Re: [vpp-dev] tls init server is too heavy

2018-07-25 Thread Yu, Ping
That’s great. I will implement it and submit patch for this optimization.

Ping

From: Florin Coras (fcoras) [mailto:fco...@cisco.com]
Sent: Thursday, July 26, 2018 1:01 AM
To: Yu, Ping ; vpp-dev@lists.fd.io
Subject: Re: tls init server is too heavy

Hi Ping,

The plan you proposed sounds great, so definitely go for it! You’ll have to 
find a place to store a pointer to the shared engine-generated context (i.e., 
ssl_ctx) in the generic listener context. If no obvious field is available, 
maybe you can abuse the ctx_id since we still have space there (note that it’s 
limited to 42B).

Let me know how it goes!

Cheers,
Florin

From: "Yu, Ping" mailto:ping...@intel.com>>
Date: Wednesday, July 25, 2018 at 9:13 AM
To: "Florin Coras (fcoras)" mailto:fco...@cisco.com>>, 
"vpp-dev@lists.fd.io" 
mailto:vpp-dev@lists.fd.io>>
Cc: "Yu, Ping" mailto:ping...@intel.com>>
Subject: tls init server is too heavy

Hello, Florin

In current TLS openssl implementation, in each accepted TLS session, 
openssl_ctx_init_server needs to re-init ssl_ctx, and set key and certificate, 
which actually is not necessary, and normally one-time initialization is good 
enough. After I change this initialization to run only once, I can get around 
20~30% performance improvement for CPS.
I am now considering to re-architect this initialization, and one possible 
point is to move this to tls_start_listen. A generic tls_ssl_ctx_init can be 
the interface, then it will call engine specific, such as openssl ssl_ctx 
initialization afterward. How do you think?

Thanks
Ping




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9935): https://lists.fd.io/g/vpp-dev/message/9935
Mute This Topic: https://lists.fd.io/mt/23814247/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: [vpp-dev] tls init server is too heavy

2018-07-25 Thread via Lists.Fd.Io
Hi Ping,

The plan you proposed sounds great, so definitely go for it! You’ll have to 
find a place to store a pointer to the shared engine-generated context (i.e., 
ssl_ctx) in the generic listener context. If no obvious field is available, 
maybe you can abuse the ctx_id since we still have space there (note that it’s 
limited to 42B).

Let me know how it goes!

Cheers,
Florin

From: "Yu, Ping" 
Date: Wednesday, July 25, 2018 at 9:13 AM
To: "Florin Coras (fcoras)" , "vpp-dev@lists.fd.io" 

Cc: "Yu, Ping" 
Subject: tls init server is too heavy

Hello, Florin

In current TLS openssl implementation, in each accepted TLS session, 
openssl_ctx_init_server needs to re-init ssl_ctx, and set key and certificate, 
which actually is not necessary, and normally one-time initialization is good 
enough. After I change this initialization to run only once, I can get around 
20~30% performance improvement for CPS.
I am now considering to re-architect this initialization, and one possible 
point is to move this to tls_start_listen. A generic tls_ssl_ctx_init can be 
the interface, then it will call engine specific, such as openssl ssl_ctx 
initialization afterward. How do you think?

Thanks
Ping




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9934): https://lists.fd.io/g/vpp-dev/message/9934
Mute This Topic: https://lists.fd.io/mt/23814247/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: [vpp-dev] Regarding /var/run/.rte_config

2018-07-25 Thread Damjan Marion via Lists.Fd.Io

Dear Prashant,

We had lot of operational issues with dpdk leftover files in the past, so
we took special care to made them disappear ASAP.

Even if they are present you will not be able to use secondary process,
we simply don't support that use case. Secondary process will not be 
able to access buffer memory as buffer memory is allocated by VPP and not by 
DPDK.

Please note that VPP is not application built on top of DPDK, for us DPDK is 
just
source of device drivers wit a bit of weight around them. Typical VPP feature 
code can work even without DPDK being present.

