From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga04.intel.com (mga04.intel.com [192.55.52.120]) by dpdk.org (Postfix) with ESMTP id EEDAB1B338 for ; Sun, 15 Oct 2017 17:41:16 +0200 (CEST) Received: from fmsmga002.fm.intel.com ([10.253.24.26]) by fmsmga104.fm.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 15 Oct 2017 08:41:15 -0700 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.43,383,1503385200"; d="scan'208";a="1231047180" Received: from irsmsx106.ger.corp.intel.com ([163.33.3.31]) by fmsmga002.fm.intel.com with ESMTP; 15 Oct 2017 08:41:14 -0700 Received: from irsmsx101.ger.corp.intel.com ([169.254.1.22]) by IRSMSX106.ger.corp.intel.com ([169.254.8.36]) with mapi id 14.03.0319.002; Sun, 15 Oct 2017 16:41:13 +0100 From: "Stokes, Ian" To: "Avi Cohen (A)" , Greg Rose , "users@dpdk.org" , "ovs-discuss@openvswitch.org" Thread-Topic: [ovs-discuss] IPsec offload for ixgbe/i40e drivers Thread-Index: AdM8Q0KGDgQPA2pFSSKu3eiKEAnqsQBnuWqAAMDRXWABNVbOAAAEOxbg Date: Sun, 15 Oct 2017 15:41:13 +0000 Message-ID: References: <1c314aa8-5727-bf9d-5c6a-9bbbb64b1146@gmail.com> In-Reply-To: Accept-Language: en-IE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiNmNiYjMxZjItN2FhZS00ZjAyLTk5NDQtZWU5NGE1MmJhMWNiIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX0lDIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE2LjUuOS4zIiwiVHJ1c3RlZExhYmVsSGFzaCI6IkF5Vll2SjdIc3UrRkdyODN4NzMyenJvV241UVR1ZlVMV0g3TE5HbHNoT0k9In0= x-ctpclassification: CTP_IC dlp-product: dlpe-windows dlp-version: 11.0.0.116 dlp-reaction: no-action x-originating-ip: [163.33.239.180] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [dpdk-users] [ovs-discuss] IPsec offload for ixgbe/i40e drivers X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 15 Oct 2017 15:41:17 -0000 > Thank You Ian > I'll look into it and update you > Best Regards > Avi No problem Avi, One minor correction to my original reply, I don't the X710/XL710 i40e devi= ces support ipsec offload functionality (at least not from what I can see i= n their data sheets). The Intel X540 and 82599 family of NICs do have suppo= rt. Their datasheets have the specifics with regards to capabilities. Thanks Ian >=20 > > -----Original Message----- > > From: Stokes, Ian [mailto:ian.stokes@intel.com] > > Sent: Monday, 09 October, 2017 1:10 PM > > To: Greg Rose; Avi Cohen (A); users@dpdk.org; > > ovs-discuss@openvswitch.org > > Subject: RE: [ovs-discuss] IPsec offload for ixgbe/i40e drivers > > > > > On 10/03/2017 05:35 AM, Avi Cohen (A) wrote: > > > > Hi, > > > > These Intel NIC's: X540, 82599, I40E - supports IPsec offload > > > > But I don't see that the drivers supplied by Intel - handle it > > > > (??) Also I don't see any reference in the DPDK userspace drivers > > > librte_pmd_ixgbe.c .. > > > > Can someone tell if this is supported somewhere ? > > > > Best Regards > > > > Avi > > > > > > > Hi Avi, > > > > The NICs do support the IPsec offload feature but currently this is > > not supported in DPDK. > > > > There is ongoing work with regards the RTE_SECURITY interfaces which > > will be used to handle this type of offload in the DPDK community . It > > will not be just Intel nics supporting this feature and is expected > > that all nics that do support it with DPDK will use the RTE_SECURITY > > framework. There is an ongoing discussion on the DPDK ML with regards > > to its design and use below > > > > http://dpdk.org/dev/patchwork/patch/29835/ > > > > Currently I'm also looking at implementing IPsec (non-offload, look > > aside only) using VPMDs and QAT devices in OVS with DPDK although this > > work is at early stages. It may be of use to you as I would hope to > > integrate it with offload functionality down the line. > > > > If you have any feedback I would be interested to hear. > > > > https://mail.openvswitch.org/pipermail/ovs-dev/2017-August/337919.html > > > > Thanks > > Ian > > > Maybe ask the guys at Intel? > > > > > > https://lists.osuosl.org/mailman/listinfo/intel-wired-lan > > > > > > Regards, > > > > > > - Greg > > > > > > > > > _______________________________________________ > > > > discuss mailing list > > > > discuss@openvswitch.org > > > > https://mail.openvswitch.org/mailman/listinfo/ovs-discuss > > > > > > > > > > _______________________________________________ > > > discuss mailing list > > > discuss@openvswitch.org > > > https://mail.openvswitch.org/mailman/listinfo/ovs-discuss