[dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

[dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

[DAS, SANJIB]

Hello team,

I am currently executing performance testing using ipsec-secgw application for different crypto algorithms. I was able to execute the tests for crypto algorithms CBC & GCM, but as such dint find much pointers on CCM.  From ipsec-secgw sample application source code (DPDK-18.02.1) also it looks CCM support is not there. Could you kindly share your comments on that. Can we actually execute ipsec-secgw application for crypto algorithm CCM?

Thanks,
Sanjib

my page-0 wiki<https://margot.arubanetworks.com/margot/index.php/sanjibdas_wiki_space>

Re: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

[Trahe, Fiona]

Hi Sanjib,

Copying Pablo who added unit tests for it in this commit - this should give you an example of how to get it working:
77a217a19bb72860e26b9aefb19dce92239e0820

Also copying Fan who added CCM to aesni_mb PMD.

Fiona

> -----Original Message-----
> From: users [mailto:users-bounces@dpdk.org] On Behalf Of DAS, SANJIB
> Sent: Wednesday, May 2, 2018 3:21 PM
> To: users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> Cc: DAS, SANJIB <sanjib.das@hpe.com>
> Subject: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM
> 
> Hello team,
> 
> I am currently executing performance testing using ipsec-secgw application for different crypto algorithms.
> I was able to execute the tests for crypto algorithms CBC & GCM, but as such dint find much pointers on
> CCM.  From ipsec-secgw sample application source code (DPDK-18.02.1) also it looks CCM support is not
> there. Could you kindly share your comments on that. Can we actually execute ipsec-secgw application for
> crypto algorithm CCM?
> 

> Thanks,
> Sanjib
> 
> my page-0 wiki<https://margot.arubanetworks.com/margot/index.php/sanjibdas_wiki_space>
> 
> 
> 

Re: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

[DAS, SANJIB]

Thanks Fiona,

Recently I was trying with "dpdk-test-crypto-perf"  application & PMD as openssl.
But I do see it fails for CCM (dpdk-17.11.2). This API fails 
rte_cryptodev_sym_capability_check_aead(). It all works fine with GCM.


I used this command

./dpdk-test-crypto-perf -l 1-2 --vdev crypto_openssl -w 0000:00:00.0 -- --devtype crypto_openssl --aead-algo aes-ccm --aead-key-sz 16 --aead-iv-sz 16 --aead-op encrypt --aead-aad-sz 16 --digest-sz 16 --optype aead --silent --ptest throughput --total-ops 1000000

Not sure if others too faced this issue.

Thanks,
Sanjib

my page-0 wiki


-----Original Message-----
From: Trahe, Fiona [mailto:fiona.trahe@intel.com] 
Sent: Tuesday, May 8, 2018 3:26 PM
To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo <pablo.de.lara.guarch@intel.com>
Subject: RE: Query on ipsec-secgw with crypto algorithm CCM

Hi Sanjib,

Copying Pablo who added unit tests for it in this commit - this should give you an example of how to get it working:
77a217a19bb72860e26b9aefb19dce92239e0820

Also copying Fan who added CCM to aesni_mb PMD.

Fiona

> -----Original Message-----
> From: users [mailto:users-bounces@dpdk.org] On Behalf Of DAS, SANJIB
> Sent: Wednesday, May 2, 2018 3:21 PM
> To: users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> Cc: DAS, SANJIB <sanjib.das@hpe.com>
> Subject: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM
> 
> Hello team,
> 
> I am currently executing performance testing using ipsec-secgw application for different crypto algorithms.
> I was able to execute the tests for crypto algorithms CBC & GCM, but 
> as such dint find much pointers on CCM.  From ipsec-secgw sample 
> application source code (DPDK-18.02.1) also it looks CCM support is 
> not there. Could you kindly share your comments on that. Can we actually execute ipsec-secgw application for crypto algorithm CCM?
> 

> Thanks,
> Sanjib
> 
> my page-0 
> wiki<https://margot.arubanetworks.com/margot/index.php/sanjibdas_wiki_
> space>
> 
> 
> 

Re: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

[Trahe, Fiona]

CCM aead-iv-size should be between 7 and 13, you're setting to 16.
See drivers/crypto/openssl/rte_openssl_pmd_ops.c for openssl capabilities