If you explain your use case we might be able to advise you how to approach 
your problem
in a way native to VPP,  without relying on DPDK legacy features.

Regards,

-- 
Damjan

> On 25 Jul 2018, at 13:11, Prashant Upadhyaya  wrote:
> 
> Hi,
> 
> I am running VPP with DPDK plugin.
> I see that when I normally run other non VPP DPDK applications, they
> create a file called /var/run/.rte_config
> But VPP running as a DPDK application (and calling rte_eal_init) does
> not create this file.
> 
> There are consequences of the above in certain usecases where
> secondary processes try to look at this file.
> 
> Can somebody advise why this file is not created when VPP is run with
> DPDK plugin. Or what needs to be done so that it does get created, or
> perhaps it is getting created somewhere that I am not aware of. I am
> running VPP as root.
> 
> Regards
> -Prashant
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> 
> View/Reply Online (#9929): https://lists.fd.io/g/vpp-dev/message/9929
> Mute This Topic: https://lists.fd.io/mt/23811660/675642
> Group Owner: vpp-dev+ow...@lists.fd.io
> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [dmar...@me.com]
> -=-=-=-=-=-=-=-=-=-=-=-

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9933): https://lists.fd.io/g/vpp-dev/message/9933
Mute This Topic: https://lists.fd.io/mt/23811660/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[vpp-dev] tls init server is too heavy

2018-07-25 Thread Yu, Ping
Hello, Florin

In current TLS openssl implementation, in each accepted TLS session, 
openssl_ctx_init_server needs to re-init ssl_ctx, and set key and certificate, 
which actually is not necessary, and normally one-time initialization is good 
enough. After I change this initialization to run only once, I can get around 
20~30% performance improvement for CPS.
I am now considering to re-architect this initialization, and one possible 
point is to move this to tls_start_listen. A generic tls_ssl_ctx_init can be 
the interface, then it will call engine specific, such as openssl ssl_ctx 
initialization afterward. How do you think?

Thanks
Ping




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9932): https://lists.fd.io/g/vpp-dev/message/9932
Mute This Topic: https://lists.fd.io/mt/23814247/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: [vpp-dev] vcl error

2018-07-25 Thread xiaodong.zhang
It seems there is a bug in this function call


src/vcl/vppcom.c  line 633


int
vppcom_session_bind (uint32_t session_index, vppcom_endpt_t * ep)
{
//xxx
  session->transport.lcl_ip = to_ip46 (ep->is_ip4 ? IP46_TYPE_IP4 :
   IP46_TYPE_IP6, ep->ip);
//shall be changed to
session->transport.lcl_ip = to_ip46 (!ep->is_ip4, ep->ip);


// to_ip46 first parameter is isipv6, and IP46_TYPE_IP4, IP6 would be always 
true, and the bind will copy a wrong IP for v4 case(over stack) 

}


BR//Terry

 
-- Original --
From:  "Florin Coras";
Date:  Tue, Jul 24, 2018 11:50 PM
To:  "xiaodong.zhang"; 
Cc:  "vpp-dev"; 
Subject:  Re: [vpp-dev] vcl error

 
Hi Terry, 

From the errors you’re seeing, I can only guess you have configured vcl to 
attach to the host stack using a local scope. Do you have vcl.conf configured 
with “app-scope-local” or have you exported VCL_APP_SCOPE_LOCAL environment 
variable? If yes, try disabling them. If neither global nor local scope is 
requested, the stack defaults to global scope. 

Secondly, at this time, vcl does not handle well multiple application workers. 
This is something we’re working on but in the mean time, make sure that nginx 
uses only one worker. 

