Re: [vpp-dev] GRE-over-IPSec fails

Hi Xingyeping, My customer use case if gre-over-ipsec but we want to use mGRE only because we don't want to create too many GRE tunnels which is the case if there are too many peers connecting with VPP (for a GRE p2p case) I saw your example, it looks like you are using GRE with manually keyed IP

Re: [vpp-dev] GRE-over-IPSec fails

Hi Neale, Could you let me know if you faced the mentioned problem anytime? For me only IPSec works fine, Only GRE also works fine. But when I configure GRE-over-IPSec, the traffic is dropped at *esp4-decrypt-tun* due to integrity check failure. As there are two logical interfaces created at VPP

Re: [vpp-dev] VPP is not coming up

Hi Nathan, Even with the rebuild based on the steps you provided, the result is same. Regards. On Mon, 22 Mar 2021, 19:01 Nathan Skrzypczak, wrote: > Hi Vijay, > > Usually the `unknown input dpdk` comes from the dpdk plugin not being > loaded at startup. So either there is a > `plugins { pl

[vpp-dev] GRE-over-IPSec fails

Hi, I am trying a test case where-in I have an GRE P2MP (mGRE) tunnel on the VPP. The GRE peer is a strongswan VM that hosts both the GRE tunnel and IPSec SA. When I started ping traffic from SS, the traffic is dropped at esp4-decrypt-tun graph node due to integrity check failure. Has any one tes

Re: [vpp-dev] IPSec proposal to improve "ipsec4-output-feature" node performance

Hi Neale, I have completed the flow cache implementation for SPD lookup in IPv4/IPSec outbound direction. Performance numbers are good with null encryption on single core/64B @ MRR. Please provide your comments. https://gerrit.fd.io/r/c/vpp/+/31694 Summary of flow cache implementation:

Re: [vpp-dev] 40G Mellanox NIC not working

Hi, If possible, the preferred way of using Mellanox NICs with VPP is with the native rdma driver instead of DPDK: https://docs.fd.io/vpp/21.06/df/d0e/rdma_doc.html Otherwise you can always try to rebuild DPDK with mlx5 support, see https://git.fd.io/vpp/tree/build/external/packages/dpdk.mk#n18

Re: [vpp-dev] Update VPP IPsec examples

Also, Filip recently added more ikev2 docs (no GRE though): https://gerrit.fd.io/r/c/vpp/+/31414 see for example how to connect strongSwan "client" (initiator) to VPP: https://gerrit.fd.io/r/c/vpp/+/31414/2/docs/usecases/vpp_resp_sswan_init.md It will show up in https://fd.io/docs/vpp/master/use

Re: [vpp-dev] VPP is not coming up

Hi Vijay, Usually the `unknown input dpdk` comes from the dpdk plugin not being loaded at startup. So either there is a `plugins { plugin dpdk_plugin.so { disable } }` stanza that was added to you config file - but VM restart wouldn't explain this. Or vpp-ext-deps / e-build containing dpdk got out

Re: [vpp-dev] VPP is not coming up

Hi Chetan, I added the PCI address into the whitelist configuration of the startup.conf Yes I did load both kernel modules: uio and pci_generic Pls find the output that you asked for. root@ubuntu-10-37-3-75:~/VPP-NEW/vpp/build-root/install-vpp_debug-native/vpp/bin# lsmod | grep uio igb_uio

Re: [vpp-dev] VPP is not coming up

Hi Vijay, Have you modprobe uio and uio_pci_generic ? kindly confirm the pci address of your nic again using ethtool -i Please share what else is coming on the console. Thanks, Chetan On Mon, Mar 22, 2021 at 1:58 PM Vijay Kumar wrote: > Hi, > > I was running VPP on my VM without any issues.

[vpp-dev] VPP is not coming up

Hi, I was running VPP on my VM without any issues. But recently due to a lab maintenance, the VM was powered off. But now I am not able to bring it up. Getting the error "unknown input dpdk dev :0b:00.0" -- I have ensured the ethernet interface is set to DOWN so that VPP takes control of it.