> -----Original Message-----
> From: DAS, SANJIB [mailto:sanjib.das@hpe.com]
> Sent: Wednesday, May 9, 2018 4:19 AM
> To: Trahe, Fiona <fiona.trahe@intel.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo
> <pablo.de.lara.guarch@intel.com>; DAS, SANJIB <sanjib.das@hpe.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Thanks Fiona,
> 
> Recently I was trying with "dpdk-test-crypto-perf"  application & PMD as openssl.
> But I do see it fails for CCM (dpdk-17.11.2). This API fails
> rte_cryptodev_sym_capability_check_aead(). It all works fine with GCM.
> 
> 
> I used this command
> 
> ./dpdk-test-crypto-perf -l 1-2 --vdev crypto_openssl -w 0000:00:00.0 -- --devtype crypto_openssl --aead-
> algo aes-ccm --aead-key-sz 16 --aead-iv-sz 16 --aead-op encrypt --aead-aad-sz 16 --digest-sz 16 --optype
> aead --silent --ptest throughput --total-ops 1000000
> 
> Not sure if others too faced this issue.
> 
> Thanks,
> Sanjib
> 
> my page-0 wiki
> 
> 
> -----Original Message-----
> From: Trahe, Fiona [mailto:fiona.trahe@intel.com]
> Sent: Tuesday, May 8, 2018 3:26 PM
> To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo
> <pablo.de.lara.guarch@intel.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Hi Sanjib,
> 
> Copying Pablo who added unit tests for it in this commit - this should give you an example of how to get
> it working:
> 77a217a19bb72860e26b9aefb19dce92239e0820
> 
> Also copying Fan who added CCM to aesni_mb PMD.
> 
> Fiona
> 
> > -----Original Message-----
> > From: users [mailto:users-bounces@dpdk.org] On Behalf Of DAS, SANJIB
> > Sent: Wednesday, May 2, 2018 3:21 PM
> > To: users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> > Cc: DAS, SANJIB <sanjib.das@hpe.com>
> > Subject: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM
> >
> > Hello team,
> >
> > I am currently executing performance testing using ipsec-secgw application for different crypto
> algorithms.
> > I was able to execute the tests for crypto algorithms CBC & GCM, but
> > as such dint find much pointers on CCM.  From ipsec-secgw sample
> > application source code (DPDK-18.02.1) also it looks CCM support is
> > not there. Could you kindly share your comments on that. Can we actually execute ipsec-secgw
> application for crypto algorithm CCM?
> >
> 
> > Thanks,
> > Sanjib
> >
> > my page-0
> > wiki<https://margot.arubanetworks.com/margot/index.php/sanjibdas_wiki_
> > space>
> >
> >
> >
> 

Re: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

[DAS, SANJIB]

Thanks a lot Fiona. It worked.

Thanks,
Sanjib

my page-0 wiki



-----Original Message-----
From: Trahe, Fiona [mailto:fiona.trahe@intel.com] 
Sent: Wednesday, May 9, 2018 5:22 PM
To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo <pablo.de.lara.guarch@intel.com>; Trahe, Fiona <fiona.trahe@intel.com>
Subject: RE: Query on ipsec-secgw with crypto algorithm CCM

CCM aead-iv-size should be between 7 and 13, you're setting to 16.
See drivers/crypto/openssl/rte_openssl_pmd_ops.c for openssl capabilities