Regards, 
Florin

> On Jul 24, 2018, at 5:31 AM, xiaodong.zhang  
> wrote:
> 
> [root@localhost vpp] nginx
> vl_api_bind_sock_reply_t_handler:335: VCL<3312>: ERROR: vpp handle 0x0, sid 
> 0: bind failed: Invalid value #2 (-8)
> nginx: [emerg] listen() to 0.0.0.0:19090, backlog 511 failed (111: Connection 
> refused)
> 
> messages:
> Jul 24 05:30:30 localhost vnet[28515]: vnet_bind: bind failed
> 
> I got above error when starting nginx using the VCL with LD_PRELOAD.
> 
> The sock_test_server is working fine. 
> 
> And I tried a very simple TCP socket server code, which binding to 
> 0.0.0.0:port, but it failed with "bind failed: Invalid value #2 (-8)"too when 
> calling the listen(). 
> 
> Any idea?
> 
> Thanks.
> 
> BR//Terry
> 
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> 
> View/Reply Online (#9918): https://lists.fd.io/g/vpp-dev/message/9918
> Mute This Topic: https://lists.fd.io/mt/23802581/675152
> Group Owner: vpp-dev+ow...@lists.fd.io
> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [fcoras.li...@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9931): https://lists.fd.io/g/vpp-dev/message/9931
Mute This Topic: https://lists.fd.io/mt/23802581/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: [vpp-dev] [vpp] VXLAN arp response packet is dropped

2018-07-25 Thread 井上里美

Hi neale-san,

I'm sorry for the delay in replying your e-mail.
We analyzed, it was found that NIC driver doesn't support.
So, We will try the other NIC.

Thank you for your support in your busy time.

Thanks
Satomi

On 2018/07/18 19:48, Neale Ranns (nranns) wrote:

Hi Satomi,

That’s a big trace. Can you point to an example of a packet drop that is 
causing you problems.

Thanks
neale



-Original Message-
From: 井上里美 
Date: Wednesday, 18 July 2018 at 10:58
To: "Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" 

Cc: "Norimasa Asai (noasai)" , エッジ仮想化hcoML , 
小柳達也様 , N転P_西岡孟朗様 
Subject: [WARNING :  MESSAGE ENCRYPTED] Re: [vpp] VXLAN arp response packet is 
dropped

 Hi, neale san,
 
 Thank you for your reply.

 Sure!
 
 Satomi
 
 On 2018/07/18 17:27, Neale Ranns (nranns) wrote:

 > Can I see the packet trace?
 >
 > /neale
 >
 > -Original Message-
 > From: 井上里美 
 > Date: Wednesday, 18 July 2018 at 09:54
 > To: "Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" 

 > Cc: "Norimasa Asai (noasai)" , エッジ仮想化hcoML 
, 小柳達也様 , N転P_西岡孟朗様 

 > Subject: [vpp] VXLAN arp response packet is dropped
 >
 >  Hi neale san,
 >
 >  Thank you for your reply.
 >  We used a vpp packet trace.
 >  show trace is no error but on the caputure device,ARP request 
packet is
 >  droped.
 >  It happend the same event even L2.
 >
 >  Could you give me some advice?
 >
 >  【Architecture】
 >    __
 >  |    |→caputure device→IXIA(port 2)
 >  |VPP|
 >  |   |←IXIA(port 1)
 >  |__|
 >
 >  On 2018/07/06 21:39, Neale Ranns (nranns) wrote:
 >  > Hi Satomi
 >  >
 >  > Debugging packet loss is much easier with a VPP packet trace…
 >  >
 >  > Regards,
 >  > neale
 >  >
 >  > -Original Message-
 >  > From:  on behalf of 井上里美 

 >  > Date: Friday, 6 July 2018 at 12:38
 >  > To: "vpp-dev@lists.fd.io" 
 >  > Cc: "Norimasa Asai (noasai)" , エッジ仮想化hcoML 
, 小柳達也様 , N転P_西岡孟朗様 

