Re: [vpp-dev] How to measure performance of memif

2019-08-23 Thread William Tu
Hi Damjan,

So vpp2 is basically the container APP doing the l2fwd. Will give it a try.

Thanks
William

On Fri, Aug 23, 2019 at 8:41 AM Damjan Marion  wrote:
>
>
> I typically used 2 vpp instances, one doing xconnect between physical NIC and 
> memif interface, another VPP instance routing between 2 memif interfaces.
>
> i.e.
>
> trex-port1 — (p)vpp1(m) — (m)vpp2(m) — (m)vpp1(p) — trex-port2
>
> Where (p) is physical nic interface, and (m) is memif interface.
>
> On the VPP2 i typically use ip4 routing but you can simply move those 
> interface to l2 mode and do xconnect or even better “l2 patch”.
>
>
> > On 23 Aug 2019, at 16:52, William Tu  wrote:
> >
> > Hi,
> >
> > I'm looking for something like l2fwd application using memif interfaces.
> > So at a container, simply receive packets from one memif port, and forward
> > to another memif port.
> >
> > I'm trying to measure the performance in slide
> > Memif Performance – L2
> > https://events.linuxfoundation.org/wp-content/uploads/2017/12/Accelerate-the-Development-of-Cloud-native-VNFs-Giles-Heron-Maciek-Konstantynowicz-Cisco.pdf
> > Using the NF App in Cont1.
> >
> > Thank you
> > William
> > -=-=-=-=-=-=-=-=-=-=-=-
> > Links: You receive all messages sent to this group.
> >
> > View/Reply Online (#13834): https://lists.fd.io/g/vpp-dev/message/13834
> > Mute This Topic: https://lists.fd.io/mt/33002049/675642
> > Group Owner: vpp-dev+ow...@lists.fd.io
> > Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [dmar...@me.com]
> > -=-=-=-=-=-=-=-=-=-=-=-
>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13836): https://lists.fd.io/g/vpp-dev/message/13836
Mute This Topic: https://lists.fd.io/mt/33002049/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: [vpp-dev] How to measure performance of memif

2019-08-23 Thread Damjan Marion via Lists.Fd.Io

I typically used 2 vpp instances, one doing xconnect between physical NIC and 
memif interface, another VPP instance routing between 2 memif interfaces.

i.e.

trex-port1 — (p)vpp1(m) — (m)vpp2(m) — (m)vpp1(p) — trex-port2

Where (p) is physical nic interface, and (m) is memif interface.

On the VPP2 i typically use ip4 routing but you can simply move those interface 
to l2 mode and do xconnect or even better “l2 patch”.


> On 23 Aug 2019, at 16:52, William Tu  wrote:
> 
> Hi,
> 
> I'm looking for something like l2fwd application using memif interfaces.
> So at a container, simply receive packets from one memif port, and forward
> to another memif port.
> 
> I'm trying to measure the performance in slide
> Memif Performance – L2
> https://events.linuxfoundation.org/wp-content/uploads/2017/12/Accelerate-the-Development-of-Cloud-native-VNFs-Giles-Heron-Maciek-Konstantynowicz-Cisco.pdf
> Using the NF App in Cont1.
> 
> Thank you
> William
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> 
> View/Reply Online (#13834): https://lists.fd.io/g/vpp-dev/message/13834
> Mute This Topic: https://lists.fd.io/mt/33002049/675642
> Group Owner: vpp-dev+ow...@lists.fd.io
> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [dmar...@me.com]
> -=-=-=-=-=-=-=-=-=-=-=-

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13835): https://lists.fd.io/g/vpp-dev/message/13835
Mute This Topic: https://lists.fd.io/mt/33002049/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[vpp-dev] How to measure performance of memif

2019-08-23 Thread William Tu
Hi,

I'm looking for something like l2fwd application using memif interfaces.
So at a container, simply receive packets from one memif port, and forward
to another memif port.

I'm trying to measure the performance in slide
Memif Performance – L2
https://events.linuxfoundation.org/wp-content/uploads/2017/12/Accelerate-the-Development-of-Cloud-native-VNFs-Giles-Heron-Maciek-Konstantynowicz-Cisco.pdf
Using the NF App in Cont1.

Thank you
William
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13834): https://lists.fd.io/g/vpp-dev/message/13834
Mute This Topic: https://lists.fd.io/mt/33002049/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: [vpp-dev] Crash when using dns_name_server

2019-08-23 Thread Dave Barach via Lists.Fd.Io
Please try master/latest: https://gerrit.fd.io/r/c/vpp/+/21468 fixed a source 
of trivial spin-lock bugs.

