From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from techexpress.ro (techexpress.ro [185.84.64.155]) by dpdk.org (Postfix) with ESMTP id 0F7E63257 for ; Sat, 13 Jan 2018 21:11:02 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=techexpress.ro; s=mail; h=Content-Type:To:Subject:Message-ID:Date:From:MIME-Version; bh=YR1Vshlh5aOU88I1n5AagVI2cqtX5htS2/BIXuoP4cg=; b=AAA2XrRorSHZ0D9Td+sInUFaLxaYTO+XmWd6ETDOj71DmIQO1Scm98V+5J5QTpETWxStAO19sUUFLt40q6ub6Hol7ug6VSEx7KwVgzoAJZ2lUbiyQduJQKsruor+FBDwc/jVR+TRgPckFf8xjE3IjPNnkJq251KYCxtCCS7U3ss=; Received: from mail-io0-f169.google.com ([209.85.223.169]) by techexpress.ro with esmtpsa (TLS1.2:RSA_AES_128_CBC_SHA1:128) (Exim 4.82) (envelope-from ) id 1eaS8s-00052a-7U for users@dpdk.org; Sat, 13 Jan 2018 20:11:02 +0000 Received: by mail-io0-f169.google.com with SMTP id f34so4068802ioi.13 for ; Sat, 13 Jan 2018 12:11:02 -0800 (PST) X-Gm-Message-State: AKGB3mJBUeELs/vSgEh4I/JKeyNvcPf/vm3HIHAH0quJoamHl2vi6VCT HW+HFrfDUZ2JTJCJcZ7gpMi02POdOVn+YhS4tDI= X-Google-Smtp-Source: ACJfBouPfbOGe66kwcCGA/B6a7uzSON0MM9QRlF3S5HKe+JcAaJJO5PTxfGtTSFhBC4QXBX5V2K4+UFE8S9Sqa2HdN0= X-Received: by 10.107.142.149 with SMTP id q143mr28356675iod.299.1515874255690; Sat, 13 Jan 2018 12:10:55 -0800 (PST) MIME-Version: 1.0 Received: by 10.36.73.161 with HTTP; Sat, 13 Jan 2018 12:10:55 -0800 (PST) From: Adrian Duralia Date: Sat, 13 Jan 2018 22:10:55 +0200 X-Gmail-Original-Message-ID: Message-ID: To: users@dpdk.org Content-Type: text/plain; charset="UTF-8" X-Content-Filtered-By: Mailman/MimeDel 2.1.15 Subject: [dpdk-users] middlebox using dkdp X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Jan 2018 20:11:03 -0000 Hello, I'm curious if it would be possible to implement a middlebox device using dpdk, that can filter & sign all traffic. My goal is to be able to filter some packets and also to secure the communication between a few computers (that cannot be updated/modified) on the same LAN and I'm thinking to place such device in front on each computer, leaving current network topology untouched. I had a look at the existing samples in dpdk and l2fwd-crypto seems to be a good place to start. Thank you, Adrian