Re: [dpdk-users] IPsec offload

["Avi Cohen (A)" <avi.cohen@huawei.com>]

Hi Pablo,

 > 1 - Double check you are using the latest IPSec library (0.47) and
 > that you are linking against it (just follow the documentation).
 > 2 - That's a network device, not a crypto device.
 [Avi Cohen (A)]
1.  I meant that my Ethernet device x540 is capable to do IPsec encryption in HW.
     What did you mean "a crypto device (SW or HW)" ?

2. I  also I enable the IESNI_GCM_PMD according the http://dpdk.org/doc/guides/cryptodevs/aesni_gcm.html ,   but still receive this error in init  (: unrecognized input "sa")


./ipsec-secgw -l 20,21 -n 4  --vdev "crypto_aesni_gcm" -- -p 0xf -P -u 0x3 --config="(0,0,20),(1,0,20),(2,0,21),(3,0,21)" -f ep-sample.cfg

EAL: Detected 24 lcore(s)
EAL: 16 hugepages of size 1073741824 reserved, but no mounted hugetlbfs found for that size
EAL: Probing VFIO support...
EAL: PCI device 0000:01:00.0 on NUMA socket 0
EAL:   probe driver: 8086:1528 net_ixgbe
EAL: PCI device 0000:01:00.1 on NUMA socket 0
EAL:   probe driver: 8086:1528 net_ixgbe
EAL: PCI device 0000:04:00.0 on NUMA socket 0
EAL:   probe driver: 8086:1528 net_ixgbe
EAL: PCI device 0000:04:00.1 on NUMA socket 0
EAL:   probe driver: 8086:1528 net_ixgbe
EAL: PCI device 0000:08:00.0 on NUMA socket 0
EAL:   probe driver: 8086:1521 net_e1000_igb
EAL: PCI device 0000:08:00.1 on NUMA socket 0
EAL:   probe driver: 8086:1521 net_e1000_igb
CRYPTODEV: [crypto_aesni_gcm] - Creating cryptodev crypto_aesni_gcm

CRYPTODEV: [crypto_aesni_gcm] - Initialisation parameters - name: crypto_aesni_gcm,socket id: 0, max queue pairs: 8, max sessions: 2048
Promiscuous mode selected
PANIC in parse_cfg_file():
ep-sample.cfg:1: error: unrecognized input "sa"
6: [./ipsec-secgw(_start+0x29) [0x44a0f9]]
5: [/lib64/libc.so.6(__libc_start_main+0xf1) [0x7fe3cd492731]]
4: [./ipsec-secgw(main+0xdd) [0x445d2d]]
3: [./ipsec-secgw(parse_cfg_file+0x3d0) [0x44b180]]
2: [./ipsec-secgw(__rte_panic+0xb8) [0x440d83]]
1: [./ipsec-secgw(rte_dump_stack+0x16) [0x4b5876]]
 
Regards
 Avi