 >  > Subject: [vpp-dev] [pw] [vpp] VXLAN arp response packet is dropped
 >  >
 >  >  The password is here.
 >  >  1j^?iKvC]C;%
 >  >
 >  >  On 2018/07/06 19:37, 井上里美 wrote:
 >  >  > Hi VPP Team,
 >  >  >
 >  >  > I'm Satomi Inoue and I belong to NTT laboratories.
 >  >  > Could you tell me why ARP response packet is dropped?
 >  >  >
 >  >  > We set up vxlan while looking at
 >  >  > ”Using_VPP_as_a_VXLAN_Tunnel_Terminator”manual.
 >  >  > The procedure is as follows.
 >  >  >
 >  >  > [The result]
 >  >  > ・ARP request packet : IXIA(port2)→VPP→IXIA(port1):OK
 >  >  > ・ARP response packet : IXIA(port1)→VPP→IXIA(port2):NG
 >  >  >  →We checked it by trace command. Loopback interface in 
VPP drop the
 >  >  > ARP response packet.
 >  >  >
 >  >  > [set up vxlan]
 >  >  > 1. Create sub-interface
 >  >  > vpp# create sub-interfaces 
VirtualFunctionEthernet0/9/0 1
 >  >  > vpp# set interface state 
VirtualFunctionEthernet0/9/0.1 up
 >  >  >
 >  >  > 2. Create bridge-domain
 >  >  > create bridge-domain 10001 learn 1 forward 1 uu-flood 
1 arp-term 0
 >  >  >
 >  >  > 3. Create Loopback interface
 >  >  > vpp# loopback create mac 1a:2b:3c:4d:5e:6f
 >  >  > vpp# set interface state loop0 up
 >  >  > vpp# set interface ip address loop0 1.1.1.1/32
 >  >  > vpp# set interface ip table loop0 7
 >  >  >
 >  >  > 4. Apply loopback interface to bride-domain
 >  >  > vpp# set interface l2 bridge loop0 10001 bvi
 >  >  >
 >  >  > 5.Apply sub-interface to bride-domain
 >  >  > vpp# set interface l2 bridge 
VirtualFunctionEthernet0/9/0.1 10001 0
 >  >  >
 >  >  > 6.Create VXLAN tunnel
 >  >  > vpp# create vxlan tunnel src 1.1.1.1 dst 20.10.0.1 vni 
10001
 >  >  > encap-vrf-id 7 decap-next l2
 >  >  > vpp# set interface l2 bridge vxlan_tunnel0 10001 1
 >  >  >
 >  >  > Regards,
 >  >  > Satomi
 >  >
 >  >  --
 >  >
 >  >
 >  >
 >  >
 >  >
 >
 >  --
 >  -
 >
 >  井上里美(Satomi Inoue)
 >  〒180-8585 東京都武蔵野市緑町3-9-11
 >  PHONE:0422-59-4151
 >  E-MAIL:inoue.sat...@lab.ntt.co.jp
 >
 >
 >
 >
 
 --

 

[vpp-dev] Regarding /var/run/.rte_config

2018-07-25 Thread Prashant Upadhyaya
Hi,

I am running VPP with DPDK plugin.
I see that when I normally run other non VPP DPDK applications, they
create a file called /var/run/.rte_config
But VPP running as a DPDK application (and calling rte_eal_init) does
not create this file.

There are consequences of the above in certain usecases where
secondary processes try to look at this file.

Can somebody advise why this file is not created when VPP is run with
DPDK plugin. Or what needs to be done so that it does get created, or
perhaps it is getting created somewhere that I am not aware of. I am
running VPP as root.

Regards
-Prashant
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9929): https://lists.fd.io/g/vpp-dev/message/9929
Mute This Topic: https://lists.fd.io/mt/23811660/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[vpp-dev] tcp connection

2018-07-25 Thread Vladislav Romanov
please tell me how to update the value of the tcp-flags in each new
packets? For example, to make a tcp-session break.
-- 
с уважением, Владислав
/*
 * Copyright (c) 2015 Cisco and/or its affiliates.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at:
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
#include 
#include 
#include 
#include 
#include 
#include 
#include 
#include 
//#include 

u8 count =0;
//
typedef struct {
  u32 next_index;
  u32 sw_if_index;
  u8 new_src_mac[6];
  u8 new_dst_mac[6];
} sample_trace_t;

static u8 *
format_mac_address (u8 * s, va_list * args)
{
  u8 *a = va_arg (*args, u8 *);
  return format (s, "%02x:%02x:%02x:%02x:%02x:%02x",
 a[0], a[1], a[2], a[3], a[4], a[5]);
}