HTH... Dave

From: Dave Barach (dbarach)
Sent: Thursday, August 22, 2019 12:11 PM
To: Carlito Nueno 
Cc: vpp-dev@lists.fd.io
Subject: RE: [vpp-dev] Crash when using dns_name_server

NP, sorry for the issues, code simply not tested multi-core.

BTW we just merged a refactor patch which converts the dns resolver into a 
plugin. Later this afternoon, I’ll do some multi-core testing. It may take a 
bit of work to repro and fix the problem you’ve reported.

Dave

From: Carlito Nueno mailto:carlitonu...@gmail.com>>
Sent: Thursday, August 22, 2019 10:55 AM
To: Dave Barach (dbarach) mailto:dbar...@cisco.com>>
Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] Crash when using dns_name_server

Thanks Dave! Let me know if you need me do more tests or gather more info.

On Thu, Aug 22, 2019 at 4:48 AM Dave Barach (dbarach) 
mailto:dbar...@cisco.com>> wrote:
Ack. The DNS server has had zero multi-core testing, aside from what you’ve 
done. I’ll look at it when I can.

From: Carlito Nueno mailto:carlitonu...@gmail.com>>
Sent: Wednesday, August 21, 2019 10:03 PM
To: Dave Barach (dbarach) mailto:dbar...@cisco.com>>
Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] Crash when using dns_name_server

Hi Dave,

Sorry about the late reply.

I used below configs to eliminate most of the complexity. I did not see 
binary-api being truncated.

Steps:
1. I used basic vpp.conf (see below) without the dns_name_server commands
2. gdb run -c /etc/vpp/startup.conf (see below)
3. sudo vppctl
4. Entered dns_name_server commands manually
5. ping google.com
6. vpp crash

Outputs collected: gbd run, gdb backtrace, syslog

Step 4: DNS cache output

vpp# nat44 add identity mapping external TenGigabitEthernet8/0/0 udp 53053
vpp# bin dns_name_server_add_del 8.8.8.8
vpp# bin dns_enable_disable
vpp# sh dns cache verbose
DNS cache contains 15 entries
bserver-1.kbfs.keybaseapi.com -> 
bserver-1.kbfs.keybaseapi.com: 
34.235.251.175 [59] 52.54.47.119 [59]   TTL left 593.7
mdserver-0.kbfs.keybaseapi.com -> 
mdserver-0.kbfs.keybaseapi.com: 
34.225.12.137 [45] 34.197.228.196 [45]   TTL left 593.7
vortex.data.microsoft.com -> 
vortex.data.microsoft.com: 64.4.54.254 [263]  
 TTL left 593.9
api.keybase.io -> 
api.keybase.io: 35.153.89.209 [34] 52.4.215.1 [34]   TTL 
left 594.0
push.apple.com -> 
push.apple.com:   TTL left 594.4
api.dropboxapi.com -> 
api.dropboxapi.com: 162.125.7.7 [59]   TTL left 595.0
people-pa.clients6.google.com -> 
people-pa.clients6.google.com: 
172.217.6.42 [240]   TTL left 595.0
bolt.dropbox.com -> 
bolt.dropbox.com: 162.125.34.129 [59]   TTL left 595.1
www.google.com -> 
www.google.com: 172.217.0.36 [263]   TTL left 595.1
play.google.com -> 
play.google.com: 172.217.5.110 [27]   TTL left 595.4
mail.google.com -> 
mail.google.com: 172.217.6.37 [299]   TTL left 595.5
gateway-carry.icloud.com -> 
gateway-carry.icloud.com: 17.248.128.151 [59] 
17.248.128.168 [59] 17.248.128.169 [59] 17.248.128.171 [59] 17.248.128.178 [59] 
17.248.128.232 [59] 17.248.128.172 [59] 17.248.128.142 [59]   TTL left 595.5
push.services.mozilla.com -> 
push.services.mozilla.com: 35.164.35.9 [56]   
TTL left 599.5
0.client-channel.google.com -> 
0.client-channel.google.com: 74.125.28.189 
[239]   TTL left 599.6
airtable.com -> airtable.com: 
3.221.153.172 [35] 34.193.210.213 [35] 52.22.150.146 [35]   TTL left 599.6


Step 2: gdb run

(gdb) run -c /etc/vpp/startup.conf
Starting program: /usr/bin/vpp -c /etc/vpp/startup.conf
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
vlib_plugin_early_init:361: plugin path 
/usr/lib/x86_64-linux-gnu/vpp_plugins:/usr/lib/vpp_plugins
load_one_plugin:189: Loaded plugin: abf_plugin.so (Access Control List (ACL) 
Based Forwarding)
load_one_plugin:189: Loaded plugin: acl_plugin.so (Access Control Lists (ACL))
load_one_plugin:189: Loaded plugin: avf_plugin.so 

Re: [vpp-dev] VPP 19.08 release is available!

