From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-it0-f46.google.com (mail-it0-f46.google.com [209.85.214.46]) by dpdk.org (Postfix) with ESMTP id 128E12D13 for ; Sun, 14 Jan 2018 12:53:03 +0100 (CET) Received: by mail-it0-f46.google.com with SMTP id p139so13831202itb.1 for ; Sun, 14 Jan 2018 03:53:02 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=mmIljIUbc0IdrECAhc7rfZuzZ8+agqHitjQZ6g7EWVw=; b=krbZinOOSvmdcf5ZaAAfaJQygiO18ugnQl+DPMGmnCNV0UvEAEGTUmdDNd5/DaiOU1 6WKJTglVFxrbN/0IfM5M2Fmt0QoirPA3J3uaqSmY2NkMLeiRCocmRsO/dTLedE6TnXbs gNOEQZKV7GHARVv/wwOoOxsfrbE2NgxUEjd0sukhkGfaNdHiyl2dwSPkJSvv+bLyxr1r iUr0uVWdAQoOyWzULYHuf/BMBWiIV7grgZXsUdvW7BIjZuy1t9gMY29qVh6EuDpfaEjf jdk3/MMwt3nkVxXZoga+c8wUeRTzDolQY0K1sXK+DLG3Nc9YEKC6BdJweS7vtTMlLz4M 7jaA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=mmIljIUbc0IdrECAhc7rfZuzZ8+agqHitjQZ6g7EWVw=; b=BDPc9oTsUytjvS5trxIw6Bvb26ZniZ3wzQtoyjXFEXpl1nA6u3/lK9i3Zc3wn3+lvu 7MDZGdN3pBSmN4r04sns5ZiAUIzi4euRcVz0qIEcWXwD4evxwJJcwK2B4KOiEI37uoZO yYhzrZhypsjEKyA5raMBADo49DsQ0trKBYw984OcBekJkiVUpyaz5A9rrRtRYCHDuscP RuOO/2svsNtDxZMG9wDXzFTcSLeabNdKXjuG7sKwtbYkfeKbblgWs9+zwUKQp1EgAcYJ ePlSTo1QriI5ilVNlNIXqLW44sgt7PURaGV2ZvDuzpHuQFrvoOs+lz4d3zsWYmtXTF2V 8plQ== X-Gm-Message-State: AKwxytdZ+zdEvi08pREJIvxsqPyKPrPZ9EXU7ntkCs4xIT/3AWOgAFzc nYxSwBYXTM/lPXGj1MZ6Fl4Qvft0VHktqY6R6zE= X-Google-Smtp-Source: ACJfBouq2EVp+Zr8Qd2jpXus0vNb95p7lLbUoMNwMI6Ci+su51WCizfGy9MJ/opmK0SYGY813PNn8RZ2r5ez3o/LNps= X-Received: by 10.36.57.8 with SMTP id l8mr10662028ita.20.1515930782196; Sun, 14 Jan 2018 03:53:02 -0800 (PST) MIME-Version: 1.0 Received: by 10.36.73.161 with HTTP; Sun, 14 Jan 2018 03:53:01 -0800 (PST) In-Reply-To: <20180113212506.03497509@xeon-e3> References: <20180113212506.03497509@xeon-e3> From: Adrian Duralia Date: Sun, 14 Jan 2018 13:53:01 +0200 Message-ID: To: Stephen Hemminger Cc: "users@dpdk.org" X-Mailman-Approved-At: Sun, 14 Jan 2018 18:16:45 +0100 Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.15 Subject: Re: [dpdk-users] middlebox using dkdp X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 14 Jan 2018 11:53:03 -0000 Thank you for the response! While I'm not scared to add a lot of code in the app side, I wouldn't like to reinvent the wheel. So, is there any framework or library that you think it would be more appropiate to create a middlebox? Thank you, Adrian On Sunday, January 14, 2018, Stephen Hemminger wrote: > On Sat, 13 Jan 2018 22:10:55 +0200 > Adrian Duralia wrote: > > > Hello, > > > > I'm curious if it would be possible to implement a middlebox device using > > dpdk, that can filter & sign all traffic. > > My goal is to be able to filter some packets and also to secure the > > communication between a few computers (that cannot be updated/modified) > on > > the same LAN and I'm thinking to place such device in front on each > > computer, leaving current network topology untouched. > > I had a look at the existing samples in dpdk and l2fwd-crypto seems to > be a > > good place to start. > > > > Thank you, > > Adrian > > DPDK is about sending and receiving packets. It has pieces that could be > used > to handle IP etc, but really 95% of the work would have to be in the > application. > So yes, you could build a middlebox; but lots left to do. > -- Adrian Duralia Tel. +40723698531 Email: adrian.duralia@gmail.com