From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from dpdk.org (dpdk.org [92.243.14.124]) by inbox.dpdk.org (Postfix) with ESMTP id DD48EA0526 for ; Wed, 22 Jul 2020 18:10:27 +0200 (CEST) Received: from [92.243.14.124] (localhost [127.0.0.1]) by dpdk.org (Postfix) with ESMTP id 568AB1BFBB; Wed, 22 Jul 2020 18:10:26 +0200 (CEST) Received: from mga07.intel.com (mga07.intel.com [134.134.136.100]) by dpdk.org (Postfix) with ESMTP id 9D36C1BFBA for ; Wed, 22 Jul 2020 18:10:24 +0200 (CEST) IronPort-SDR: y73kSF3mPDatc8y3GXxZaurOOatsCKJBsoie4fEZyjrZ6pNORYmg3msKES7Nv4bkh5Kx6ZrtDS /dEp5SBrBtpg== X-IronPort-AV: E=McAfee;i="6000,8403,9690"; a="214994135" X-IronPort-AV: E=Sophos;i="5.75,383,1589266800"; d="scan'208";a="214994135" X-Amp-Result: SKIPPED(no attachment in message) X-Amp-File-Uploaded: False Received: from fmsmga007.fm.intel.com ([10.253.24.52]) by orsmga105.jf.intel.com with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384; 22 Jul 2020 09:10:22 -0700 IronPort-SDR: Nen0quKtLYR3G+C37I0vkldv3HYDy2IlYbhzvDFcn/rV1ivyucvXm80fRsw0m29GUVmg9PTlZ+ z+Rk9LUjlmxw== X-ExtLoop1: 1 X-IronPort-AV: E=Sophos;i="5.75,383,1589266800"; d="scan'208";a="270788197" Received: from orsmsx102.amr.corp.intel.com ([10.22.225.129]) by fmsmga007.fm.intel.com with ESMTP; 22 Jul 2020 09:10:22 -0700 Received: from orsmsx115.amr.corp.intel.com (10.22.240.11) by ORSMSX102.amr.corp.intel.com (10.22.225.129) with Microsoft SMTP Server (TLS) id 14.3.439.0; Wed, 22 Jul 2020 09:10:22 -0700 Received: from ORSEDG002.ED.cps.intel.com (10.7.248.5) by ORSMSX115.amr.corp.intel.com (10.22.240.11) with Microsoft SMTP Server (TLS) id 14.3.439.0; Wed, 22 Jul 2020 09:10:21 -0700 Received: from NAM02-SN1-obe.outbound.protection.outlook.com (104.47.36.59) by edgegateway.intel.com (134.134.137.101) with Microsoft SMTP Server (TLS) id 14.3.439.0; Wed, 22 Jul 2020 09:10:21 -0700 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=Tu4X7ifUZcEaCQRkhYIfTZum4Hi7UHFBRHI4lmipleWL2y/eG/gm1FM7s/Bs6dCjRLgYN+dyeVqKrWn1r52RwrQM/Kz4RFEbGEjOqUtZySp3PmmATmWq6bz/7LFSBU3cH5HMa7y7DdE5tpEibUB0jsx5IJe3OSolbSp2B9OUd7e71PY5PY3IselyAN1SLbpYm8SQvDr5z50XTNzbDeEBWcXtU9fZkiRHGrapKE8BLIdlAC+Lt1uQVGNudrLdm8qNSGm4/Dy0L+frisvHS7hrn8DCug0Hq/Eg8hnOHoWoe4GioN9zxooUdwhNHfxupHZ+aTXdIdJGGs+vDRcDkhPfUw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Djtek1UE7C4xxfI0Jz/UCJN8rtVeA3ihtH+FVwvpVk0=; b=QAs1++w8DJbe+/v8zU/WXXaDMqW/bWCbZ/QaSVx567/WwYUJ7pWCj63SQ8f2y0fysEhCfTDx/mBThaZkGl30QkQi8ZBNlmykZ/xnBIVGp4vcDN5L8kOxeZuopiXSAEz/22d3VrR0rP5QZiRwYCNxilbYllErRnKRRvvEGDg7YcSTMmuxWHv3L5bP5IxCMIcOguqRgT2s79/cAjtBY+zojhjygRes4eoehF3JdHAPK7IA0lXZxLN4tZ49+E/f79TD8npznZhpdC1ESXTlauzQwJLKd00coiRIDV7TLOAKm6gSlPwG5x8Mlgq+kz60dyCxQvBcDpVKkW6rWq5TkIz2/w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=intel.com; dmarc=pass action=none header.from=intel.com; dkim=pass header.d=intel.