From: Sergio Gonzalez Monroy <sergio.gonzalez.monroy@intel.com>
To: dev@dpdk.org
Subject: [dpdk-dev] [PATCH 9/9] doc: update ipsec sample guide
Date: Fri, 6 May 2016 17:31:42 +0100 [thread overview]
Message-ID: <1462552302-5852-10-git-send-email-sergio.gonzalez.monroy@intel.com> (raw)
In-Reply-To: <1462552302-5852-1-git-send-email-sergio.gonzalez.monroy@intel.com>
Signed-off-by: Sergio Gonzalez Monroy <sergio.gonzalez.monroy@intel.com>
---
doc/guides/sample_app_ug/ipsec_secgw.rst | 583 ++++++++++++++++++++-----------
1 file changed, 381 insertions(+), 202 deletions(-)
diff --git a/doc/guides/sample_app_ug/ipsec_secgw.rst b/doc/guides/sample_app_ug/ipsec_secgw.rst
index c11c7e7..5dbee2e 100644
--- a/doc/guides/sample_app_ug/ipsec_secgw.rst
+++ b/doc/guides/sample_app_ug/ipsec_secgw.rst
@@ -76,10 +76,10 @@ Path for IPsec Outbound traffic:
Constraints
-----------
-* IPv4 traffic
-* ESP tunnel mode
-* EAS-CBC, HMAC-SHA1 and NULL
-* Each SA must be handle by a unique lcore (1 RX queue per port)
+* No IPv6 options headers
+* No AH mode
+* Currently only EAS-CBC, HMAC-SHA1 and NULL
+* Each SA must be handle by a unique lcore (*1 RX queue per port*)
* No chained mbufs
Compiling the Application
@@ -108,6 +108,14 @@ To compile the application:
make
+#. [Optional] Build the application for debugging:
+ This option adds some extra flags, disables compiler optimizations and
+ is verbose.
+
+ .. code-block:: console
+
+ make DEBUG=1
+
Running the Application
-----------------------
@@ -141,8 +149,9 @@ where,
* --ep1: configure the app as Endpoint 1.
Either one of --ep0 or --ep1 *must* be specified.
-The main purpose of these options is two easily configure two systems
-back-to-back that would forward traffic through an IPsec tunnel.
+The main purpose of these options is to easily configure two systems
+back-to-back that would forward traffic through an IPsec tunnel (see
+:ref:`figure_ipsec_endpoints`).
The mapping of lcores to port/queues is similar to other l3fwd applications.
@@ -196,7 +205,8 @@ Refer to the *DPDK Getting Started Guide* for general information on running
applications and the Environment Abstraction Layer (EAL) options.
The application would do a best effort to "map" crypto devices to cores, with
-hardware devices having priority.
+hardware devices having priority. Basically, hardware devices if present would
+be assign to a core before software ones.
This means that if the application is using a single core and both hardware
and software crypto devices are detected, hardware devices will be used.
@@ -221,6 +231,20 @@ The following sections provide some details on the default values used to
initialize the SP, SA and Routing tables.
Currently all the configuration is hard coded into the application.
+The following image illustrate a few of the concepts regarding IPSec, such
+as protected/unprotected and inbound/outbound traffic, from the point of
+view of two back-to-back endpoints:
+
+.. _figure_ipsec_endpoints:
+
+.. figure:: img/ipsec_endpoints.svg
+
+ IPSec Inbound/Outbound traffic
+
+Note that the above image only displays uniderectional traffic per port
+for illustration purposes.
+The application supports bidirectional traffic on all ports,
+
Security Policy Initialization
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
@@ -228,107 +252,122 @@ As mention in the overview, the Security Policies are ACL rules.
The application defines two ACLs, one each of Inbound and Outbound, and
it replicates them per socket in use.
-Following are the default rules:
+Following are the default rules which show only the relevant information,
+assuming ANY value is valid for the fields not mentioned (src ip, proto,
+src/dst ports).
