From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from techexpress.ro (techexpress.ro [185.84.64.155]) by dpdk.org (Postfix) with ESMTP id D13CA71B3 for ; Mon, 15 Jan 2018 18:55:27 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=techexpress.ro; s=mail; h=Content-Type:Cc:To:Subject:Message-ID:Date:From:References:In-Reply-To:MIME-Version; bh=HgFlXu5nHFOmNepvsrtfqokoa9ltzNuXmVp4NM/Ht8E=; b=MuzJefAueuRNA8LNoMe+EIU2FcjtIyhtD/bupDE9Xg+2MImiS7iR/PByufFuTBNfff16q6I9VK+oVXVWvWyvGKXbbyhzHBOn1b9x1UGkPoufLNt5lT21Na7MKq6mwPo8VUwH6iHuVUYB2KWW9O6UMuIGydtLYLA40lZTeSgZFKI=; Received: from mail-it0-f44.google.com ([209.85.214.44]) by techexpress.ro with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1eb8yl-00066k-00 for users@dpdk.org; Mon, 15 Jan 2018 17:55:27 +0000 Received: by mail-it0-f44.google.com with SMTP id c16so1786035itc.5 for ; Mon, 15 Jan 2018 09:55:26 -0800 (PST) X-Gm-Message-State: AKwxytcdYb0+7n0/ks9loZqScKPxzg53QIhWSilljlrXlt/MMahusJeZ xCBUtz+n3RnL1WbwDK49VbGeQhUu9TcJWkv2/zY= X-Google-Smtp-Source: ACJfBos4bsfs7NBv7IZXXYP9R7Tadxdion+WAqqyGhLm3X4Eo2+2/p68UPmJzg+Mm1vm8qzeqX37wr9cL4Pn8M/4CZ0= X-Received: by 10.36.211.132 with SMTP id n126mr14204134itg.12.1516038920601; Mon, 15 Jan 2018 09:55:20 -0800 (PST) MIME-Version: 1.0 Received: by 10.36.73.161 with HTTP; Mon, 15 Jan 2018 09:55:20 -0800 (PST) In-Reply-To: <118860008.49208570.1515955882684.JavaMail.zimbra@uliege.be> References: <20180113212506.03497509@xeon-e3> <118860008.49208570.1515955882684.JavaMail.zimbra@uliege.be> From: Adrian Duralia Date: Mon, 15 Jan 2018 19:55:20 +0200 X-Gmail-Original-Message-ID: Message-ID: To: tom.barbette@uliege.be Cc: users@dpdk.org Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Content-Filtered-By: Mailman/MimeDel 2.1.15 Subject: Re: [dpdk-users] middlebox using dkdp X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 15 Jan 2018 17:55:28 -0000 Thank you for your responses! On Sun, Jan 14, 2018 at 8:51 PM, wrote: > Hi Adrian, > > There is a lot of publications on the subject, many new NFV frameworks ar= e > based on/use DPDK. > > FastClick, FD.io, SoftNIC, NetBricks, NetVM, OpenNetVM, ... Provide basi= c > network functions with various level of isolation but are not strictly > targeting middleboxes. They will abstract a good part of the work though. > > mOS, E2, Climb, Xomb, Comb are more middlebox-targeted. Maybe not all > supporting directly DPDK (first 3 at least). > > Depending on the project, things like OpenBox, or E2 also cover a > controller-based approach. > > And this is very far from an exhaustive list... Basically you're looking > for "DPDK NFV dataplane". Reading about the ones I cited will get you > closer at least. > > Tom > > Tom Barbette > PhD Student @ Universit=C3=A9 de Li=C3=A8ge > > Office 1/13 > B=C3=A2timent B37 > Quartier Polytech > All=C3=A9e de la d=C3=A9couverte, 12 > 4000 Li=C3=A8ge > > 04/366 91 75 > 0479/60 94 63 > > ----- Mail original ----- > > De: "Adrian Duralia" > > =C3=80: "Stephen Hemminger" > > Cc: users@dpdk.org > > Envoy=C3=A9: Dimanche 14 Janvier 2018 12:53:01 > > Objet: Re: [dpdk-users] middlebox using dkdp > > > Thank you for the response! > > While I'm not scared to add a lot of code in the app side, I wouldn't > like > > to reinvent the wheel. So, is there any framework or library that you > think > > it would be more appropiate to create a middlebox? > > > > Thank you, > > Adrian > > > > On Sunday, January 14, 2018, Stephen Hemminger < > stephen@networkplumber.org> > > wrote: > > > >> On Sat, 13 Jan 2018 22:10:55 +0200 > >> Adrian Duralia wrote: > >> > >> > Hello, > >> > > >> > I'm curious if it would be possible to implement a middlebox device > using > >> > dpdk, that can filter & sign all traffic. > >> > My goal is to be able to filter some packets and also to secure the > >> > communication between a few computers (that cannot be > updated/modified) > >> on > >> > the same LAN and I'm thinking to place such device in front on each > >> > computer, leaving current network topology untouched. > >> > I had a look at the existing samples in dpdk and l2fwd-crypto seems = to > >> be a > >> > good place to start. > >> > > >> > Thank you, > >> > Adrian > >> > >> DPDK is about sending and receiving packets. It has pieces that could = be > >> used > >> to handle IP etc, but really 95% of the work would have to be in the > >> application. > >> So yes, you could build a middlebox; but lots left to do. > >> > > > > > > -- > > Adrian Duralia > > Tel. +40723698531 > > Email: adrian.duralia@gmail.com >