> -----Original Message-----
> From: DAS, SANJIB [mailto:sanjib.das@hpe.com]
> Sent: Wednesday, May 9, 2018 4:19 AM
> To: Trahe, Fiona <fiona.trahe@intel.com>; users@dpdk.org; 
> dts@dpdk.org; test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch@intel.com>; DAS, SANJIB <sanjib.das@hpe.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Thanks Fiona,
> 
> Recently I was trying with "dpdk-test-crypto-perf"  application & PMD as openssl.
> But I do see it fails for CCM (dpdk-17.11.2). This API fails 
> rte_cryptodev_sym_capability_check_aead(). It all works fine with GCM.
> 
> 
> I used this command
> 
> ./dpdk-test-crypto-perf -l 1-2 --vdev crypto_openssl -w 0000:00:00.0 
> -- --devtype crypto_openssl --aead- algo aes-ccm --aead-key-sz 16 
> --aead-iv-sz 16 --aead-op encrypt --aead-aad-sz 16 --digest-sz 16 
> --optype aead --silent --ptest throughput --total-ops 1000000
> 
> Not sure if others too faced this issue.
> 
> Thanks,
> Sanjib
> 
> my page-0 wiki
> 
> 
> -----Original Message-----
> From: Trahe, Fiona [mailto:fiona.trahe@intel.com]
> Sent: Tuesday, May 8, 2018 3:26 PM
> To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org; 
> test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch@intel.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Hi Sanjib,
> 
> Copying Pablo who added unit tests for it in this commit - this should 
> give you an example of how to get it working:
> 77a217a19bb72860e26b9aefb19dce92239e0820
> 
> Also copying Fan who added CCM to aesni_mb PMD.
> 
> Fiona
> 
> > -----Original Message-----
> > From: users [mailto:users-bounces@dpdk.org] On Behalf Of DAS, SANJIB
> > Sent: Wednesday, May 2, 2018 3:21 PM
> > To: users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> > Cc: DAS, SANJIB <sanjib.das@hpe.com>
> > Subject: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM
> >
> > Hello team,
> >
> > I am currently executing performance testing using ipsec-secgw 
> > application for different crypto
> algorithms.
> > I was able to execute the tests for crypto algorithms CBC & GCM, but 
> > as such dint find much pointers on CCM.  From ipsec-secgw sample 
> > application source code (DPDK-18.02.1) also it looks CCM support is 
> > not there. Could you kindly share your comments on that. Can we 
> > actually execute ipsec-secgw
> application for crypto algorithm CCM?
> >
> 
> > Thanks,
> > Sanjib
> >
> > my page-0
> > wiki<https://margot.arubanetworks.com/margot/index.php/sanjibdas_wik
> > i_
> > space>
> >
> >
> >
> 

Re: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

[DAS, SANJIB]

Hi Fiona,

One query with dpsk-17.11.2 ipsec-secgw.

I do see API ixgbe_crypto_enable_ipsec() returning me error for both rx/tx (dev_conf.rxmode.offloads/dev_conf.txmode.offloads) offload on my target X86 system.

It fails to read value whatever it writes either on IXGBE_SECRXCTRL or IXGBE_SECTXCTRL.
I am currently debugging this issue, but if I ignore these errors it continues & I can see
its handling packets also.

Does ignoring these errors mean simply its not enabling hw offloads for both rx/tx? 
Is my understanding correct? Other than that does it have any other side effect? 


Thanks,
Sanjib


-----Original Message-----
From: DAS, SANJIB 
Sent: Wednesday, May 9, 2018 5:48 PM
To: 'Trahe, Fiona' <fiona.trahe@intel.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo <pablo.de.lara.guarch@intel.com>
Subject: RE: Query on ipsec-secgw with crypto algorithm CCM

Thanks a lot Fiona. It worked.

Thanks,
Sanjib

my page-0 wiki



-----Original Message-----
From: Trahe, Fiona [mailto:fiona.trahe@intel.com]
Sent: Wednesday, May 9, 2018 5:22 PM
To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo <pablo.de.lara.guarch@intel.com>; Trahe, Fiona <fiona.trahe@intel.com>
Subject: RE: Query on ipsec-secgw with crypto algorithm CCM

CCM aead-iv-size should be between 7 and 13, you're setting to 16.
See drivers/crypto/openssl/rte_openssl_pmd_ops.c for openssl capabilities