Endpoint 0 Outbound Security Policies:
-+---------+------------------+-----------+------------+
-| **Src** | **Dst** | **proto** | **SA idx** |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.105.0/24 | Any | 5 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.106.0/24 | Any | 6 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.107.0/24 | Any | 7 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.108.0/24 | Any | 8 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.200.0/24 | Any | 9 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.250.0/24 | Any | BYPASS |
-| | | | |
-+---------+------------------+-----------+------------+
++-----------------------------------+------------+
+| **Dst** | **SA idx** |
+| | |
++-----------------------------------+------------+
+| 192.168.105.0/24 | 5 |
+| | |
++-----------------------------------+------------+
+| 192.168.106.0/24 | 6 |
+| | |
++-----------------------------------+------------+
+| 192.168.175.0/24 | 10 |
+| | |
++-----------------------------------+------------+
+| 192.168.176.0/24 | 11 |
+| | |
++-----------------------------------+------------+
+| 192.168.200.0/24 | 15 |
+| | |
++-----------------------------------+------------+
+| 192.168.201.0/24 | 16 |
+| | |
++-----------------------------------+------------+
+| 192.168.55.0/24 | 25 |
+| | |
++-----------------------------------+------------+
+| 192.168.56.0/24 | 26 |
+| | |
++-----------------------------------+------------+
+| 192.168.240.0/24 | BYPASS |
+| | |
++-----------------------------------+------------+
+| 192.168.241.0/24 | BYPASS |
+| | |
++-----------------------------------+------------+
+| 0:0:0:0:5555:5555:0:0/96 | 5 |
+| | |
++-----------------------------------+------------+
+| 0:0:0:0:6666:6666:0:0/96 | 6 |
+| | |
++-----------------------------------+------------+
+| 0:0:1111:1111:0:0:0:0/96 | 10 |
+| | |
++-----------------------------------+------------+
+| 0:0:1111:1111:1111:1111:0:0/96 | 11 |
+| | |
++-----------------------------------+------------+
+| 0:0:0:0:aaaa:aaaa:0:0/96 | 25 |
+| | |
++-----------------------------------+------------+
+| 0:0:0:0:bbbb:bbbb:0:0/96 | 26 |
+| | |
++-----------------------------------+------------+
Endpoint 0 Inbound Security Policies:
-+---------+------------------+-----------+------------+
-| **Src** | **Dst** | **proto** | **SA idx** |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.115.0/24 | Any | 5 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.116.0/24 | Any | 6 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.117.0/24 | Any | 7 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.118.0/24 | Any | 8 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.210.0/24 | Any | 9 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.240.0/24 | Any | BYPASS |
-| | | | |
-+---------+------------------+-----------+------------+
-
-Endpoint 1 Outbound Security Policies:
-
-+---------+------------------+-----------+------------+
-| **Src** | **Dst** | **proto** | **SA idx** |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.115.0/24 | Any | 5 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.116.0/24 | Any | 6 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.117.0/24 | Any | 7 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.118.0/24 | Any | 8 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.210.0/24 | Any | 9 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.240.0/24 | Any | BYPASS |
-| | | | |
-+---------+------------------+-----------+------------+
-
-Endpoint 1 Inbound Security Policies:
-
-+---------+------------------+-----------+------------+
-| **Src** | **Dst** | **proto** | **SA idx** |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.105.0/24 | Any | 5 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.106.0/24 | Any | 6 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.107.0/24 | Any | 7 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.108.0/24 | Any | 8 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.200.0/24 | Any | 9 |