/* packet trace format function */
static u8 * format_sample_trace (u8 * s, va_list * args)
{
 
  CLIB_UNUSED (vlib_main_t * vm) = va_arg (*args, vlib_main_t *);
  CLIB_UNUSED (vlib_node_t * node) = va_arg (*args, vlib_node_t *);
  sample_trace_t * t = va_arg (*args, sample_trace_t *);

  clib_warning("SAMPLE TRACe: dst =%u | src=%u | sw_if_index = %u\n", 
t->new_dst_mac , t->new_src_mac, t->sw_if_index);
  
  s = format (s, "SAMPLE TRACe: sw_if_index %d, next index %d\n",
  t->sw_if_index, t->next_index);
  s = format (s, "  new src %U -> new dst %U",
  format_mac_address, t->new_src_mac, 
  format_mac_address, t->new_dst_mac);
   return s;
}

vlib_node_registration_t sample_node;

#define foreach_sample_error \
_(SWAPPED, "Mac swap packets processed")

typedef enum {
#define _(sym,str) SAMPLE_ERROR_##sym,
  foreach_sample_error
#undef _
  SAMPLE_N_ERROR,
} sample_error_t;

static char * sample_error_strings[] = {
#define _(sym,string) string,
  foreach_sample_error
#undef _
};

typedef enum {
  SAMPLE_NEXT_INTERFACE_OUTPUT,
  SAMPLE_N_NEXT,
} sample_next_t;

#define foreach_mac_address_offset  \
_(0)\
_(1)\
_(2)\
_(3)\
_(4)\
_(5)

static uword
sample_node_fn (vlib_main_t * vm,  vlib_node_runtime_t * node, vlib_frame_t * 
frame)
{
  u32 n_left_from, * from, * to_next;
  sample_next_t next_index;
  u32 pkts_swapped = 0;
  from = vlib_frame_vector_args (frame);
  n_left_from = frame->n_vectors;
   next_index = node->cached_next_index;

  while (n_left_from > 0)
{
  u32 n_left_to_next;
  vlib_get_next_frame (vm, node, next_index,  to_next, n_left_to_next);
   
  while (n_left_from > 0 && n_left_to_next > 0)
{
  u32 bi0;
  vlib_buffer_t * b0;
  u32 next0 = SAMPLE_NEXT_INTERFACE_OUTPUT; // u32 next0 = 
SAMPLE_N_NEXT;
  u32 sw_if_index0;
  u8 tmp0[6];
  ethernet_header_t *en0;
  ip4_header_t * ip40;
  ip4_address_t * dst_addr_ip40;
   tcp_header_t *tcp_0; //__attribute__((unused)) 
tcp_header_t * tcp_0; //tcp_header_t *tcp_0;
   u32 *ip_src = 0 , ip_dst = 0;

  /* speculatively enqueue b0 to the current next frame */
  bi0 = from[0];
  to_next[0] = bi0;
  from += 1;
  to_next += 1;
  n_left_from -= 1;
  n_left_to_next -= 1;

  //Get the reference to the buffer
  b0 = vlib_get_buffer (vm, bi0);
  // add 2507 >>>
sw_if_index0 = vnet_buffer(b0)->sw_if_index[VLIB_RX];
// <<<
  /* 
   * Direct from the driver, we should be at offset 0
   * aka at >data[0]
   */
  ASSERT (b0->current_data == 0);