2019-08-23 Thread Ni, Hongjun

Congratulations to all guys involved!


-Original Message-
From: vpp-dev@lists.fd.io [mailto:vpp-dev@lists.fd.io] On Behalf Of Andrew 
Yourtchenko
Sent: Wednesday, August 21, 2019 1:58 PM
To: vpp-dev ; csit-dev 
Subject: [vpp-dev] VPP 19.08 release is available!

Hi all,

the VPP release 19.08 artifacts are available on packagecloud release 
repositories.

I have tested the installation on ubuntu and centos.

Many thanks to everyone involved into making it happen!

Special thanks to Vanessa Valderrama for the help today.

--a


p.s. stable/1908 branch is re-opened for the fixes slated for .1
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13832): https://lists.fd.io/g/vpp-dev/message/13832
Mute This Topic: https://lists.fd.io/mt/32983052/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[vpp-dev] Add ip route without next-hop-address

2019-08-23 Thread shi dave
Hi Neale,

that's my desired flow, the actual flow is

00:04:08:057376: dpdk-input
  GigabitEthernet0/b/0 rx queue 0
  buffer 0xcc2f: current data 0, length 98, free-list 0, clone-count 0, 
totlen-nifb 0, trace 0x3
 ext-hdr-valid
 l4-cksum-computed l4-cksum-correct
  PKT MBUF: port 1, nb_segs 1, pkt_len 98
buf_len 2176, data_len 98, ol_flags 0x0, data_off 128, phys_addr 0x55330c40
packet_type 0x0 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0
rss 0x0 fdir.hi 0x0 fdir.lo 0x0
  IP4: 52:54:00:ce:64:f0 -> 52:54:00:e7:2a:c5
  ICMP: 173.10.10.10 -> 173.2.0.1
tos 0x00, ttl 64, length 84, checksum 0x5683
fragment id 0xc00e
  ICMP echo_reply checksum 0x15c2
00:04:08:057383: ethernet-input
  frame: flags 0x1, hw-if-index 2, sw-if-index 2
  IP4: 52:54:00:ce:64:f0 -> 52:54:00:e7:2a:c5
00:04:08:057386: ip4-input
  ICMP: 173.10.10.10 -> 173.2.0.1
tos 0x00, ttl 64, length 84, checksum 0x5683
fragment id 0xc00e
  ICMP echo_reply checksum 0x15c2
00:04:08:057397: ip4-lookup
  fib 0 dpo-idx 0 flow hash: 0x
  ICMP: 173.10.10.10 -> 173.2.0.1
tos 0x00, ttl 64, length 84, checksum 0x5683
fragment id 0xc00e
  ICMP echo_reply checksum 0x15c2
00:04:08:057416: ip4-glean
ICMP: 173.10.10.10 -> 173.2.0.1
  tos 0x00, ttl 64, length 84, checksum 0x5683
  fragment id 0xc00e
ICMP echo_reply checksum 0x15c2
00:04:08:057645: GigabitEthernet0/a/0-output
  GigabitEthernet0/a/0
  ARP: 52:54:00:90:bc:7e -> ff:ff:ff:ff:ff:ff
00:04:08:057651: error-drop
  ip4-glean: ARP requests sent


from the trace, it need the mac of 173.2.0.1, then the packet could be routed 
to GigabitEthernet0/a/0. I don't want this ARP request, the 173.2.0.1 is a 
inner ip, VPP may could not get that ARP response.



Best Rregards

Dave


发件人: Neale Ranns (nranns) 
发送时间: 2019年8月23日 15:18
收件人: shi dave ; vpp-dev@lists.fd.io 
主题: Re: 回复: 回复: 回复: [vpp-dev] Add ip route without next-hop-address




Hi Dave,



That flow would suggest the packet was correctly sent out of GigEth0/a/0 with 
the destination MAC of 172.16.3.1. was that not the case? Or was that your 
desired flow not the actual?



