From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga03.intel.com (mga03.intel.com [134.134.136.65]) by dpdk.org (Postfix) with ESMTP id 500E6239 for ; Tue, 7 Nov 2017 10:42:55 +0100 (CET) Received: from orsmga005.jf.intel.com ([10.7.209.41]) by orsmga103.jf.intel.com with ESMTP/TLS/DHE-RSA-AES256-GCM-SHA384; 07 Nov 2017 01:42:54 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.44,357,1505804400"; d="scan'208";a="170339548" Received: from irsmsx105.ger.corp.intel.com ([163.33.3.28]) by orsmga005.jf.intel.com with ESMTP; 07 Nov 2017 01:42:52 -0800 Received: from irsmsx111.ger.corp.intel.com (10.108.20.4) by irsmsx105.ger.corp.intel.com (163.33.3.28) with Microsoft SMTP Server (TLS) id 14.3.319.2; Tue, 7 Nov 2017 09:42:51 +0000 Received: from irsmsx108.ger.corp.intel.com ([169.254.11.167]) by irsmsx111.ger.corp.intel.com ([169.254.2.30]) with mapi id 14.03.0319.002; Tue, 7 Nov 2017 09:42:51 +0000 From: "De Lara Guarch, Pablo" To: "Avi Cohen (A)" , Thomas Monjalon CC: "users@dpdk.org" , "olgas@mellanox.com" Thread-Topic: [dpdk-users] IPsec offload Thread-Index: AdNWEJZww10MSYRtTmqj3ER7vsBW+wAimD8AABOnOgAAAahjAAAJyXsAAAGAPRAAADZOgAAAHceQAAETZoAAImZ/cA== Date: Tue, 7 Nov 2017 09:42:51 +0000 Message-ID: References: <4048707.fcLJULAWd5@xps> <7246948.uKqDaxhOvY@xps> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiNjlkNWUwYzYtOGY1Mi00MjhkLTkwNDAtM2E1NDM0ZDllYmVmIiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX0lDIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE2LjUuOS4zIiwiVHJ1c3RlZExhYmVsSGFzaCI6ImsxNyt4cVlwdVZxXC9JVEFPQjg2VnpKSk1GRDRtWE1MbThKbW54S3FleXdnPSJ9 x-ctpclassification: CTP_IC dlp-product: dlpe-windows dlp-version: 11.0.0.116 dlp-reaction: no-action x-originating-ip: [163.33.239.182] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [dpdk-users] IPsec offload X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Nov 2017 09:42:55 -0000 Hi Avi, > -----Original Message----- > From: Avi Cohen (A) [mailto:avi.cohen@huawei.com] > Sent: Monday, November 6, 2017 5:16 PM > To: De Lara Guarch, Pablo ; Thomas > Monjalon > Cc: users@dpdk.org; olgas@mellanox.com > Subject: RE: [dpdk-users] IPsec offload >=20 > Pablo > This cmd-line is for a crypto-device - correct ? > What is the cmd-line for Ethernet device ? (I already bound this Etherne= t > device to dpdk) Regards Avi That command line is initializing a software-based crypto device. It assumes that you have one physical Ethernet device (it will use it due t= o the -p and --config options). Pablo >=20 > > -----Original Message----- > > From: De Lara Guarch, Pablo [mailto:pablo.de.lara.guarch@intel.com] > > Sent: Monday, 06 November, 2017 6:48 PM > > To: Avi Cohen (A); Thomas Monjalon > > Cc: users@dpdk.org; olgas@mellanox.com > > Subject: RE: [dpdk-users] IPsec offload > > > > > > > > > -----Original Message----- > > > From: Avi Cohen (A) [mailto:avi.cohen@huawei.com] > > > Sent: Monday, November 6, 2017 4:42 PM > > > To: De Lara Guarch, Pablo ; Thomas > > > Monjalon > > > Cc: users@dpdk.org; olgas@mellanox.com > > > Subject: RE: [dpdk-users] IPsec offload > > > > > > Thank you Pablo > > > Can you supply an example command line to run the ipsec-secgw ? > > > > ./examples/ipsec-secgw/build/ipsec-secgw -l 10,11 -n 4 -- > > vdev=3D"crypto_aesni_gcm0" / > > -- -p 0x1 -P --config=3D"(0,0,10)" -f ep-sample.cfg > > > > Where ep-sample.cfg contains: > > > > sp ipv4 out esp protect 0010 pri 1 dst 001.0.0.0/24 sport 0:65535 > > dport 0:65535 sa out 0010 aead_algo aes-128-gcm aead_key > de:ad:be:ef:de:ad:be:ef:de:ad:be: > > ef:de:ad:be:ef:de:ad:be:ef mode ipv4-tunnel src 20.0.0.0 dst 21.0.0.0 > > rt ipv4 dst > > 21.0.0.0/8 port 0 > > > > > > > Regards > > > Avi > > > > > > > -----Original Message----- > > > > From: De Lara Guarch, Pablo > > > > [mailto:pablo.de.lara.guarch@intel.com] > > > > Sent: Monday, 06 November, 2017 6:37 PM > > > > To: Avi Cohen (A); Thomas Monjalon > > > > Cc: users@dpdk.org; olgas@mellanox.com > > > > Subject: RE: [dpdk-users] IPsec offload > > > > > > > > Hi Avi, > > > > > > > > > > > > > -----Original Message----- > > > > > From: users [mailto:users-bounces@dpdk.org] On Behalf Of Avi > > > > > Cohen > > > > > (A) > > > > > Sent: Monday, November 6, 2017 3:53 PM > > > > > To: Thomas Monjalon > > > > > Cc: users@dpdk.org; olgas@mellanox.com > > > > > Subject: Re: [dpdk-users] IPsec offload > > > > > > > > > > Thank you Thomas > > > > > When I run the ipsec-secgw sample app. The program is exiting > > > > > with error 'Mandatory option "-f" not present' > > > > > What is this option ? config file ? > > > > > > > > Yes, that's a configuration file, like the one that you can find > > > > in ep0.cfg or ep1.cfg. > > > > > > > > Pablo