   //2 var
   en0 = vlib_buffer_get_current (b0);
   ip40 = (ip4_header_t *)( en0 + 1) ;
   tcp_0 =ip4_next_header(ip40);
   vlib_buffer_add_data(vm ,)
   if(ip40->protocol  == 6) clib_warning("protocol   TCP \n" );  
if(ip40->protocol  == 17) clib_warning("protocol   UDP \n" );
   struct in_addraddr;
   addr.s_addr = htonl(ip40->src_address.as_u32);
   ip_src = inet_ntoa(addr);
//   addr.s_addr = htonl(ip40->dst_address.as_u32);
//   ip_dst = inet_ntoa(addr);
   clib_warning("NODE ADDRESS: ip src = %s | dst = %s\n" , ip_src,ip_dst);
   
  /* This is where you do whatever you'd like to with your packet */
/* ... */
clib_warning("NODE: BEFORE: tcp_0->flags = 0x%x\n" , tcp_0->flags);
 // for (int i=0; i<6;i++)  clib_warning("en0->src_address%d] = %u\n", 
i 

Re: [vpp-dev] Parallel test execution in VPP Test Framework

2018-07-25 Thread Maciek Konstantynowicz (mkonstan) via Lists.Fd.Io


On 19 Jul 2018, at 15:44, Juraj Linkeš 
mailto:juraj.lin...@pantheon.tech>> wrote:

Hi VPP devs,

I'm implementing parallel test execution of tests in VPP Test Framework (the 
patch is here https://gerrit.fd.io/r/#/c/13491/) and the last big outstanding 
question is how scalable the parallelization actually is.

That’s a good question. What do the tests say? :)

The tests are spawning one VPP instance per each VPPTestCase class

How many VPP instances are spawned and run in parallel? Cause assuming
there is at least one VPPTestCase class per test_, that’s 70 VPP
instances ..


and the question is - how do the required compute resources per each VPP 
instance (cpu, ram, shm) scale and how much resources do we need with 
increasing number of VPP instances running in parallel (in the context of VPP 
Test Framework tests)?

I guess this will vary between tests too. FIB scale tests will require
more fib heap memory. What do the tests say? :)

-Maciek


The second question would be a generic "is there anything else I need to be 
aware of when trying to run VPPs in parallel?".

Thanks,
Juraj
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9886): https://lists.fd.io/g/vpp-dev/message/9886
Mute This Topic: https://lists.fd.io/mt/23744978/675185
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  
[mkons...@cisco.com]
-=-=-=-=-=-=-=-=-=-=-=-

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9927): https://lists.fd.io/g/vpp-dev/message/9927
Mute This Topic: https://lists.fd.io/mt/23744978/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[vpp-dev] #vpp

2018-07-25 Thread Vladislav Romanov
please tell me how to update the value of the tcp-flags in each new packets 
that is sent to the output node? For example, to make a tcp-session break in a 
plugin
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9926): https://lists.fd.io/g/vpp-dev/message/9926
Mute This Topic: https://lists.fd.io/mt/23811438/21656
Mute #vpp: https://lists.fd.io/mk?hashtag=vpp=1480452
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: [vpp-dev] VPP_STABLE_1710 Crash during IP Address Addition #vnet

2018-07-25 Thread Neale Ranns via Lists.Fd.Io

Hi Jitendra,

Addresses in overlapping subnets is not supported by VPP. The configuration you 
give below is not valid.

/neale

From:  on behalf of "sainijite...@gmail.com" 

Date: Tuesday, 24 July 2018 at 07:57
To: "vpp-dev@lists.fd.io" 
Subject: Re: [vpp-dev] VPP_STABLE_1710 Crash during IP Address Addition #vnet

Hi Neale,

Thank you for the reply. I tried this patch but it blocks valid configuration 
as well.
For example -
set interface ip address EthernetSwitch2/0/0 10.10.10.33/24  <--- valid 
address
create sub EthernetSwitch2/0/0 8
set interface ip address EthernetSwitch2/0/0.8 10.10.10.66/24   <--- valid 
address but not allowed since in same subnet

Also, when i compare file "ip4_forward.c" from this patch against one in 
release 1804, the changes from this patch are not found in 1804.
release 1804 does not block overlapping subnets and crash is fixed as well. 
Unable to pin down the exact changes that went in for this.