/neale



De : shi dave 
Date : vendredi 23 août 2019 à 09:11
À : "Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" 

Objet : 回复: 回复: 回复: [vpp-dev] Add ip route without next-hop-address





Hi Neale,


sorry, clerical error, the flow is

dpdk-input
ip4-input (GigabitEthernet0/b/0)
ip4-lookup
ip4-rewrite (GigabitEthernet0/a/0)
ipsec-output-ip4
dpdk-esp-encrypt
dpdk-crypto-input
ip4-lookup (dst 172.16.3.1)
ip4-rewrite (GigabitEthernet0/a/0)
ipsec-output-ip4 (by pass)



Best Rregards

Dave



发件人: vpp-dev@lists.fd.io  代表 shi dave 

发送时间: 2019年8月23日 15:03
收件人: Neale Ranns (nranns) ; vpp-dev@lists.fd.io 

主题: 回复: 回复: [vpp-dev] Add ip route without next-hop-address



Hi Neale,



When routing to GigabitEthernet0/a/0, it could run into ipsec-output-ip4, then 
the packet will be added a ipsec tunnel ip (src 172.16.3.15, dst 172.16.3.1), 
so the destination MAC is the mac of 172.16.3.1

the flow is like:

dpdk-input
ip4-input (GigabitEthernet0/b/0)
ip4-lookup
ip4-rewrite (GigabitEthernet0/b/0)
ipsec-output-ip4
dpdk-esp-encrypt
dpdk-crypto-input
ip4-lookup (dst 172.16.3.1)
ip4-rewrite (GigabitEthernet0/b/0)
ipsec-output-ip4 (by pass)



Best Rregards

Dave



发件人: Neale Ranns (nranns) 
发送时间: 2019年8月23日 14:53
收件人: shi dave ; vpp-dev@lists.fd.io 
主题: Re: 回复: [vpp-dev] Add ip route without next-hop-address



Hi Dave,



When routing to GigabitEthernet0/a/0 what destination MAC address should the 
packet have?



/neale





De : shi dave 
Date : vendredi 23 août 2019 à 05:01
À : "Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" 

Objet : 回复: [vpp-dev] Add ip route without next-hop-address



Hi Neale,



yes, it's a correct behavior for VPP ARP for 173.2.0.1, but in my case, 
173.2.0.1 is a inner ip(src 173.10.10.10, dst 173.2.0.1), the outer ip is IPSEC 
tunnel ip(src 172.16.3.15, dst 172.16.3.1), so that's no sense to get the mac 
of 173.2.0.1.



so is there have any method to route the packet from GigabitEthernet0/b/0 to 
GigabitEthernet0/a/0, without send any ARP request?



Best Rregards

Dave



发件人: Neale Ranns (nranns) 
发送时间: 2019年8月22日 22:03
收件人: shi dave ; vpp-dev@lists.fd.io 
主题: Re: [vpp-dev] Add ip route without next-hop-address





Hi Dave,



but from the trace, it send a ARP request to ask 173.2.0.1 directly

ip4-lookup -> ip4-glean -> GigabitEthernet0/a/0-output -> ip4-glean: ARP 
requests sent

how could I avoid this ARP request, like ?
ip4-lookup -> ip4-rewrite (GigabitEthernet0/a/0) -> ipsec-output-ip4



VPP is ARPing for 173.2.0.1. What do you want it to do instead?



neale
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13831): https://lists.fd.io/g/vpp-dev/message/13831
Mute This Topic: 

Re: 回复: 回复: 回复: [vpp-dev] Add ip route without next-hop-address

2019-08-23 Thread Neale Ranns via Lists.Fd.Io

Hi Dave,

That flow would suggest the packet was correctly sent out of GigEth0/a/0 with 
the destination MAC of 172.16.3.1. was that not the case? Or was that your 
desired flow not the actual?

