[dpdk-users] How to generate IPSec-based traffic in pktgen ?

[dpdk-users] How to generate IPSec-based traffic in pktgen ?

[ankit bhardwaj]

Hi,

I want to test IPSec-based application in DPDK and pktgen is the right
choice for the packet generation. I could figure out how to generate GRE
packets, however, there is no proper documentation for generating
IPSec-based packets.

Is it possible to generate IPSec-based(ESP/AH) traffic in pktgen, if yes,
could you please tell me how to do that?

Thanks,
Ankit Bhardwaj

Re: [dpdk-users] How to generate IPSec-based traffic in pktgen ?

[Wiles, Keith]

> On May 2, 2017, at 3:24 AM, ankit bhardwaj <ankitbhrdwj27@gmail.com> wrote:
> 
> Hi,
> 
> I want to test IPSec-based application in DPDK and pktgen is the right
> choice for the packet generation. I could figure out how to generate GRE
> packets, however, there is no proper documentation for generating
> IPSec-based packets.
> 
> Is it possible to generate IPSec-based(ESP/AH) traffic in pktgen, if yes,
> could you please tell me how to do that?

At this time Pktgen does not support IPSec packets. The only way to use Pktgen and test a IPSec unit is to have PKtgen generate clear text packets and use two IPSec systems to receive clear text convert to IPSec Packets to another machine the convert IPSec to clear text back to Pktgen. I hope that is clear.

> 
> Thanks,
> Ankit Bhardwaj

Regards,
Keith

Re: [dpdk-users] How to generate IPSec-based traffic in pktgen ?

[Andriy Berestovskyy]

Hey,
We used pktgen to generate IPsec traffic using PCAP files. First
configure kernel to encrypt packets with a mode of your choice and
capture the packet with tcpdump. Then just pass the packet to pktgen
with -s option.

Sure it depends on your application, but it might suit the purpose...

Andriy


On Tue, May 2, 2017 at 10:26 PM, Wiles, Keith <keith.wiles@intel.com> wrote:
>
>> On May 2, 2017, at 3:24 AM, ankit bhardwaj <ankitbhrdwj27@gmail.com> wrote:
>>
>> Hi,
>>
>> I want to test IPSec-based application in DPDK and pktgen is the right
>> choice for the packet generation. I could figure out how to generate GRE
>> packets, however, there is no proper documentation for generating
>> IPSec-based packets.
>>
>> Is it possible to generate IPSec-based(ESP/AH) traffic in pktgen, if yes,
>> could you please tell me how to do that?
>
> At this time Pktgen does not support IPSec packets. The only way to use Pktgen and test a IPSec unit is to have PKtgen generate clear text packets and use two IPSec systems to receive clear text convert to IPSec Packets to another machine the convert IPSec to clear text back to Pktgen. I hope that is clear.
>
>>
>> Thanks,
>> Ankit Bhardwaj
>
> Regards,
> Keith
>



-- 
Andriy Berestovskyy