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=intel.onmicrosoft.com; s=selector2-intel-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=Djtek1UE7C4xxfI0Jz/UCJN8rtVeA3ihtH+FVwvpVk0=; b=eAQyOw8F7AmB88xfWIxBj+ctxwm8qFIzLv9fTW4hWeIPCJ81NUnYJGtXD26b73DYA699PMG1O6EV51+OY3MYXVlWrFVK5rE3CmJOECjB20OmeHRQBfZenxFROklbhvqG0fT2KYnbdBAnmINilyhIAKCnG2mHDOJFDiDSICW9UBM= Received: from SN6PR11MB2880.namprd11.prod.outlook.com (2603:10b6:805:58::15) by SN6PR11MB3534.namprd11.prod.outlook.com (2603:10b6:805:d0::31) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.3195.17; Wed, 22 Jul 2020 16:10:20 +0000 Received: from SN6PR11MB2880.namprd11.prod.outlook.com ([fe80::ec8b:8f35:800d:13f4]) by SN6PR11MB2880.namprd11.prod.outlook.com ([fe80::ec8b:8f35:800d:13f4%3]) with mapi id 15.20.3216.023; Wed, 22 Jul 2020 16:10:20 +0000 From: "Trahe, Fiona" To: "Joshi, Venkatesh" , "users@dpdk.org" CC: "Trahe, Fiona" Thread-Topic: DPDK-19.11 : IPSEC-SECGW tests not successful Thread-Index: AdZf+InBxsdbQ2XmRVycQpy+BoUEVwAI88QwAAlEwFAAADg58A== Date: Wed, 22 Jul 2020 16:10:20 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: dlp-product: dlpe-windows dlp-reaction: no-action dlp-version: 11.2.0.6 authentication-results: hpe.com; dkim=none (message not signed) header.d=none;hpe.com; dmarc=none action=none header.from=intel.com; x-originating-ip: [51.37.19.102] x-ms-publictraffictype: Email x-ms-office365-filtering-correlation-id: 83ddfd37-58c9-42e3-1dcc-08d82e59bb71 x-ms-traffictypediagnostic: SN6PR11MB3534: x-ms-exchange-transport-forked: True x-microsoft-antispam-prvs: x-ms-oob-tlc-oobclassifiers: OLM:1002; x-ms-exchange-senderadcheck: 1 x-microsoft-antispam: BCL:0; x-microsoft-antispam-message-info: kZUijsiS3xcbfft5o49OYyJAfECnKOY1ohpIdvY65N91r956DLJmLpTHUmh5k7FwvdG56PasWCF0VxOHg3RAeGYhaWX24BI9UsyFlD2lWc0AQ5rF/MUgipQZ4IVNd+N6ejav9nGXLKI42aJkhmpqY05TOtIGrMHfqQWHRQOSgXBaOceVFWIyqj8MWta6WDJlUOB8HaX39r+NAACW48OCVNgSIZjA0aUKA/juzZCqAH0j9zAQT6Dfti/MM5dB2I10O03XTSayRZTl8C4TPcnHkvG1ixHVxlNXa5nlaWPE9yB7OOz5lcXZ7NFNXyZsWZ+JeevpR7QgreCgjkd8+qPQKQtkoSkJUIDQO9CFbo4FaoXrvXEfLO75JwIhNEhxG4cprjP0MT43jcpXaRVLdXfqsg== x-forefront-antispam-report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:SN6PR11MB2880.namprd11.prod.outlook.com; PTR:; CAT:NONE; SFTY:; SFS:(4636009)(136003)(366004)(39860400002)(396003)(346002)(376002)(53546011)(6506007)(8676002)(110136005)(71200400001)(26005)(7696005)(66946007)(66556008)(66476007)(64756008)(76116006)(478600001)(186003)(83380400001)(4326008)(66446008)(296002)(5660300002)(9686003)(2906002)(316002)(8936002)(55016002)(52536014)(107886003)(33656002)(86362001); DIR:OUT; SFP:1102; x-ms-exchange-antispam-messagedata: kztRRX8K1R+w2M7BDqAgbJ+rQ6hZ9AbniMwpFSLvPCs9UKe4db7vvGfma+QPUdVAfljXzLjR2qQils+5rtJhnFRzpZGMjToeAItZEYVHB3oerla4NqFzCAEMDrDb/LSrhCs/t4CZwl7MIbF0NvChY867U07Wua8i7ltlvvo8YSeNuAkJsQlxnuQOyzAdA2rKBHEad/KF11VWyueXnvV9kPebNIVlcIABzriGtFB3r1EO5qxtu7+Jwobj4jQ06e0Yf33ZyJn2omSbHb9D2aSPtBrHDGwHkftgOpiy0sklfM43esFtKIj/8ucbq9EMxJ4BXP0kt4a+Ae6BTVfXUZ2jE9sA9sD+xkJi1JQrcpsu7Qs52PUMhITeqUwmtOQsd7JqNhcorIvNSxhVQwhtwpz44fxaGsSZmNrSeaEeL9f2o9lD5wV9O6qsSUV7fH9PU16coCP00Eau/2hGE7VS5sxB/vqXkZjjktPZ+gBCY21WZJQ= Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: SN6PR11MB2880.namprd11.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 83ddfd37-58c9-42e3-1dcc-08d82e59bb71 X-MS-Exchange-CrossTenant-originalarrivaltime: 22 Jul 2020 16:10:20.3385 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 46c98d88-e344-4ed4-8496-4ed7712e255d X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 1Own8gnwrxqX9LP2sOB0glz9Lr/qrqcWFvrpIOHL4ScMGixdmBcy9fix6JA1xrjrNGwroUe/AMRYOBdlPdGXOw== X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN6PR11MB3534 X-OriginatorOrg: intel.com Subject: Re: [dpdk-users] DPDK-19.11 : IPSEC-SECGW tests not successful X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: users-bounces@dpdk.org Sender: "users" Maybe just a typo - but you're using the same bdf on both boards - should b= e 68.01.0 on=20 board 2 ? > -----Original Message----- > From: Joshi, Venkatesh > Sent: Wednesday, July 22, 2020 5:05 PM > To: Trahe, Fiona ; users@dpdk.org > Subject: RE: DPDK-19.11 : IPSEC-SECGW tests not successful >=20 > Hi Fiona, >=20 > Here are the command-lines: >=20 >=20 > For the Intel Board 1: > ------------------------- >=20 > ./build/ipsec-secgw -l 1 -n 4 -w b3:00.0 -w b3:00.1 -w 67:01.0 -- -P -p 0= x3 -u 1 --config=3D"(0,0,1),(1,0,1)" -f > ./ep0-intel-board1.cfg >=20 > ep0-intel-board1.cfg: > ------------------------- > #SP IPv4 rule - for outgoing (to crb-3) > sp ipv4 out esp protect 1000 pri 5 dst 40.1.1.0/24 sport 0:65535 dport 0:= 65535 >=20 > #SA rules > sa out 1000 cipher_algo aes-128-cbc cipher_key a0:a0:a0:a0:a0:a0:a0:a0:a0= :a0:a0:a0:\ > a0:a0:a0:a0 auth_algo sha1-hmac auth_key a0:a0:a0:a0:a0:a0:a0:a0:a0:a0:a0= :a0:\ > a0:a0:a0:a0:a0:a0:a0:a0 mode ipv4-tunnel src 20.1.1.50 dst 20.1.1.20 >=20 > #SP IPv4 rule - for incoming (to IXIA) > sp ipv4 in esp protect 1010 pri 5 dst 20.1.1.50/32 src 20.1.1.20/32 sport= 0:65535 dport 0:65535 >=20 > #SA rules > sa in 1010 cipher_algo aes-128-cbc cipher_key