> -----Original Message-----
> From: DAS, SANJIB [mailto:sanjib.das@hpe.com]
> Sent: Wednesday, May 9, 2018 4:19 AM
> To: Trahe, Fiona <fiona.trahe@intel.com>; users@dpdk.org; 
> dts@dpdk.org; test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch@intel.com>; DAS, SANJIB <sanjib.das@hpe.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Thanks Fiona,
> 
> Recently I was trying with "dpdk-test-crypto-perf"  application & PMD as openssl.
> But I do see it fails for CCM (dpdk-17.11.2). This API fails 
> rte_cryptodev_sym_capability_check_aead(). It all works fine with GCM.
> 
> 
> I used this command
> 
> ./dpdk-test-crypto-perf -l 1-2 --vdev crypto_openssl -w 0000:00:00.0
> -- --devtype crypto_openssl --aead- algo aes-ccm --aead-key-sz 16 
> --aead-iv-sz 16 --aead-op encrypt --aead-aad-sz 16 --digest-sz 16 
> --optype aead --silent --ptest throughput --total-ops 1000000
> 
> Not sure if others too faced this issue.
> 
> Thanks,
> Sanjib
> 
> my page-0 wiki
> 
> 
> -----Original Message-----
> From: Trahe, Fiona [mailto:fiona.trahe@intel.com]
> Sent: Tuesday, May 8, 2018 3:26 PM
> To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org; 
> test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch@intel.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Hi Sanjib,
> 
> Copying Pablo who added unit tests for it in this commit - this should 
> give you an example of how to get it working:
> 77a217a19bb72860e26b9aefb19dce92239e0820
> 
> Also copying Fan who added CCM to aesni_mb PMD.
> 
> Fiona
> 
> > -----Original Message-----
> > From: users [mailto:users-bounces@dpdk.org] On Behalf Of DAS, SANJIB
> > Sent: Wednesday, May 2, 2018 3:21 PM
> > To: users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> > Cc: DAS, SANJIB <sanjib.das@hpe.com>
> > Subject: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM
> >
> > Hello team,
> >
> > I am currently executing performance testing using ipsec-secgw 
> > application for different crypto
> algorithms.
> > I was able to execute the tests for crypto algorithms CBC & GCM, but 
> > as such dint find much pointers on CCM.  From ipsec-secgw sample 
> > application source code (DPDK-18.02.1) also it looks CCM support is 
> > not there. Could you kindly share your comments on that. Can we 
> > actually execute ipsec-secgw
> application for crypto algorithm CCM?
> >
> 
> > Thanks,
> > Sanjib
> >
> > my page-0
> > wiki<https://margot.arubanetworks.com/margot/index.php/sanjibdas_wik
> > i_
> > space>
> >
> >
> >
> 

Re: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

[Trahe, Fiona]

Sorry Sanjib,

I'm not familiar with that API or error.

Fiona

> -----Original Message-----
> From: DAS, SANJIB [mailto:sanjib.das@hpe.com]
> Sent: Wednesday, May 16, 2018 8:35 AM
> To: Trahe, Fiona <fiona.trahe@intel.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo
> <pablo.de.lara.guarch@intel.com>; DAS, SANJIB <sanjib.das@hpe.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Hi Fiona,
> 
> One query with dpsk-17.11.2 ipsec-secgw.
> 
> I do see API ixgbe_crypto_enable_ipsec() returning me error for both rx/tx
> (dev_conf.rxmode.offloads/dev_conf.txmode.offloads) offload on my target X86 system.
> 
> It fails to read value whatever it writes either on IXGBE_SECRXCTRL or IXGBE_SECTXCTRL.
> I am currently debugging this issue, but if I ignore these errors it continues & I can see
> its handling packets also.
> 
> Does ignoring these errors mean simply its not enabling hw offloads for both rx/tx?
> Is my understanding correct? Other than that does it have any other side effect?