/neale

De : shi dave 
Date : vendredi 23 août 2019 à 09:11
À : "Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" 

Objet : 回复: 回复: 回复: [vpp-dev] Add ip route without next-hop-address


Hi Neale,

sorry, clerical error, the flow is

dpdk-input
ip4-input (GigabitEthernet0/b/0)
ip4-lookup
ip4-rewrite (GigabitEthernet0/a/0)
ipsec-output-ip4
dpdk-esp-encrypt
dpdk-crypto-input
ip4-lookup (dst 172.16.3.1)
ip4-rewrite (GigabitEthernet0/a/0)
ipsec-output-ip4 (by pass)


Best Rregards

Dave


发件人: vpp-dev@lists.fd.io  代表 shi dave 

发送时间: 2019年8月23日 15:03
收件人: Neale Ranns (nranns) ; vpp-dev@lists.fd.io 

主题: 回复: 回复: [vpp-dev] Add ip route without next-hop-address

Hi Neale,

When routing to GigabitEthernet0/a/0, it could run into ipsec-output-ip4, then 
the packet will be added a ipsec tunnel ip (src 172.16.3.15, dst 172.16.3.1), 
so the destination MAC is the mac of 172.16.3.1

the flow is like:
dpdk-input
ip4-input (GigabitEthernet0/b/0)
ip4-lookup
ip4-rewrite (GigabitEthernet0/b/0)
ipsec-output-ip4
dpdk-esp-encrypt
dpdk-crypto-input
ip4-lookup (dst 172.16.3.1)
ip4-rewrite (GigabitEthernet0/b/0)
ipsec-output-ip4 (by pass)


Best Rregards

Dave


发件人: Neale Ranns (nranns) 
发送时间: 2019年8月23日 14:53
收件人: shi dave ; vpp-dev@lists.fd.io 
主题: Re: 回复: [vpp-dev] Add ip route without next-hop-address


Hi Dave,



When routing to GigabitEthernet0/a/0 what destination MAC address should the 
packet have?



/neale





De : shi dave 
Date : vendredi 23 août 2019 à 05:01
À : "Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" 

Objet : 回复: [vpp-dev] Add ip route without next-hop-address



Hi Neale,



yes, it's a correct behavior for VPP ARP for 173.2.0.1, but in my case, 
173.2.0.1 is a inner ip(src 173.10.10.10, dst 173.2.0.1), the outer ip is IPSEC 
tunnel ip(src 172.16.3.15, dst 172.16.3.1), so that's no sense to get the mac 
of 173.2.0.1.



so is there have any method to route the packet from GigabitEthernet0/b/0 to 
GigabitEthernet0/a/0, without send any ARP request?



Best Rregards

Dave



发件人: Neale Ranns (nranns) 
发送时间: 2019年8月22日 22:03
收件人: shi dave ; vpp-dev@lists.fd.io 
主题: Re: [vpp-dev] Add ip route without next-hop-address





Hi Dave,



but from the trace, it send a ARP request to ask 173.2.0.1 directly

ip4-lookup -> ip4-glean -> GigabitEthernet0/a/0-output -> ip4-glean: ARP 
requests sent

how could I avoid this ARP request, like ?
ip4-lookup -> ip4-rewrite (GigabitEthernet0/a/0) -> ipsec-output-ip4



VPP is ARPing for 173.2.0.1. What do you want it to do instead?



neale
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13830): https://lists.fd.io/g/vpp-dev/message/13830
Mute This Topic: https://lists.fd.io/mt/32998559/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


回复: 回复: 回复: [vpp-dev] Add ip route without next-hop-address

2019-08-23 Thread shi dave

Hi Neale,


sorry, clerical error, the flow is

dpdk-input
ip4-input (GigabitEthernet0/b/0)
ip4-lookup
ip4-rewrite (GigabitEthernet0/a/0)
ipsec-output-ip4
dpdk-esp-encrypt
dpdk-crypto-input
ip4-lookup (dst 172.16.3.1)
ip4-rewrite (GigabitEthernet0/a/0)
ipsec-output-ip4 (by pass)


Best Rregards

Dave


发件人: vpp-dev@lists.fd.io  代表 shi dave 

发送时间: 2019年8月23日 15:03
收件人: Neale Ranns (nranns) ; vpp-dev@lists.fd.io 

主题: 回复: 回复: [vpp-dev] Add ip route without next-hop-address

Hi Neale,

When routing to GigabitEthernet0/a/0, it could run into ipsec-output-ip4, then 
the packet will be added a ipsec tunnel ip (src 172.16.3.15, dst 172.16.3.1), 
so the destination MAC is the mac of 172.16.3.1

the flow is like:

dpdk-input
ip4-input (GigabitEthernet0/b/0)
ip4-lookup
ip4-rewrite (GigabitEthernet0/b/0)
ipsec-output-ip4
dpdk-esp-encrypt
dpdk-crypto-input
ip4-lookup (dst 172.16.3.1)
ip4-rewrite (GigabitEthernet0/b/0)
ipsec-output-ip4 (by pass)


Best Rregards

Dave


发件人: Neale Ranns (nranns) 
发送时间: 2019年8月23日 14:53
收件人: shi dave ; vpp-dev@lists.fd.io 
主题: Re: 回复: [vpp-dev] Add ip route without next-hop-address


Hi Dave,



When routing to GigabitEthernet0/a/0 what destination MAC address should the 
packet have?



