From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mga06.intel.com (mga06.intel.com [134.134.136.31]) by dpdk.org (Postfix) with ESMTP id 1740C1B3CF for ; Tue, 7 Nov 2017 12:24:03 +0100 (CET) Received: from orsmga002.jf.intel.com ([10.7.209.21]) by orsmga104.jf.intel.com with ESMTP; 07 Nov 2017 03:24:02 -0800 X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.44,358,1505804400"; d="scan'208";a="4431767" Received: from irsmsx103.ger.corp.intel.com ([163.33.3.157]) by orsmga002.jf.intel.com with ESMTP; 07 Nov 2017 03:24:01 -0800 Received: from irsmsx108.ger.corp.intel.com ([169.254.11.167]) by IRSMSX103.ger.corp.intel.com ([169.254.3.49]) with mapi id 14.03.0319.002; Tue, 7 Nov 2017 11:24:00 +0000 From: "De Lara Guarch, Pablo" To: "Avi Cohen (A)" , Thomas Monjalon CC: "users@dpdk.org" , "olgas@mellanox.com" Thread-Topic: [dpdk-users] IPsec offload Thread-Index: AdNWEJZww10MSYRtTmqj3ER7vsBW+wAimD8AABOnOgAAAahjAAAJyXsAAAGAPRAAADZOgAAAHceQACHYAQAABR2IEA== Date: Tue, 7 Nov 2017 11:24:00 +0000 Message-ID: References: <4048707.fcLJULAWd5@xps> <7246948.uKqDaxhOvY@xps> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-titus-metadata-40: eyJDYXRlZ29yeUxhYmVscyI6IiIsIk1ldGFkYXRhIjp7Im5zIjoiaHR0cDpcL1wvd3d3LnRpdHVzLmNvbVwvbnNcL0ludGVsMyIsImlkIjoiNGFmODUzNzktZDdjMi00Y2UxLTg5MjAtZGUyNzcyMmE3NTg4IiwicHJvcHMiOlt7Im4iOiJDVFBDbGFzc2lmaWNhdGlvbiIsInZhbHMiOlt7InZhbHVlIjoiQ1RQX0lDIn1dfV19LCJTdWJqZWN0TGFiZWxzIjpbXSwiVE1DVmVyc2lvbiI6IjE2LjUuOS4zIiwiVHJ1c3RlZExhYmVsSGFzaCI6ImtrNG1WOXhIUTlwMnBXRVJ2NDdcLzdDZkg3eFM4VHZnbWRsZFhPQ1A4Mm5RPSJ9 x-ctpclassification: CTP_IC dlp-product: dlpe-windows dlp-version: 11.0.0.116 dlp-reaction: no-action x-originating-ip: [163.33.239.182] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [dpdk-users] IPsec offload X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 07 Nov 2017 11:24:04 -0000 Hi Avi, > -----Original Message----- > From: Avi Cohen (A) [mailto:avi.cohen@huawei.com] > Sent: Tuesday, November 7, 2017 8:55 AM > To: De Lara Guarch, Pablo ; Thomas > Monjalon > Cc: users@dpdk.org; olgas@mellanox.com > Subject: RE: [dpdk-users] IPsec offload >=20 >=20 > > > Thank you Pablo > > > Can you supply an example command line to run the ipsec-secgw ? > > > > ./examples/ipsec-secgw/build/ipsec-secgw -l 10,11 -n 4 -- > > vdev=3D"crypto_aesni_gcm0" / > > -- -p 0x1 -P --config=3D"(0,0,10)" -f ep-sample.cfg > > > > Where ep-sample.cfg contains: > > > > sp ipv4 out esp protect 0010 pri 1 dst 001.0.0.0/24 sport 0:65535 > > dport 0:65535 sa out 0010 aead_algo aes-128-gcm aead_key > de:ad:be:ef:de:ad:be:ef:de:ad:be: > > ef:de:ad:be:ef:de:ad:be:ef mode ipv4-tunnel src 20.0.0.0 dst 21.0.0.0 > > rt ipv4 dst > > 21.0.0.0/8 port 0 > > > [Avi Cohen (A)] >=20 > When running it almost all parameters from the config file starting from = " > sa out 0010" are not recognized by the application Do I have to create a= ny > additional objects before running it ? I don't see it in the documentatio= n . > I want to run IPsec offload over ethernet port Best Regards Avi You need to make sure that you have a crypto device (SW or HW) that support the algorithms set in the sa lines. For instance, the "SA line" above is using AES-GCM, so you could use the AE= SNI GCM PMD, with the command line above (using --vdev). Regards, Pablo