Re: [dpdk-users] IPsec offload

["De Lara Guarch, Pablo" <pablo.de.lara.guarch@intel.com>]

Hi Avi,

> -----Original Message-----
> From: Avi Cohen (A) [mailto:avi.cohen@huawei.com]
> Sent: Wednesday, November 8, 2017 10:22 AM
> To: De Lara Guarch, Pablo <pablo.de.lara.guarch@intel.com>; Thomas
> Monjalon <thomas@monjalon.net>
> Cc: users@dpdk.org; olgas@mellanox.com
> Subject: RE: [dpdk-users] IPsec offload
> 
> Pablo
> I fixed all issues,  now the app. Is running Just  to clarify one issue:
> I meant that my Ethernet device x540 is capable to do IPsec encryption in
> HW.
> What did you mean "a crypto device (SW or HW)" ?

You are talking about inline crypto there then, which I am not very familiarized.
With crypto device, I mean a lookaside crypto device, such as QAT PMD (example of HW device)
or AESNI MB PMD (examples of SW device).

Regards,
Pablo

> Regards,
> Avi
> 
> > -----Original Message-----
> > From: Avi Cohen (A)
> > Sent: Wednesday, 08 November, 2017 11:21 AM
> > To: 'De Lara Guarch, Pablo'; 'Thomas Monjalon'
> > Cc: 'users@dpdk.org'; 'olgas@mellanox.com'
> > Subject: RE: [dpdk-users] IPsec offload
> >
> > Hi Pablo,
> >
> >  > 1 - Double check you are using the latest IPSec library (0.47) and
> > > that you are linking against it (just follow the documentation).
> >  > 2 - That's a network device, not a crypto device.
> >  [Avi Cohen (A)]
> > 1.  I meant that my Ethernet device x540 is capable to do IPsec
> > encryption in HW.
> >      What did you mean "a crypto device (SW or HW)" ?
> >
> > 2. I  also I enable the IESNI_GCM_PMD according the
> > http://dpdk.org/doc/guides/cryptodevs/aesni_gcm.html ,   but still
> receive this
> > error in init  (: unrecognized input "sa")
> >
> >
> > ./ipsec-secgw -l 20,21 -n 4  --vdev "crypto_aesni_gcm" -- -p 0xf -P -u
> > 0x3 -- config="(0,0,20),(1,0,20),(2,0,21),(3,0,21)" -f ep-sample.cfg
> >
> > EAL: Detected 24 lcore(s)
> > EAL: 16 hugepages of size 1073741824 reserved, but no mounted
> > hugetlbfs found for that size
> > EAL: Probing VFIO support...
> > EAL: PCI device 0000:01:00.0 on NUMA socket 0
> > EAL:   probe driver: 8086:1528 net_ixgbe
> > EAL: PCI device 0000:01:00.1 on NUMA socket 0
> > EAL:   probe driver: 8086:1528 net_ixgbe
> > EAL: PCI device 0000:04:00.0 on NUMA socket 0
> > EAL:   probe driver: 8086:1528 net_ixgbe
> > EAL: PCI device 0000:04:00.1 on NUMA socket 0
> > EAL:   probe driver: 8086:1528 net_ixgbe
> > EAL: PCI device 0000:08:00.0 on NUMA socket 0
> > EAL:   probe driver: 8086:1521 net_e1000_igb
> > EAL: PCI device 0000:08:00.1 on NUMA socket 0
> > EAL:   probe driver: 8086:1521 net_e1000_igb
> > CRYPTODEV: [crypto_aesni_gcm] - Creating cryptodev crypto_aesni_gcm
> >
> > CRYPTODEV: [crypto_aesni_gcm] - Initialisation parameters - name:
> > crypto_aesni_gcm,socket id: 0, max queue pairs: 8, max sessions: 2048
> > Promiscuous mode selected PANIC in parse_cfg_file():
> > ep-sample.cfg:1: error: unrecognized input "sa"
> > 6: [./ipsec-secgw(_start+0x29) [0x44a0f9]]
> > 5: [/lib64/libc.so.6(__libc_start_main+0xf1) [0x7fe3cd492731]]
> > 4: [./ipsec-secgw(main+0xdd) [0x445d2d]]
> > 3: [./ipsec-secgw(parse_cfg_file+0x3d0) [0x44b180]]
> > 2: [./ipsec-secgw(__rte_panic+0xb8) [0x440d83]]
> > 1: [./ipsec-secgw(rte_dump_stack+0x16) [0x4b5876]]
> >
> > Regards
> >  Avi
> >