | 1        |
+| 1111:1111:       |          |
+| 1111:1111:       |          |
+| 0000:0000/116    |          |
+|                  |          |
++------------------+----------+
+| 0000:0000:       | 2        |
+| 0000:0000:       |          |
+| aaaa:aaaa:       |          |
+| 0000:0/116       |          |
+|                  |          |
++------------------+----------+
+| 0000:0000:       | 3        |
+| 0000:0000:       |          |
+| bbbb:bbbb:       |          |
+| 0000:0/116       |          |
+|                  |          |
++------------------+----------+
+| 0000:0000:       | 2        |
+| 0000:0000:       |          |
+| 5555:5555:       |          |
+| 0000:0/116       |          |
+|                  |          |
++------------------+----------+
+| 0000:0000:       | 3        |
+| 0000:0000:       |          |
+| 6666:6666:       |          |
+| 0000:0/116       |          |
+|                  |          |
++------------------+----------+
+| 0000:0000:       | 2        |
+| 1111:1111:       |          |
+| 0000:0000:       |          |
+| 0000:0000/116    |          |
+|                  |          |
++------------------+----------+
+| 0000:0000:       | 3        |
+| 1111:1111:       |          |
+| 1111:1111:       |          |
+| 0000:0000/116    |          |
 |                  |          |
 +------------------+----------+
-- 
2.5.5

  parent reply	other threads:[~2016-05-06 16:31 UTC|newest]

Thread overview: 38+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2016-05-06 16:31 [dpdk-dev] [PATCH 0/9] IPSec example enhancements Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 1/9] examples/ipsec-secgw: fix esp padding check Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 2/9] examples/ipsec-secgw: fix stack smashing error Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 3/9] examples/ipsec-secgw: add build option and cleanup Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 4/9] examples/ipsec-secgw: rework ipsec execution loop Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 5/9] examples/ipsec-secgw: fix no sa found case Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 6/9] examples/ipsec-secgw: consistent config variable names Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 7/9] examples/ipsec-secgw: ipv6 support Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 8/9] examples/ipsec-secgw: transport mode support Sergio Gonzalez Monroy
2016-05-06 16:31 ` Sergio Gonzalez Monroy [this message]
2016-05-10  9:21   ` [dpdk-dev] [PATCH 9/9] doc: update ipsec sample guide Mcnamara, John
2016-05-18 12:42 ` [dpdk-dev] [PATCH v2 0/9] IPSec enhancements Sergio Gonzalez Monroy
2016-05-18 12:42   ` [dpdk-dev] [PATCH v2 1/9] examples/ipsec-secgw: fix esp padding check Sergio Gonzalez Monroy
2016-05-18 12:42   ` [dpdk-dev] [PATCH v2 2/9] examples/ipsec-secgw: fix stack smashing error Sergio Gonzalez Monroy
2016-05-18 12:42   ` [dpdk-dev] [PATCH v2 3/9] examples/ipsec-secgw: add build option and cleanup Sergio Gonzalez Monroy
2016-05-18 12:42   ` [dpdk-dev] [PATCH v2 4/9] examples/ipsec-secgw: rework ipsec execution loop Sergio Gonzalez Monroy
2016-06-07 12:50     ` De Lara Guarch, Pablo
2016-05-18 12:42   ` [dpdk-dev] [PATCH v2 5/9] examples/ipsec-secgw: fix no sa found case Sergio Gonzalez Monroy
2016-06-07 13:17     ` De Lara Guarch, Pablo
2016-05-18 12:42   ` [dpdk-dev] [PATCH v2 6/9] examples/ipsec-secgw: consistent config variable names Sergio Gonzalez Monroy
2016-05-18 12:42   ` [dpdk-dev] [PATCH v2 7/9] examples/ipsec-secgw: ipv6 support Sergio Gonzalez Monroy
2016-06-07 16:10     ` De Lara Guarch, Pablo
2016-05-18 12:42   ` [dpdk-dev] [PATCH v2 8/9] examples/ipsec-secgw: transport mode support Sergio Gonzalez Monroy
2016-05-18 12:42   ` [dpdk-dev] [PATCH v2 9/9] doc: update ipsec sample guide Sergio Gonzalez Monroy
2016-05-18 13:43     ` Mcnamara, John
2016-06-09  8:42   ` [dpdk-dev] [PATCH v3 0/9] IPSec Enhancements Sergio Gonzalez Monroy
2016-06-09  8:42     ` [dpdk-dev] [PATCH v3 1/9] examples/ipsec-secgw: fix esp padding check Sergio Gonzalez Monroy
2016-06-09  8:42     ` [dpdk-dev] [PATCH v3 2/9] examples/ipsec-secgw: fix stack smashing error Sergio Gonzalez Monroy
2016-06-09  8:42     ` [dpdk-dev] [PATCH v3 3/9] examples/ipsec-secgw: add build option and cleanup Sergio Gonzalez Monroy
2016-06-09  8:42     ` [dpdk-dev] [PATCH v3 4/9] examples/ipsec-secgw: rework ipsec execution loop Sergio Gonzalez Monroy
2016-06-09  8:42     ` [dpdk-dev] [PATCH v3 5/9] examples/ipsec-secgw: fix no sa found case Sergio Gonzalez Monroy
2016-06-09  8:42     ` [dpdk-dev] [PATCH v3 6/9] examples/ipsec-secgw: consistent config variable names Sergio Gonzalez Monroy
2016-06-09  8:42     ` [dpdk-dev] [PATCH v3 7/9] examples/ipsec-secgw: ipv6 support Sergio Gonzalez Monroy
2016-06-09  8:42     ` [dpdk-dev] [PATCH v3 8/9] examples/ipsec-secgw: transport mode support Sergio Gonzalez Monroy
2016-06-09  8:42     ` [dpdk-dev] [PATCH v3 9/9] doc: update ipsec sample guide Sergio Gonzalez Monroy
2016-06-09 11:11       ` Mcnamara, John
2016-06-09 11:58     ` [dpdk-dev] [PATCH v3 0/9] IPSec Enhancements De Lara Guarch, Pablo
2016-06-21 10:14       ` Thomas Monjalon

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1462552302-5852-10-git-send-email-sergio.gonzalez.monroy@intel.com \
    --to=sergio.gonzalez.monroy@intel.com \
    --cc=dev@dpdk.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).