> 
> 
> Thanks,
> Sanjib
> 
> 
> -----Original Message-----
> From: DAS, SANJIB
> Sent: Wednesday, May 9, 2018 5:48 PM
> To: 'Trahe, Fiona' <fiona.trahe@intel.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo
> <pablo.de.lara.guarch@intel.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Thanks a lot Fiona. It worked.
> 
> Thanks,
> Sanjib
> 
> my page-0 wiki
> 
> 
> 
> -----Original Message-----
> From: Trahe, Fiona [mailto:fiona.trahe@intel.com]
> Sent: Wednesday, May 9, 2018 5:22 PM
> To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo
> <pablo.de.lara.guarch@intel.com>; Trahe, Fiona <fiona.trahe@intel.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> CCM aead-iv-size should be between 7 and 13, you're setting to 16.
> See drivers/crypto/openssl/rte_openssl_pmd_ops.c for openssl capabilities
> 
> 
> > -----Original Message-----
> > From: DAS, SANJIB [mailto:sanjib.das@hpe.com]
> > Sent: Wednesday, May 9, 2018 4:19 AM
> > To: Trahe, Fiona <fiona.trahe@intel.com>; users@dpdk.org;
> > dts@dpdk.org; test-report@dpdk.org
> > Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo
> > <pablo.de.lara.guarch@intel.com>; DAS, SANJIB <sanjib.das@hpe.com>
> > Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> >
> > Thanks Fiona,
> >
> > Recently I was trying with "dpdk-test-crypto-perf"  application & PMD as openssl.
> > But I do see it fails for CCM (dpdk-17.11.2). This API fails
> > rte_cryptodev_sym_capability_check_aead(). It all works fine with GCM.
> >
> >
> > I used this command
> >
> > ./dpdk-test-crypto-perf -l 1-2 --vdev crypto_openssl -w 0000:00:00.0
> > -- --devtype crypto_openssl --aead- algo aes-ccm --aead-key-sz 16
> > --aead-iv-sz 16 --aead-op encrypt --aead-aad-sz 16 --digest-sz 16
> > --optype aead --silent --ptest throughput --total-ops 1000000
> >
> > Not sure if others too faced this issue.
> >
> > Thanks,
> > Sanjib
> >
> > my page-0 wiki
> >
> >
> > -----Original Message-----
> > From: Trahe, Fiona [mailto:fiona.trahe@intel.com]
> > Sent: Tuesday, May 8, 2018 3:26 PM
> > To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org;
> > test-report@dpdk.org
> > Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo
> > <pablo.de.lara.guarch@intel.com>
> > Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> >
> > Hi Sanjib,
> >
> > Copying Pablo who added unit tests for it in this commit - this should
> > give you an example of how to get it working:
> > 77a217a19bb72860e26b9aefb19dce92239e0820
> >
> > Also copying Fan who added CCM to aesni_mb PMD.
> >
> > Fiona
> >
> > > -----Original Message-----
> > > From: users [mailto:users-bounces@dpdk.org] On Behalf Of DAS, SANJIB
> > > Sent: Wednesday, May 2, 2018 3:21 PM
> > > To: users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> > > Cc: DAS, SANJIB <sanjib.das@hpe.com>
> > > Subject: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM
> > >
> > > Hello team,
> > >
> > > I am currently executing performance testing using ipsec-secgw
> > > application for different crypto
> > algorithms.
> > > I was able to execute the tests for crypto algorithms CBC & GCM, but
> > > as such dint find much pointers on CCM.  From ipsec-secgw sample
> > > application source code (DPDK-18.02.1) also it looks CCM support is
> > > not there. Could you kindly share your comments on that. Can we
> > > actually execute ipsec-secgw
> > application for crypto algorithm CCM?
> > >
> >
> > > Thanks,
> > > Sanjib
> > >
> > > my page-0
> > > wiki<https://margot.arubanetworks.com/margot/index.php/sanjibdas_wik
> > > i_
> > > space>
> > >
> > >
> > >
> >
> 