-| | | | |
-+---------+------------------+-----------+------------+
-| Any | 192.168.250.0/24 | Any | BYPASS |
-| | | | |
-+---------+------------------+-----------+------------+
++-----------------------------------+------------+
+| **Dst** | **SA idx** |
+| | |
++-----------------------------------+------------+
+| 192.168.115.0/24 | 105 |
+| | |
++-----------------------------------+------------+
+| 192.168.116.0/24 | 106 |
+| | |
++-----------------------------------+------------+
+| 192.168.185.0/24 | 110 |
+| | |
++-----------------------------------+------------+
+| 192.168.186.0/24 | 111 |
+| | |
++-----------------------------------+------------+
+| 192.168.210.0/24 | 115 |
+| | |
++-----------------------------------+------------+
+| 192.168.211.0/24 | 116 |
+| | |
++-----------------------------------+------------+
+| 192.168.65.0/24 | 125 |
+| | |
++-----------------------------------+------------+
+| 192.168.66.0/24 | 126 |
+| | |
++-----------------------------------+------------+
+| 192.168.245.0/24 | BYPASS |
+| | |
++-----------------------------------+------------+
+| 192.168.246.0/24 | BYPASS |
+| | |
++-----------------------------------+------------+
+| ffff:0:0:0:5555:5555:0:0/96 | 105 |
+| | |
++-----------------------------------+------------+
+| ffff:0:0:0:6666:6666:0:0/96 | 106 |
+| | |
++-----------------------------------+------------+
+| ffff:0:1111:1111:0:0:0:0/96 | 110 |
+| | |
++-----------------------------------+------------+
+| ffff:0:1111:1111:1111:1111:0:0/96 | 111 |
+| | |
++-----------------------------------+------------+
+| ffff:0:0:0:aaaa:aaaa:0:0/96 | 125 |
+| | |
++-----------------------------------+------------+
+| ffff:0:0:0:bbbb:bbbb:0:0/96 | 126 |
+| | |
++-----------------------------------+------------+
+
+For Endpoint 1, we use the same policies in reverse, meaning the Inbound SP
+entries are set as Outbound and vice versa.
Security Association Initialization
@@ -350,91 +389,81 @@ Following are the default values:
Endpoint 0 Outbound Security Associations:
-+---------+------------+-----------+----------------+------------------+
-| **SPI** | **Cipher** | **Auth** | **Tunnel src** | **Tunnel dst** |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 5 | AES-CBC | HMAC-SHA1 | 172.16.1.5 | 172.16.2.5 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 6 | AES-CBC | HMAC-SHA1 | 172.16.1.6 | 172.16.2.6 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 7 | AES-CBC | HMAC-SHA1 | 172.16.1.7 | 172.16.2.7 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 8 | AES-CBC | HMAC-SHA1 | 172.16.1.8 | 172.16.2.8 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 9 | NULL | NULL | 172.16.1.5 | 172.16.2.5 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
++---------+----------+------------+-----------+----------------+----------------+
+| **SPI** | **Mode** | **Cipher** | **Auth** | **Tunnel src** | **Tunnel dst** |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 5 | Tunnel | AES-CBC | HMAC-SHA1 | 172.16.1.5 | 172.16.2.5 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 6 | Tunnel | AES-CBC | HMAC-SHA1 | 172.16.1.6 | 172.16.2.6 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 10 | Trans | AES-CBC | HMAC-SHA1 | N/A | N/A |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 11 | Trans | AES-CBC | HMAC-SHA1 | N/A | N/A |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 15 | Tunnel | NULL | NULL | 172.16.1.5 | 172.16.2.5 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 16 | Tunnel | NULL | NULL | 172.16.1.6 | 172.16.2.6 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 25 | Tunnel | AES-CBC | HMAC-SHA1 | 1111:1111: | 2222:2222: |
+| | | | | 1111:1111: | 2222:2222: |
+| | | | | 1111:1111: | 2222:2222: |
+| | | | | 1111:5555 | 2222:5555 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 26 | Tunnel | AES-CBC | HMAC-SHA1 | 1111:1111: | 2222:2222: |
