From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: <dev-bounces@dpdk.org> Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id 4B450A04B4; Wed, 26 Aug 2020 13:23:47 +0200 (CEST) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 76E7258C4; Wed, 26 Aug 2020 13:23:46 +0200 (CEST) Received: from mail-ed1-f45.google.com (mail-ed1-f45.google.com [209.85.208.45]) by dpdk.org (Postfix) with ESMTP id E61E24C99; Wed, 26 Aug 2020 13:23:44 +0200 (CEST) Received: by mail-ed1-f45.google.com with SMTP id u1so1409886edi.4; Wed, 26 Aug 2020 04:23:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=iRe7HEE0Kq1+Q5tp8V9zeHH6I33VK/uEs8TChfXNVWA=; b=BPgCUGmNjqvXCMrHuVYg4eiJna5Jx/5U8oet+S64fFauBsEm+6dzC2n+RReqBH7rSX swPl4kwAc7y6GhQ3Sk5nFGkElzAxHcOZuL2Kc3e1jm2kYNuM0a8TnQ6O6bvpox85iZ/3 a7Wr9520H4Bxe6rigpiCQ4B2FOnRZ9QGD8POZm/iKU93+gMARlBZ5kJosUJ8Rg5Pp92F xk2cUmOgp4e3Arok+T/IHXDqzrKOTt1Su5n4oUZcsGgV4jDZ2/CEog7tXngU8XMn34/B ALy9+7fVOatIrDHhnrU+uHm98Vu7xcJuQvjawHNxa78j0ggbbwcPytrakF6Az2aj8tHA zc2g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc; bh=iRe7HEE0Kq1+Q5tp8V9zeHH6I33VK/uEs8TChfXNVWA=; b=H5EEh+WmcgSYFgfzJTfHUcDSWztAzHFOuiZ8Ez1S/JDD5kS62MJl14JYeHp3GgDv/C C6IvLBs54F9jURVwX5FbUDOM4Gv+Nen5n4jQ2MobrSDgSM0/4iCtZp/CQRdudyv6UVjF oZCW8VyvsG9txI+8Bel5XZIEnZPuN4H2UH88hnBoIzFb/N+oS9GG7SRF3zUrzr5bb3Ht pc4bNTXS+lwYa+Hht9c8ZW4dhDqwMLJKtGvPISgFxHkKEnw08r4HIMP76YswGLmBuYsQ j0NHbKFOZnRqqN58JCmqBs3iAkfHusfpNe5pHYEa3PI6VdOWZLgKzwzvCekM1Py71akP YGQw== X-Gm-Message-State: AOAM533bVy3KLStT/jstZpmfBMSYzvC4KxJhWNgZQj4JDZIPQglay4X6 Na9WCK9fURlLxqLdMGQLYkFkwy2LfD+r3aUeoqg= X-Google-Smtp-Source: ABdhPJwLopOitGjJsW+4JnDBNiDuCiI6WCzYXvbk21jPZbru9AH/VGvd3vjq0eQwzRmGt4608NgPapoRev8sVJy/Nnc= X-Received: by 2002:a05:6402:1d97:: with SMTP id dk23mr3366190edb.350.1598441024349; Wed, 26 Aug 2020 04:23:44 -0700 (PDT) MIME-Version: 1.0 References: <CAMJ3rejJ4_7bYrZ1=kAsWds4A53UNBVePNdVCGpr3BDzAWAsSA@mail.gmail.com> <CAMJ3rejbOZ5mzOYyNPFqVk-Scs7CTaVZLUQOd-GMnVpaYf+pmg@mail.gmail.com> <CAECt3bPG__2Lz_fLhRtr4oPfWNaSz+-RGvj4N86GbjxSMOa5rA@mail.gmail.com> <CAECt3bNPHbsoOEhHDfWbxOTyg4UyE1AJYOm++_V=MgEwAbGHBg@mail.gmail.com> <CAECt3bNy1CVRtWVunirj3V6pAR0RWQps=kB--+2Vyu6DgnRK5g@mail.gmail.com> <MN2PR18MB28771AE121FECD62CD699A50DF5C0@MN2PR18MB2877.namprd18.prod.outlook.com> <CAECt3bM6KV5u-9_NKno5sXdVw1zgF_UyUVWk34rPwzceVhVYKw@mail.gmail.com> In-Reply-To: <CAECt3bM6KV5u-9_NKno5sXdVw1zgF_UyUVWk34rPwzceVhVYKw@mail.gmail.com> From: satyavalli rama <satyavalli.rama@gmail.com> Date: Wed, 26 Aug 2020 16:53:32 +0530 Message-ID: <CAECt3bODT+5easFPBsjrqU3a2gv25n6zvsAEY_7bOpPr83K5gA@mail.gmail.com> To: Anoob Joseph <anoobj@marvell.com> Cc: dev@dpdk.org, users@dpdk.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.15 Subject: Re: [dpdk-dev] Ipsec-secgw packet processing X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK patches and discussions <dev.dpdk.org> List-Unsubscribe: <https://mails.dpdk.org/options/dev>, <mailto:dev-request@dpdk.org?subject=unsubscribe> List-Archive: <http://mails.dpdk.org/archives/dev/> List-Post: <mailto:dev@dpdk.org> List-Help: <mailto:dev-request@dpdk.org?subject=help> List-Subscribe: <https://mails.dpdk.org/listinfo/dev>, <mailto:dev-request@dpdk.org?subject=subscribe> Errors-To: dev-bounces@dpdk.org Sender: "dev" <dev-bounces@dpdk.org> Hi Anoob, Do you need any more info.. Kindly help us.. We are totally stuck.. Thanks On Wed, 19 