Re: [dpdk-users] Query on ipsec-secgw with crypto algorithm CCM

[DAS, SANJIB]

No problem Fiona,
Appreciate your reply. 

Hi Pablo/Fiona,

Thought of asking you one more query, is there any sample ipsec-secgw config file
with SA rules for 'out' traffic. Looking for one with CGM & CCM support.
Just wanted to compare with mine.


Thanks,
Sanjib

my page-0 wiki


-----Original Message-----
From: Trahe, Fiona [mailto:fiona.trahe@intel.com] 
Sent: Wednesday, May 16, 2018 7:53 PM
To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo <pablo.de.lara.guarch@intel.com>
Subject: RE: Query on ipsec-secgw with crypto algorithm CCM

Sorry Sanjib,

I'm not familiar with that API or error.

Fiona

> -----Original Message-----
> From: DAS, SANJIB [mailto:sanjib.das@hpe.com]
> Sent: Wednesday, May 16, 2018 8:35 AM
> To: Trahe, Fiona <fiona.trahe@intel.com>; users@dpdk.org; 
> dts@dpdk.org; test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch@intel.com>; DAS, SANJIB <sanjib.das@hpe.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Hi Fiona,
> 
> One query with dpsk-17.11.2 ipsec-secgw.
> 
> I do see API ixgbe_crypto_enable_ipsec() returning me error for both 
> rx/tx
> (dev_conf.rxmode.offloads/dev_conf.txmode.offloads) offload on my target X86 system.
> 
> It fails to read value whatever it writes either on IXGBE_SECRXCTRL or IXGBE_SECTXCTRL.
> I am currently debugging this issue, but if I ignore these errors it 
> continues & I can see its handling packets also.
> 
> Does ignoring these errors mean simply its not enabling hw offloads for both rx/tx?
> Is my understanding correct? Other than that does it have any other side effect?
> 
> 
> Thanks,
> Sanjib
> 
> 
> -----Original Message-----
> From: DAS, SANJIB
> Sent: Wednesday, May 9, 2018 5:48 PM
> To: 'Trahe, Fiona' <fiona.trahe@intel.com>; users@dpdk.org; 
> dts@dpdk.org; test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch@intel.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> Thanks a lot Fiona. It worked.
> 
> Thanks,
> Sanjib
> 
> my page-0 wiki
> 
> 
> 
> -----Original Message-----
> From: Trahe, Fiona [mailto:fiona.trahe@intel.com]
> Sent: Wednesday, May 9, 2018 5:22 PM
> To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org; 
> test-report@dpdk.org
> Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo 
> <pablo.de.lara.guarch@intel.com>; Trahe, Fiona <fiona.trahe@intel.com>
> Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> 
> CCM aead-iv-size should be between 7 and 13, you're setting to 16.
> See drivers/crypto/openssl/rte_openssl_pmd_ops.c for openssl 
> capabilities
> 
> 
> > -----Original Message-----
> > From: DAS, SANJIB [mailto:sanjib.das@hpe.com]
> > Sent: Wednesday, May 9, 2018 4:19 AM
> > To: Trahe, Fiona <fiona.trahe@intel.com>; users@dpdk.org; 
> > dts@dpdk.org; test-report@dpdk.org
> > Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo 
> > <pablo.de.lara.guarch@intel.com>; DAS, SANJIB <sanjib.das@hpe.com>
> > Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> >
> > Thanks Fiona,
> >
> > Recently I was trying with "dpdk-test-crypto-perf"  application & PMD as openssl.
> > But I do see it fails for CCM (dpdk-17.11.2). This API fails 
> > rte_cryptodev_sym_capability_check_aead(). It all works fine with GCM.
> >
> >
> > I used this command
> >
> > ./dpdk-test-crypto-perf -l 1-2 --vdev crypto_openssl -w 0000:00:00.0
> > -- --devtype crypto_openssl --aead- algo aes-ccm --aead-key-sz 16 
> > --aead-iv-sz 16 --aead-op encrypt --aead-aad-sz 16 --digest-sz 16 
> > --optype aead --silent --ptest throughput --total-ops 1000000
> >
> > Not sure if others too faced this issue.
> >
> > Thanks,
> > Sanjib
> >
> > my page-0 wiki
> >
> >
> > -----Original Message-----
> > From: Trahe, Fiona [mailto:fiona.trahe@intel.com]
> > Sent: Tuesday, May 8, 2018 3:26 PM
> > To: DAS, SANJIB <sanjib.das@hpe.com>; users@dpdk.org; dts@dpdk.org; 
> > test-report@dpdk.org
> > Cc: Zhang, Roy Fan <roy.fan.zhang@intel.com>; De Lara Guarch, Pablo 
> > <pablo.de.lara.guarch@intel.com>
> > Subject: RE: Query on ipsec-secgw with crypto algorithm CCM
> >
> > Hi Sanjib,
> >
> > Copying Pablo who added unit tests for it in this commit - this 
> > should give you an example of how to get it working:
> > 77a217a19bb72860e26b9aefb19dce92239e0820
> >
> > Also copying Fan who added CCM to aesni_mb PMD.
> >
> > Fiona
> >
> > > -----Original Message-----
> > > From: users [mailto:users-bounces@dpdk.org] On Behalf Of DAS, 
> > > SANJIB
> > > Sent: Wednesday, May 2, 2018 3:21 PM
> > > To: users@dpdk.org; dts@dpdk.org; test-report@dpdk.org
> > > Cc: DAS, SANJIB <sanjib.das@hpe.com>
> > > Subject: [dpdk-users] Query on ipsec-secgw with crypto algorithm 
> > > CCM
> > >
> > > Hello team,
> > >
> > > I am currently executing performance testing using ipsec-secgw 
> > > application for different crypto
> > algorithms.
> > > I was able to execute the tests for crypto algorithms CBC & GCM, 
> > > but as such dint find much pointers on CCM.  From ipsec-secgw 
> > > sample application source code (DPDK-18.02.1) also it looks CCM 
> > > support is not there. Could you kindly share your comments on 
> > > that. Can we actually execute ipsec-secgw
> > application for crypto algorithm CCM?
> > >
> >
> > > Thanks,
> > > Sanjib
> > >
> > > my page-0
> > > wiki<https://margot.arubanetworks.com/margot/index.php/sanjibdas_w
> > > ik
> > > i_
> > > space>
> > >
> > >
> > >
> >
>