+| | | | | 1111:1111: | 2222:2222: |
+| | | | | 1111:1111: | 2222:2222: |
+| | | | | 1111:6666 | 2222:6666 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
Endpoint 0 Inbound Security Associations:
-+---------+------------+-----------+----------------+------------------+
-| **SPI** | **Cipher** | **Auth** | **Tunnel src** | **Tunnel dst** |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 5 | AES-CBC | HMAC-SHA1 | 172.16.2.5 | 172.16.1.5 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 6 | AES-CBC | HMAC-SHA1 | 172.16.2.6 | 172.16.1.6 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 7 | AES-CBC | HMAC-SHA1 | 172.16.2.7 | 172.16.1.7 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 8 | AES-CBC | HMAC-SHA1 | 172.16.2.8 | 172.16.1.8 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 9 | NULL | NULL | 172.16.2.5 | 172.16.1.5 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-
-Endpoint 1 Outbound Security Associations:
-
-+---------+------------+-----------+----------------+------------------+
-| **SPI** | **Cipher** | **Auth** | **Tunnel src** | **Tunnel dst** |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 5 | AES-CBC | HMAC-SHA1 | 172.16.2.5 | 172.16.1.5 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 6 | AES-CBC | HMAC-SHA1 | 172.16.2.6 | 172.16.1.6 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 7 | AES-CBC | HMAC-SHA1 | 172.16.2.7 | 172.16.1.7 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 8 | AES-CBC | HMAC-SHA1 | 172.16.2.8 | 172.16.1.8 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 9 | NULL | NULL | 172.16.2.5 | 172.16.1.5 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-
-Endpoint 1 Inbound Security Associations:
-
-+---------+------------+-----------+----------------+------------------+
-| **SPI** | **Cipher** | **Auth** | **Tunnel src** | **Tunnel dst** |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 5 | AES-CBC | HMAC-SHA1 | 172.16.1.5 | 172.16.2.5 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 6 | AES-CBC | HMAC-SHA1 | 172.16.1.6 | 172.16.2.6 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 7 | AES-CBC | HMAC-SHA1 | 172.16.1.7 | 172.16.2.7 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 8 | AES-CBC | HMAC-SHA1 | 172.16.1.8 | 172.16.2.8 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
-| 9 | NULL | NULL | 172.16.1.5 | 172.16.2.5 |
-| | | | | |
-+---------+------------+-----------+----------------+------------------+
++---------+----------+------------+-----------+----------------+----------------+
+| **SPI** | **Mode** | **Cipher** | **Auth** | **Tunnel src** | **Tunnel dst** |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 105 | Tunnel | AES-CBC | HMAC-SHA1 | 172.16.2.5 | 172.16.1.5 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 106 | Tunnel | AES-CBC | HMAC-SHA1 | 172.16.2.6 | 172.16.1.6 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 110 | Trans | AES-CBC | HMAC-SHA1 | N/A | N/A |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 111 | Trans | AES-CBC | HMAC-SHA1 | N/A | N/A |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 115 | Tunnel | NULL | NULL | 172.16.2.5 | 172.16.1.5 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 116 | Tunnel | NULL | NULL | 172.16.2.6 | 172.16.1.6 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 125 | Tunnel | AES-CBC | HMAC-SHA1 | 2222:2222: | 1111:1111: |
+| | | | | 2222:2222: | 1111:1111: |
+| | | | | 2222:2222: | 1111:1111: |
+| | | | | 2222:5555 | 1111:5555 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+| 126 | Tunnel | AES-CBC | HMAC-SHA1 | 2222:2222: | 1111:1111: |
+| | | | | 2222:2222: | 1111:1111: |
+| | | | | 2222:2222: | 1111:1111: |
+| | | | | 2222:6666 | 1111:6666 |
+| | | | | | |
++---------+----------+------------+-----------+----------------+----------------+
+
+For Endpoint 1, we use the same policies in reverse, meaning the Inbound SP
+entries are set as Outbound and vice versa.