Aug, 2020, 4:38 pm satyavalli rama, <satyavalli.rama@gmail.com> wrote: > Hi Anoob > > We are using the following hardware details, > HOST: x722 (i40e) intel. > VM: e1000 (82540) intel. > > We have launched Virtual machine on host , and executing ipsec-secgw > application on VM. > > Please find below the CLI and configuration for TRANSPORT MODE. > > CLI: > > ./build/ipsec-secgw -l 0 -n 4 --socket-mem 1024,0 --vdev "crypto_null" -- > -p 0x3 -P -u 0x1 --config="(0,0,0),(1,0,0)" -f ep0.cfg > > #TRANSPORT: > > #SP IPv4 rules > sp ipv4 out esp protect 10 pri 1 dst 192.168.122.0/24 sport 0:65535 dport > 0:65535 > > #SA rules > sa out 10 cipher_algo aes-128-cbc cipher_key > a1:a1:a1:a1:a1:a1:a1:a1:a1:a1:a1:\ > a1:a1:a1:a1:a1 auth_algo sha1-hmac auth_key > a1:a1:a1:a1:a1:a1:a1:a1:a1:a1:a1:\ > a1:a1:a1:a1:a1:a1:a1:a1:a1 mode transport > > #Routing rules > rt ipv4 dst 192.168.122.0/24 port 1 > > > Please find below the CLI and configuration for TUNNEL MODE. > > CLI: > > ./build/ipsec-secgw -l 0 -n 4 --socket-mem 1024,0 --vdev "crypto_null" -- > -p 0x3 -P -u 0x1 --config="(0,0,0),(1,0,0)" -f ep0.cfg > > #TUNNEL End Point-0: > > #SP IPv4 rules > sp ipv4 out esp protect 5 pri 1 dst 192.168.122.0/24 sport 0:65535 dport > 0:65535 > > #SA rules > sa out 5 cipher_algo aes-128-cbc cipher_key > 0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0 \ > auth_algo sha1-hmac auth_key 0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0:0 \ > mode ipv4-tunnel src 192.168.122.96 dst 192.168.122.213 > > #Routing rules > rt ipv4 dst 192.168.122.0/24 port 1 > > On Tue, 18 Aug, 2020, 4:29 pm Anoob Joseph, <anoobj@marvell.com> wrote: > >> Hi Satya, >> >> Are you attempting to enable inline protocol (IPsec) functionality? If >> yes, which PMD (& h/w) are you using for the same? >> >> Thanks, >> Anoob >> >> > -----Original Message----- >> > From: dev <dev-bounces@dpdk.org> On Behalf Of satyavalli rama >> > Sent: Tuesday, August 18, 2020 4:08 PM >> > To: dev@dpdk.org; users@dpdk.org >> > Subject: Re: [dpdk-dev] Ipsec-secgw packet processing >> > >> > We further debugged and we observed that while running ipsec-secgw >> > application in transport-mode dpdk-19.02/11, we found that inline packet >> > processing is not happening. >> > We observed that ol_flags is not setting from driver level. We are >> expecting >> > that , because of ol_flags not set , inline packet processing is not >> > happening.Any idea What could be the reason for this, I think ol_flags >> will be >> > configured from driver level Or else do we need to provide any external >> > configuration for setting ol_flags. >> > And also we are not observing encrypt/decrypt packets on pdump before >> > sending packets out from tx-port(rte_eth_tx_burst()). >> > Please help us on this...to proceed further. >> > >> > Thanks & Regards >> > Satya >> > >> > >> > >> > On Mon, 17 Aug, 2020, 4:11 pm satyavalli rama, < >> satyavalli.rama@gmail.com> >> > wrote: >> > >> > > >> > > Hello, >> > > >> > > While we are running ipsec-secgw application in transport-mode on >> > > dpdk-19.02, we found that inline packet processing is not happening. >> > > >> > > And also we are not observing any encrypt/decrypt packets on pdump >> > > before sending packets out from tx-port(rte_eth_tx_burst()). >> > > >> > > Please help us on how to proceed further. >> > > >> > > Thanks, >> > > Jagadeesh >> > > >> > > >> >