From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <sergio.gonzalez.monroy@intel.com>
Received: from mga14.intel.com (mga14.intel.com [192.55.52.115])
 by dpdk.org (Postfix) with ESMTP id 4009E6966
 for <users@dpdk.org>; Tue, 17 May 2016 12:57:47 +0200 (CEST)
Received: from fmsmga004.fm.intel.com ([10.253.24.48])
 by fmsmga103.fm.intel.com with ESMTP; 17 May 2016 03:57:48 -0700
X-ExtLoop1: 1
X-IronPort-AV: E=Sophos;i="5.26,324,1459839600"; d="scan'208";a="105309345"
Received: from smonroyx-mobl.ger.corp.intel.com (HELO [10.237.220.73])
 ([10.237.220.73])
 by fmsmga004.fm.intel.com with ESMTP; 17 May 2016 03:57:46 -0700
From: Sergio Gonzalez Monroy <sergio.gonzalez.monroy@intel.com>
To: Chinmaya Dwibedy <ckdwibedy@gmail.com>
Cc: users@dpdk.org
References: <CAMHS8RG4DLF1zWJDnzB0DtygNPzdJ3o0VsL=60JVNvKxhfBXWg@mail.gmail.com>
Message-ID: <beccee8e-af1f-e959-c220-23062c5c819f@intel.com>
Date: Tue, 17 May 2016 11:57:44 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:45.0) Gecko/20100101
 Thunderbird/45.0
MIME-Version: 1.0
In-Reply-To: <CAMHS8RG4DLF1zWJDnzB0DtygNPzdJ3o0VsL=60JVNvKxhfBXWg@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
Subject: Re: [dpdk-users]
 =?utf-8?q?Questions_on_ipsec-secgw_sample_applicatio?=
 =?utf-8?q?n_and_DPDK=E2=80=99s_crypto_framework?=
X-BeenThere: users@dpdk.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: usage discussions <users.dpdk.org>
List-Unsubscribe: <http://dpdk.org/ml/options/users>,
 <mailto:users-request@dpdk.org?subject=unsubscribe>
List-Archive: <http://dpdk.org/ml/archives/users/>
List-Post: <mailto:users@dpdk.org>
List-Help: <mailto:users-request@dpdk.org?subject=help>
List-Subscribe: <http://dpdk.org/ml/listinfo/users>,
 <mailto:users-request@dpdk.org?subject=subscribe>
X-List-Received-Date: Tue, 17 May 2016 10:57:47 -0000

Hi,

IPSec app can run with or without QAT.
DPDK Cryptodev also has Software encryption for those platforms without 
Crypto Hardware offloads.
AES-NI MB and GCM PMDs are examples of Software Cryptodevs.

I suggest that you read the following documentation for more details:
http://dpdk.org/doc/guides/cryptodevs/index.html

To run DPDK IPSec app in a VM using QAT PMD, at the moment you would 
need a Linux kernel 4.4+, create your QAT VFs, then assign the VFs to 
your VM.

If you are having problems, I would recommend that you run on the host 
first if possible.

Sergio

On 17/05/2016 10:10, Chinmaya Dwibedy wrote:
> Hi All,
>
>
> Can the ipsec-secgw sample application (
> http://dpdk.org/browse/dpdk/tree/examples/ipsec-secgw) be run on VM which
> has access to Intel® QuickAssist Technology hardware device?  Please
> clarify.  Note: both the DPDK package and the QuickAssist Technology
> Software Library installed on this VM.
>
>
> What I understand, we need not to call Intel QuickAssist Technology
> Cryptographic API () for crypto operation (encryption, decryption,
> authentication processing). The DPDK’s crypto framework and QAT PMD (driver
> for Intel’s QuickAssist Technology device) takes care of them. Please
> correct me if I am wrong.
>
>
>
> Regards,
>
> Chinmaya