+
Routing Initialization
~~~~~~~~~~~~~~~~~~~~~~
@@ -452,34 +481,109 @@ Endpoint 0 Routing Table:
| 172.16.2.5/32 | 0 |
| | |
+------------------+----------+
-| 172.16.2.6/32 | 0 |
+| 172.16.2.6/32 | 1 |
+| | |
++------------------+----------+
+| 192.168.175.0/24 | 0 |
+| | |
++------------------+----------+
+| 192.168.176.0/24 | 1 |
| | |
+------------------+----------+
-| 172.16.2.7/32 | 1 |
+| 192.168.240.0/24 | 0 |
| | |
+------------------+----------+
-| 172.16.2.8/32 | 1 |
+| 192.168.241.0/24 | 1 |
| | |
+------------------+----------+
| 192.168.115.0/24 | 2 |
| | |
+------------------+----------+
-| 192.168.116.0/24 | 2 |
+| 192.168.116.0/24 | 3 |
+| | |
++------------------+----------+
+| 192.168.65.0/24 | 2 |
+| | |
++------------------+----------+
+| 192.168.66.0/24 | 3 |
| | |
+------------------+----------+
-| 192.168.117.0/24 | 3 |
+| 192.168.185.0/24 | 2 |
| | |
+------------------+----------+
-| 192.168.118.0/24 | 3 |
+| 192.168.186.0/24 | 3 |
| | |
+------------------+----------+
| 192.168.210.0/24 | 2 |
| | |
+------------------+----------+
-| 192.168.240.0/24 | 2 |
+| 192.168.211.0/24 | 3 |
+| | |
++------------------+----------+
+| 192.168.245.0/24 | 2 |
+| | |
++------------------+----------+
+| 192.168.246.0/24 | 3 |
+| | |
++------------------+----------+
+| 2222:2222: | 0 |
+| 2222:2222: | |
+| 2222:2222: | |
+| 2222:5555/116 | |
+| | |
++------------------+----------+
+| 2222:2222: | 1 |
+| 2222:2222: | |
+| 2222:2222: | |
+| 2222:6666/116 | |
| | |
+------------------+----------+
-| 192.168.250.0/24 | 0 |
+| 0000:0000: | 0 |
+| 1111:1111: | |
+| 0000:0000: | |
+| 0000:0000/116 | |
+| | |
++------------------+----------+
+| 0000:0000: | 1 |
+| 1111:1111: | |
+| 1111:1111: | |
+| 0000:0000/116 | |
+| | |
++------------------+----------+
+| ffff:0000: | 2 |
+| 0000:0000: | |
+| aaaa:aaaa: | |
+| 0000:0/116 | |
+| | |
++------------------+----------+
+| ffff:0000: | 3 |
+| 0000:0000: | |
+| bbbb:bbbb: | |
+| 0000:0/116 | |
+| | |
++------------------+----------+
+| ffff:0000: | 2 |
+| 0000:0000: | |
+| 5555:5555: | |
+| 0000:0/116 | |
+| | |
++------------------+----------+
+| ffff:0000: | 3 |
+| 0000:0000: | |
+| 6666:6666: | |
+| 0000:0/116 | |
+| | |
++------------------+----------+
+| ffff:0000: | 2 |
+| 1111:1111: | |
+| 0000:0000: | |
+| 0000:0000/116 | |
+| | |
++------------------+----------+
+| ffff:0000: | 3 |
+| 1111:1111: | |
+| 1111:1111: | |
+| 0000:0000/116 | |
| | |
+------------------+----------+
@@ -489,36 +593,111 @@ Endpoint 1 Routing Table:
| **Dst addr** | **Port** |
| | |
+------------------+----------+
-| 172.16.1.5/32 | 2 |
+| 172.16.1.5/32 | 0 |
+| | |
++------------------+----------+
+| 172.16.1.6/32 | 1 |
+| | |
++------------------+----------+
+| 192.168.185.0/24 | 0 |
| | |
+------------------+----------+
-| 172.16.1.6/32 | 2 |
+| 192.168.186.0/24 | 1 |
| | |
+------------------+----------+
-| 172.16.1.7/32 | 3 |
+| 192.168.245.0/24 | 0 |
| | |
+------------------+----------+
-| 172.16.1.8/32 | 3 |
