From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by inbox.dpdk.org (Postfix) with ESMTP id 5A944A0C44 for ; Mon, 12 Apr 2021 18:03:31 +0200 (CEST) Received: from [217.70.189.124] (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id DBCE914125D; Mon, 12 Apr 2021 18:03:30 +0200 (CEST) Received: from mail-lf1-f53.google.com (mail-lf1-f53.google.com [209.85.167.53]) by mails.dpdk.org (Postfix) with ESMTP id 6D47A14125C for ; Mon, 12 Apr 2021 18:03:29 +0200 (CEST) Received: by mail-lf1-f53.google.com with SMTP id x13so12122978lfr.2 for ; Mon, 12 Apr 2021 09:03:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=conclusive-pl.20150623.gappssmtp.com; s=20150623; h=to:from:subject:message-id:date:user-agent:mime-version :content-transfer-encoding:content-language; bh=yNFcmGV0d+v9SIWaVKZ01z5Vp6S1YPHOHq1Gh/VKaVo=; b=kBB15zHmW5NK8h+XSjywsWJaeir+3NcFw9aRGecieq1wGp6paOXUEbl8yfyX6b2+bs gRaNkIrsUs9vgI3/bFFBG9YZEyBD/+SVkOiTyk4gMSoqso3sccZYm8kR93/vcqjzn6KJ 7wXCzA6dVUMXeYYYnC+s0xKzFeiud7QyFn8uk4VUmSkby3/moYpWr0xSUh5cYi8z69uZ SYV/vZTyNaGDv1gAkEgKoqDTtPqPlE8cgOrMe3CzwLeoE+nbNsWYQrOv7ZJLhZU1bG2b ibBY9lPPYHnyt2HAu1cICygW+wtpJWLUO0zlz2M0qa1qsGRNFQMECnv1Yd7M5mREcovx G60Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:to:from:subject:message-id:date:user-agent :mime-version:content-transfer-encoding:content-language; bh=yNFcmGV0d+v9SIWaVKZ01z5Vp6S1YPHOHq1Gh/VKaVo=; b=b1LVMrhaUSerDuyhIqNE+sLNVSyTkfdHPGuwCNBphv7yV5hI02D1ZcnKXc5vcc3kM5 lnlsBLCZFggXMNwWoXPSzO130vQulqhBawYjH7s3kl9wQx6yOfwdYuzuwBQG9ihlkU15 Fzn+jg/6dZtrAdn7dZZS3kcFPo8TH5cQI/LFJareMezf5t342ln5SwP49oU0J863sDel uA6Go7tcPYa2JX6K17aAbEvYcZOOoR4SmPdkQGZ35OrcqBhOdOkjYQTf6Qm4njK2utT1 P8uSxOJcjLnL3B2dGpXNxIj7spYJjBoGARJsfXiz2Arg4wfGNnm9DVpd+Dp2D5iqkKHD 5Fyg== X-Gm-Message-State: AOAM530N+ir0I4HANAp2cZPlSBKb+TwFpFyvpjY3Fp9nR4Pp/vnyn4Nm foXTDXUcZSGYSS7Et1k6q7ml12PPBDRFoQ== X-Google-Smtp-Source: ABdhPJxcaRH9GzhOV7woHS9B/5+sfbBMQhN3J/HsAVqQ7RYTNZ6hF9AxpbwxOotYcfZMwzyuQi721A== X-Received: by 2002:ac2:46c2:: with SMTP id p2mr16777987lfo.191.1618243408731; Mon, 12 Apr 2021 09:03:28 -0700 (PDT) Received: from [192.168.1.225] (89-78-220-77.dynamic.chello.pl. [89.78.220.77]) by smtp.gmail.com with ESMTPSA id o16sm2509921lfu.228.2021.04.12.09.03.27 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 12 Apr 2021 09:03:27 -0700 (PDT) To: users@dpdk.org From: Bartlomiej Message-ID: <8c26ceea-1403-8b3b-98f2-f9cd556cb699@conclusive.pl> Date: Mon, 12 Apr 2021 18:03:27 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Thunderbird/68.10.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit Content-Language: en-US Subject: [dpdk-users] Problem with ipsec-secgw on DPAA X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: users-bounces@dpdk.org Sender: "users" Hello, I have a couple of problems with the example apps. The setup used for testing is a custom LS1046A-based board running QorIQ 4.19 linux kernel. DPDK is built from the main branch with the DPAA driver, specifically commit 41e026c1b3fd07ee. One of the ethernet ports is under DPDK control and is plugged in directly into another board for inspection of egress traffic. The DPDK apps are spawned with a tap virtual device to insert some UDP packets for testing. My goal is to run the ipsec-secgw app on it with hardware encryption. I managed to run l2fwd successfully, but have a couple of problems with other example apps: 1) l2fwd-crypto crashes on `struct qm_portal` access, which after checking in gdb seems to consist of zeros. 2) ipsec-secgw - No matter what config I use, the only thing I managed so far is to forward the UDP packets from the tap device to the ethernet port. There is no ESP and the contents are unencrypted on the other device. The config used: ``` sp ipv4 in esp protect 5 pri 2 dst 10.0.3.0/24 sport 0:65535 dport 0:65535 sa in 5 \ cipher_algo aes-128-cbc \ cipher_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \ auth_algo sha1-hmac \ auth_key de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef:de:ad:be:ef \ mode ipv4-tunnel \ src 10.0.3.100 dst 100.0.3.101 \ port_id 0 type lookaside-protocol-offload rt ipv4 dst 10.0.3.0/24 port 0 ``` The UDP packets are generated according to this spec: https://gist.github.com/bartlomiejn/2607847a3f70d543da92f5717b88fa4e Is my config correct? Can anyone help with diagnosing this problem? Best regards, Bartlomiej Nowak Software Engineer Conclusive Engineering