From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga01.intel.com (mga01.intel.com [192.55.52.88]) by dpdk.org (Postfix) with ESMTP id DDF881B1BB for ; Mon, 9 Oct 2017 12:10:19 +0200 (CEST) Received: from fmsmga003.fm.intel.com ([10.253.24.29]) by fmsmga101.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 09 Oct 2017 03:10:18 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.42,500,1500966000"; d="scan'208";a="908123064" Received: from irsmsx153.ger.corp.intel.com ([163.33.192.75]) by FMSMGA003.fm.intel.com with ESMTP; 09 Oct 2017 03:10:17 -0700 Received: from irsmsx101.ger.corp.intel.com ([169.254.1.22]) by IRSMSX153.ger.corp.intel.com ([169.254.9.34]) with mapi id 14.03.0319.002; Mon, 9 Oct 2017 11:10:17 +0100 From: "Stokes, Ian" To: Greg Rose , "Avi Cohen (A)" , "users@dpdk.org" , "ovs-discuss@openvswitch.org" Thread-Topic: [ovs-discuss] IPsec offload for ixgbe/i40e drivers Thread-Index: AdM8Q0KGDgQPA2pFSSKu3eiKEAnqsQBnuWqAAMDRXWA= Date: Mon, 9 Oct 2017 10:10:16 +0000 Message-ID: References: <1c314aa8-5727-bf9d-5c6a-9bbbb64b1146@gmail.com> In-Reply-To: <1c314aa8-5727-bf9d-5c6a-9bbbb64b1146@gmail.com> Accept-Language: en-IE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiMGIzMTk4ZjAtMjMzMy00MzJiLWIzNWEtZjM1ZDMyMGU1ZGY5IiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX0lDIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE2LjUuOS4zIiwiVHJ1c3RlZExhYmVsSGFzaCI6IjRcL2VZeDc4VFwvXC84bHNReVdpSTNjbnRKOGY1aG1oSDJENVdHckZcL1NENEZFPSJ9 x-ctpclassification: CTP_IC dlp-product: dlpe-windows dlp-version: 11.0.0.116 dlp-reaction: no-action x-originating-ip: [163.33.239.180] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [dpdk-users] [ovs-discuss] IPsec offload for ixgbe/i40e drivers X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 09 Oct 2017 10:10:20 -0000 > On 10/03/2017 05:35 AM, Avi Cohen (A) wrote: > > Hi, > > These Intel NIC's: X540, 82599, I40E - supports IPsec offload But I > > don't see that the drivers supplied by Intel - handle it (??) Also I > > don't see any reference in the DPDK userspace drivers > librte_pmd_ixgbe.c .. > > Can someone tell if this is supported somewhere ? > > Best Regards > > Avi >=20 Hi Avi, The NICs do support the IPsec offload feature but currently this is not sup= ported in DPDK. There is ongoing work with regards the RTE_SECURITY interfaces which will b= e used to handle this type of offload in the DPDK community . It will not b= e just Intel nics supporting this feature and is expected that all nics tha= t do support it with DPDK will use the RTE_SECURITY framework. There is an = ongoing discussion on the DPDK ML with regards to its design and use below http://dpdk.org/dev/patchwork/patch/29835/ Currently I'm also looking at implementing IPsec (non-offload, look aside o= nly) using VPMDs and QAT devices in OVS with DPDK although this work is at = early stages. It may be of use to you as I would hope to integrate it with = offload functionality down the line. If you have any feedback I would be interested to hear. https://mail.openvswitch.org/pipermail/ovs-dev/2017-August/337919.html Thanks Ian > Maybe ask the guys at Intel? >=20 > https://lists.osuosl.org/mailman/listinfo/intel-wired-lan >=20 > Regards, >=20 > - Greg >=20 > > _______________________________________________ > > discuss mailing list > > discuss@openvswitch.org > > https://mail.openvswitch.org/mailman/listinfo/ovs-discuss > > >=20 > _______________________________________________ > discuss mailing list > discuss@openvswitch.org > https://mail.openvswitch.org/mailman/listinfo/ovs-discuss