+| 192.168.246.0/24 | 1 |
| | |
+------------------+----------+
-| 192.168.105.0/24 | 0 |
+| 192.168.105.0/24 | 2 |
| | |
+------------------+----------+
-| 192.168.106.0/24 | 0 |
+| 192.168.106.0/24 | 3 |
| | |
+------------------+----------+
-| 192.168.107.0/24 | 1 |
+| 192.168.55.0/24 | 2 |
| | |
+------------------+----------+
-| 192.168.108.0/24 | 1 |
+| 192.168.56.0/24 | 3 |
| | |
+------------------+----------+
-| 192.168.200.0/24 | 0 |
+| 192.168.175.0/24 | 2 |
+| | |
++------------------+----------+
+| 192.168.176.0/24 | 3 |
+| | |
++------------------+----------+
+| 192.168.200.0/24 | 2 |
+| | |
++------------------+----------+
+| 192.168.201.0/24 | 3 |
| | |
+------------------+----------+
| 192.168.240.0/24 | 2 |
| | |
+------------------+----------+
-| 192.168.250.0/24 | 0 |
+| 192.168.241.0/24 | 3 |
+| | |
++------------------+----------+
+| 1111:1111: | 0 |
+| 1111:1111: | |
+| 1111:1111: | |
+| 1111:5555/116 | |
+| | |
++------------------+----------+
+| 1111:1111: | 1 |
+| 1111:1111: | |
+| 1111:1111: | |
+| 1111:6666/116 | |
+| | |
++------------------+----------+
+| ffff:0000: | 0 |
+| 1111:1111: | |
+| 0000:0000: | |
+| 0000:0000/116 | |
+| | |
++------------------+----------+
+| ffff:0000: | 1 |
+| 1111:1111: | |
+| 1111:1111: | |
+| 0000:0000/116 | |
+| | |
++------------------+----------+
+| 0000:0000: | 2 |
+| 0000:0000: | |
+| aaaa:aaaa: | |
+| 0000:0/116 | |
+| | |
++------------------+----------+
+| 0000:0000: | 3 |
+| 0000:0000: | |
+| bbbb:bbbb: | |
+| 0000:0/116 | |
+| | |
++------------------+----------+
+| 0000:0000: | 2 |
+| 0000:0000: | |
+| 5555:5555: | |
+| 0000:0/116 | |
+| | |
++------------------+----------+
+| 0000:0000: | 3 |
+| 0000:0000: | |
+| 6666:6666: | |
+| 0000:0/116 | |
+| | |
++------------------+----------+
+| 0000:0000: | 2 |
+| 1111:1111: | |
+| 0000:0000: | |
+| 0000:0000/116 | |
+| | |
++------------------+----------+
+| 0000:0000: | 3 |
+| 1111:1111: | |
+| 1111:1111: | |
+| 0000:0000/116 | |
| | |
+------------------+----------+
--
2.5.5
next prev parent reply other threads:[~2016-05-06 16:31 UTC|newest]
Thread overview: 38+ messages / expand[flat|nested] mbox.gz Atom feed top
2016-05-06 16:31 [dpdk-dev] [PATCH 0/9] IPSec example enhancements Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 1/9] examples/ipsec-secgw: fix esp padding check Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 2/9] examples/ipsec-secgw: fix stack smashing error Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 3/9] examples/ipsec-secgw: add build option and cleanup Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 4/9] examples/ipsec-secgw: rework ipsec execution loop Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 5/9] examples/ipsec-secgw: fix no sa found case Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 6/9] examples/ipsec-secgw: consistent config variable names Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 7/9] examples/ipsec-secgw: ipv6 support Sergio Gonzalez Monroy