a0:a0:a0:a0:a0:a0:a0:a0:a0:= a0:a0:a0:\ > a0:a0:a0:a0 auth_algo sha1-hmac auth_key a0:a0:a0:a0:a0:a0:a0:a0:a0:a0:a0= :a0:\ > a0:a0:a0:a0:a0:a0:a0:a0 mode ipv4-tunnel src 20.1.1.20 dst 20.1.1.50 >=20 >=20 > #Routing rules > rt ipv4 dst 20.1.1.20/32 port 1 > rt ipv4 dst 30.1.1.10/32 port 0 >=20 >=20 > For the Intel Board 2: > ------------------------- > ./build/ipsec-secgw -l 1 -n 4 -w 17:00.0 -w 17:00.1 -w 67:01.0 -- -P -p 0= x3 -u 1 --config=3D"(0,0,1),(1,0,1)" -f > ./ep1-intel-board2.cfg >=20 > ep1-intel-board2.cfg: > ---------------------- > #SP IPv4 rule - for outgoing (from IXIA) > sp ipv4 out esp protect 1010 pri 1 dst 30.1.1.0/24 sport 0:65535 dport 0:= 65535 >=20 > #SA rules > sa out 1010 cipher_algo aes-128-cbc cipher_key a0:a0:a0:a0:a0:a0:a0:a0:a0= :a0:a0:a0:\ > a0:a0:a0:a0 auth_algo sha1-hmac auth_key a0:a0:a0:a0:a0:a0:a0:a0:a0:a0:a0= :a0:\ > a0:a0:a0:a0:a0:a0:a0:a0 mode ipv4-tunnel src 20.1.1.20 dst 20.1.1.50 >=20 > #Routing rules > rt ipv4 dst 20.1.1.50/32 port 1 >=20 >=20 >=20 >=20 >=20 >=20 > Regards, > Venkatesh >=20 >=20 > -----Original Message----- > From: Trahe, Fiona [mailto:fiona.trahe@intel.com] > Sent: Wednesday, July 22, 2020 5:15 PM > To: Joshi, Venkatesh ; users@dpdk.org > Cc: Trahe, Fiona > Subject: RE: DPDK-19.11 : IPSEC-SECGW tests not successful >=20 > Have you tried using --log-level=3D8 (or =3D"qat,8") on your process comm= andline? > In conjunction with rebuilding with > CONFIG_RTE_LOG_DP_LEVEL=3DRTE_LOG_DEBUG > this should show if any cryptodev ops are being sent to QAT PMD. >=20 > Something else to try would be - can you run either > dpdk-test-crypto-perf or the unit test application - just to validate tha= t the process can run crypto on > QAT PMD ok. > Your setup for QAT looks ok. >=20 > Also could you share the command-line you're using for each process pleas= e. >=20 >=20 > > -----Original Message----- > > From: users On Behalf Of Joshi, Venkatesh > > Sent: Wednesday, July 22, 2020 8:51 AM > > To: users@dpdk.org > > Subject: [dpdk-users] DPDK-19.11 : IPSEC-SECGW tests not successful > > > > Hi, > > > > I'm not able to successfully run the IPSEC-SECGW tests with DPDK-19.11.= I have followed the guide > > published at doc.dpdk.org but still not able to get things right. > > > > Please help me figure out what could be wrong. > > > > Here are the setup details: > > > > Network Diagram: > > ------------------ > > XL710 = XL 710 > > |---------------------|Port 1 IPSEC Tunnel = Port 1|----------------------| > > | Intel board 1 |<--------------------------------= ------>| Intel board 2 | > > |---------------------| = |----------------------| > > Port 0 ^ = ^ Port 0 (XL710) > > (XL710) | = | > > | |--------------------------------| = | > > -------->|7 IXIA 4|<-= ------------------ > > |--------------------------------| > > > > * Linux kernel: 4.14 > > * DPDK version: 19.11 > > * All ports are 40G ports (XL710 NICs) > > * The intel board is: Intel(R) Xeon(R) Gold 5220 CPU > > - has a single socket, 18 cores, 2 threads per co= re > > * The QAT card: C62x > > > > > > Issue: > > -------- > > * Traffic is sent from IXIA Port 4 to IXIA port 7: > > - This is IP/UDP traffic of size 1024 bytes > > - The dst mac is set to the MAC of port 0 of the XL710 NIC of Intel = board 2 > > - The src ip: 40.1.1.10, dst ip: 30.1.1.10 > > - No packets are received on IXIA Port 7 > > - On further debugging: Packets are not getting forwarded out of the= IPSEC tunnel from Intel board 2. > > > > On Intel board 1: > > ------------------- > > XL710 Port 0: b3:00.0 - bound to vfio-pci > > XL710 Port 1: b3:00.1 - bound to vfio-pci > > QAT VF: 0000:67:01.0 'Device 37c9' drv=3Dvfio-pci > > > > Endpoint 0 config file: attached > > Command-line and output file: attached > > > > On Intel board 2: > > ------------------- > > XL710 Port 0: 17:00.0 - bound to vfio-pci > > XL710 Port 1: 17:00.1 - bound to vfio-pci > > QAT VF: 0000:68:01.0 'Device 37c9' drv=3Dvfio-pci > > > > Endpoint 1 config file: attached > > Command-line and output file: attached > > > > > > DPDK: > > ------- > > - config has the following set: > > CONFIG_RTE_LIBRTE_PMD_QAT=3Dy > > CONFIG_RTE_LIBRTE_PMD_QAT_SYM=3Dy > > > > QAT driver version: qat1.7.l.4.9.0-00008 > > ------------------------------------------- > > Makefile has: ICP_SRIOV_AM=3D1 > > ./configure --enable-icp-sriov=3Dhost > > > > > > Please let me know if any additional information is required. > > > > > > Regards, > > Venkatesh > > > > > > -------------- next part -------------- > > An embedded and charset-unspecified text was scrubbed... > > Name: intel-board1-cmdline-and-output.txt > > URL: 3A__mails.dpdk.org_archives_users_attachments_20200722_3050bab3_attachmen= t.txt&d=3DDwIFAg&c=3D > C5b8zRQO1miGmBeVZ2LFWg&r=3D3IqRcCAftcE8t2M39oG2GFhwi2xpH1_aQ5zAqwEWGSE&m= =3DbVttGFqDb > BrrR-0XNypNRdR9q74y5kINxi7lKx2nepg&s=3DuzWkHTzMJ2sddyvpQCSvFjJ921e7w3ocWI= b_VrRJZxM&e=3D > > > -------------- next part -------------- > > An embedded and charset-unspecified text was scrubbed... > > Name: intel-board2-cmdline-and-output.txt > > URL: 3A__mails.dpdk.org_archives_users_attachments_20200722_3050bab3_attachmen= t- > 2D0001.txt&d=3DDwIFAg&c=3DC5b8zRQO1miGmBeVZ2LFWg&r=3D3IqRcCAftcE8t2M39oG2= GFhwi2xpH1_aQ5z > AqwEWGSE&m=3DbVttGFqDbBrrR- > 0XNypNRdR9q74y5kINxi7lKx2nepg&s=3Di0zTM7t5stYHLY2UVdn9IVYKGZudqptQk6lO_0a= lxNM&e=3D >