From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <avi.cohen@huawei.com>
Received: from huawei.com (lhrrgout.huawei.com [194.213.3.17])
 by dpdk.org (Postfix) with ESMTP id 098761D7
 for <users@dpdk.org>; Mon,  1 Jan 2018 13:40:44 +0100 (CET)
Received: from lhreml703-cah.china.huawei.com (unknown [172.18.7.107])
 by Forcepoint Email with ESMTP id A0593C13A3088
 for <users@dpdk.org>; Mon,  1 Jan 2018 12:40:42 +0000 (GMT)
Received: from FRAEML704-CAH.china.huawei.com (10.206.14.35) by
 lhreml703-cah.china.huawei.com (10.201.108.44) with Microsoft SMTP Server
 (TLS) id 14.3.361.1; Mon, 1 Jan 2018 12:40:43 +0000
Received: from FRAEML521-MBX.china.huawei.com ([169.254.1.156]) by
 FRAEML704-CAH.china.huawei.com ([10.206.14.35]) with mapi id 14.03.0361.001;
 Mon, 1 Jan 2018 13:40:42 +0100
From: "Avi Cohen (A)" <avi.cohen@huawei.com>
To: "users@dpdk.org" <users@dpdk.org>
Thread-Topic: DPDK 17.11 ixgbe ipsec offload
Thread-Index: AdOCTGJNfLJbvLejSWqD38+RT4WqbQAsG8Sg
Date: Mon, 1 Jan 2018 12:40:41 +0000
Message-ID: <B84047ECBD981D4B93EAE5A6245AA361015946C0@FRAEML521-MBX.china.huawei.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
x-originating-ip: [10.200.202.108]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-CFilter-Loop: Reflected
Subject: Re: [dpdk-users] DPDK 17.11 ixgbe ipsec offload
X-BeenThere: users@dpdk.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: DPDK usage discussions <users.dpdk.org>
List-Unsubscribe: <https://dpdk.org/ml/options/users>,
 <mailto:users-request@dpdk.org?subject=unsubscribe>
List-Archive: <http://dpdk.org/ml/archives/users/>
List-Post: <mailto:users@dpdk.org>
List-Help: <mailto:users-request@dpdk.org?subject=help>
List-Subscribe: <https://dpdk.org/ml/listinfo/users>,
 <mailto:users-request@dpdk.org?subject=subscribe>
X-List-Received-Date: Mon, 01 Jan 2018 12:40:45 -0000

I managed to run the ipsec-secgw application
But I see in the dpdk sample guide that this application perform only full =
ipsec offload.
SO this application is not suitable for devices (like Intel x540) that requ=
ires that the  IPsec headers should be added by SW before sending to HW
I there any way to run 'partial' IPsec offload - in which SW add/remove IPs=
ec headers and HW do encryption/decryption ?
Best Regards
Avi

> -----Original Message-----
> From: Avi Cohen (A)
> Sent: Sunday, 31 December, 2017 5:50 PM
> To: users@dpdk.org
> Subject: DPDK 17.11 ixgbe ipsec offload
>=20
> Hi,
> I see in dpdk 17.11-rc2 that dpdk supports the ixgbe ipsec offload by dri=
ver Any
> reference how to activate this feature ?
> Best Regards
> Avi