2016-05-06 16:31 ` [dpdk-dev] [PATCH 8/9] examples/ipsec-secgw: transport mode support Sergio Gonzalez Monroy
2016-05-06 16:31 ` Sergio Gonzalez Monroy [this message]
2016-05-10 9:21 ` [dpdk-dev] [PATCH 9/9] doc: update ipsec sample guide Mcnamara, John
2016-05-18 12:42 ` [dpdk-dev] [PATCH v2 0/9] IPSec enhancements Sergio Gonzalez Monroy
2016-05-18 12:42 ` [dpdk-dev] [PATCH v2 1/9] examples/ipsec-secgw: fix esp padding check Sergio Gonzalez Monroy
2016-05-18 12:42 ` [dpdk-dev] [PATCH v2 2/9] examples/ipsec-secgw: fix stack smashing error Sergio Gonzalez Monroy
2016-05-18 12:42 ` [dpdk-dev] [PATCH v2 3/9] examples/ipsec-secgw: add build option and cleanup Sergio Gonzalez Monroy
2016-05-18 12:42 ` [dpdk-dev] [PATCH v2 4/9] examples/ipsec-secgw: rework ipsec execution loop Sergio Gonzalez Monroy
2016-06-07 12:50 ` De Lara Guarch, Pablo
2016-05-18 12:42 ` [dpdk-dev] [PATCH v2 5/9] examples/ipsec-secgw: fix no sa found case Sergio Gonzalez Monroy
2016-06-07 13:17 ` De Lara Guarch, Pablo
2016-05-18 12:42 ` [dpdk-dev] [PATCH v2 6/9] examples/ipsec-secgw: consistent config variable names Sergio Gonzalez Monroy
2016-05-18 12:42 ` [dpdk-dev] [PATCH v2 7/9] examples/ipsec-secgw: ipv6 support Sergio Gonzalez Monroy
2016-06-07 16:10 ` De Lara Guarch, Pablo
2016-05-18 12:42 ` [dpdk-dev] [PATCH v2 8/9] examples/ipsec-secgw: transport mode support Sergio Gonzalez Monroy
2016-05-18 12:42 ` [dpdk-dev] [PATCH v2 9/9] doc: update ipsec sample guide Sergio Gonzalez Monroy
2016-05-18 13:43 ` Mcnamara, John
2016-06-09 8:42 ` [dpdk-dev] [PATCH v3 0/9] IPSec Enhancements Sergio Gonzalez Monroy
2016-06-09 8:42 ` [dpdk-dev] [PATCH v3 1/9] examples/ipsec-secgw: fix esp padding check Sergio Gonzalez Monroy
2016-06-09 8:42 ` [dpdk-dev] [PATCH v3 2/9] examples/ipsec-secgw: fix stack smashing error Sergio Gonzalez Monroy
2016-06-09 8:42 ` [dpdk-dev] [PATCH v3 3/9] examples/ipsec-secgw: add build option and cleanup Sergio Gonzalez Monroy
2016-06-09 8:42 ` [dpdk-dev] [PATCH v3 4/9] examples/ipsec-secgw: rework ipsec execution loop Sergio Gonzalez Monroy
2016-06-09 8:42 ` [dpdk-dev] [PATCH v3 5/9] examples/ipsec-secgw: fix no sa found case Sergio Gonzalez Monroy
2016-06-09 8:42 ` [dpdk-dev] [PATCH v3 6/9] examples/ipsec-secgw: consistent config variable names Sergio Gonzalez Monroy
2016-06-09 8:42 ` [dpdk-dev] [PATCH v3 7/9] examples/ipsec-secgw: ipv6 support Sergio Gonzalez Monroy
2016-06-09 8:42 ` [dpdk-dev] [PATCH v3 8/9] examples/ipsec-secgw: transport mode support Sergio Gonzalez Monroy
2016-06-09 8:42 ` [dpdk-dev] [PATCH v3 9/9] doc: update ipsec sample guide Sergio Gonzalez Monroy
2016-06-09 11:11 ` Mcnamara, John
2016-06-09 11:58 ` [dpdk-dev] [PATCH v3 0/9] IPSec Enhancements De Lara Guarch, Pablo
2016-06-21 10:14 ` Thomas Monjalon
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1462552302-5852-10-git-send-email-sergio.gonzalez.monroy@intel.com \
--to=sergio.gonzalez.monroy@intel.com \
--cc=dev@dpdk.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).