Thanks
Jitendra



-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9925): https://lists.fd.io/g/vpp-dev/message/9925
Mute This Topic: https://lists.fd.io/mt/23791651/21656
Mute #vnet: https://lists.fd.io/mk?hashtag=vnet=1480452
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: [vpp-dev] vcl error

2018-07-25 Thread Florin Coras
Yup, I’m aware. Unfortunately that, and others have been introduced recently. I 
do have a much larger patch that fixes them but it’s a couple of days out. 

Note that vcl as a whole is undergoing an extensive refactor because it has run 
out of sync with the rest of the host stack both in terms of functionality and 
performance. Until I finish that, probably it’s safer to stay away from vcl. 

Regards,
Florin

> On Jul 24, 2018, at 10:42 PM, xiaodong.zhang  
> wrote:
> 
> It seems there is a bug in this function call
> 
> src/vcl/vppcom.c  line 633
> 
> int
> vppcom_session_bind (uint32_t session_index, vppcom_endpt_t * ep)
> {
> //xxx
>   session->transport.lcl_ip = to_ip46 (ep->is_ip4 ? IP46_TYPE_IP4 :
>IP46_TYPE_IP6, ep->ip);
> //shall be changed to
> session->transport.lcl_ip = to_ip46 (!ep->is_ip4, ep->ip);
> 
> // to_ip46 first parameter is isipv6, and IP46_TYPE_IP4, IP6 would be always 
> true, and the bind will copy a wrong IP for v4 case(over stack) 
> }
> 
> BR//Terry
>  
> -- Original --
> From:  "Florin Coras";
> Date:  Tue, Jul 24, 2018 11:50 PM
> To:  "xiaodong.zhang";
> Cc:  "vpp-dev";
> Subject:  Re: [vpp-dev] vcl error
>  
> Hi Terry, 
> 
> From the errors you’re seeing, I can only guess you have configured vcl to 
> attach to the host stack using a local scope. Do you have vcl.conf configured 
> with “app-scope-local” or have you exported VCL_APP_SCOPE_LOCAL environment 
> variable? If yes, try disabling them. If neither global nor local scope is 
> requested, the stack defaults to global scope. 
> 
> Secondly, at this time, vcl does not handle well multiple application 
> workers. This is something we’re working on but in the mean time, make sure 
> that nginx uses only one worker. 
> 
> Regards, 
> Florin
> 
> > On Jul 24, 2018, at 5:31 AM, xiaodong.zhang  
> > wrote:
> > 
> > [root@localhost vpp] nginx
> > vl_api_bind_sock_reply_t_handler:335: VCL<3312>: ERROR: vpp handle 0x0, sid 
> > 0: bind failed: Invalid value #2 (-8)
> > nginx: [emerg] listen() to 0.0.0.0:19090, backlog 511 failed (111: 
> > Connection refused)
> > 
> > messages:
> > Jul 24 05:30:30 localhost vnet[28515]: vnet_bind: bind failed
> > 
> > I got above error when starting nginx using the VCL with LD_PRELOAD.
> > 
> > The sock_test_server is working fine. 
> > 
> > And I tried a very simple TCP socket server code, which binding to 
> > 0.0.0.0:port, but it failed with "bind failed: Invalid value #2 (-8)"too 
> > when calling the listen(). 
> > 
> > Any idea?
> > 
> > Thanks.
> > 
> > BR//Terry
> > 
> > -=-=-=-=-=-=-=-=-=-=-=-
> > Links: You receive all messages sent to this group.
> > 
> > View/Reply Online (#9918): https://lists.fd.io/g/vpp-dev/message/9918
> > Mute This Topic: https://lists.fd.io/mt/23802581/675152
> > Group Owner: vpp-dev+ow...@lists.fd.io
> > Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [fcoras.li...@gmail.com]
> > -=-=-=-=-=-=-=-=-=-=-=-
> 

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9924): https://lists.fd.io/g/vpp-dev/message/9924
Mute This Topic: https://lists.fd.io/mt/23802581/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-