/neale





De : shi dave 
Date : vendredi 23 août 2019 à 05:01
À : "Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" 

Objet : 回复: [vpp-dev] Add ip route without next-hop-address



Hi Neale,



yes, it's a correct behavior for VPP ARP for 173.2.0.1, but in my case, 
173.2.0.1 is a inner ip(src 173.10.10.10, dst 173.2.0.1), the outer ip is IPSEC 
tunnel ip(src 172.16.3.15, dst 172.16.3.1), so that's no sense to get the mac 
of 173.2.0.1.



so is there have any method to route the packet from GigabitEthernet0/b/0 to 
GigabitEthernet0/a/0, without send any ARP request?



Best Rregards

Dave



发件人: Neale Ranns (nranns) 
发送时间: 2019年8月22日 22:03
收件人: shi dave ; vpp-dev@lists.fd.io 
主题: Re: [vpp-dev] Add ip route without next-hop-address





Hi Dave,



but from the trace, it send a ARP request to ask 173.2.0.1 directly

ip4-lookup -> ip4-glean -> GigabitEthernet0/a/0-output -> ip4-glean: ARP 
requests sent

how could I avoid this ARP request, like ?
ip4-lookup -> ip4-rewrite (GigabitEthernet0/a/0) -> ipsec-output-ip4



VPP is ARPing for 173.2.0.1. What do you want it to do instead?



neale
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13829): https://lists.fd.io/g/vpp-dev/message/13829
Mute This Topic: https://lists.fd.io/mt/32998559/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


回复: 回复: [vpp-dev] Add ip route without next-hop-address

2019-08-23 Thread shi dave
Hi Neale,

When routing to GigabitEthernet0/a/0, it could run into ipsec-output-ip4, then 
the packet will be added a ipsec tunnel ip (src 172.16.3.15, dst 172.16.3.1), 
so the destination MAC is the mac of 172.16.3.1

the flow is like:

dpdk-input
ip4-input (GigabitEthernet0/b/0)
ip4-lookup
ip4-rewrite (GigabitEthernet0/b/0)
ipsec-output-ip4
dpdk-esp-encrypt
dpdk-crypto-input
ip4-lookup (dst 172.16.3.1)
ip4-rewrite (GigabitEthernet0/b/0)
ipsec-output-ip4 (by pass)


Best Rregards

Dave


发件人: Neale Ranns (nranns) 
发送时间: 2019年8月23日 14:53
收件人: shi dave ; vpp-dev@lists.fd.io 
主题: Re: 回复: [vpp-dev] Add ip route without next-hop-address


Hi Dave,



When routing to GigabitEthernet0/a/0 what destination MAC address should the 
packet have?



/neale





De : shi dave 
Date : vendredi 23 août 2019 à 05:01
À : "Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" 

Objet : 回复: [vpp-dev] Add ip route without next-hop-address



Hi Neale,



yes, it's a correct behavior for VPP ARP for 173.2.0.1, but in my case, 
173.2.0.1 is a inner ip(src 173.10.10.10, dst 173.2.0.1), the outer ip is IPSEC 
tunnel ip(src 172.16.3.15, dst 172.16.3.1), so that's no sense to get the mac 
of 173.2.0.1.



so is there have any method to route the packet from GigabitEthernet0/b/0 to 
GigabitEthernet0/a/0, without send any ARP request?



Best Rregards

Dave



发件人: Neale Ranns (nranns) 
发送时间: 2019年8月22日 22:03
收件人: shi dave ; vpp-dev@lists.fd.io 
主题: Re: [vpp-dev] Add ip route without next-hop-address





Hi Dave,



but from the trace, it send a ARP request to ask 173.2.0.1 directly

ip4-lookup -> ip4-glean -> GigabitEthernet0/a/0-output -> ip4-glean: ARP 
requests sent

how could I avoid this ARP request, like ?
ip4-lookup -> ip4-rewrite (GigabitEthernet0/a/0) -> ipsec-output-ip4



VPP is ARPing for 173.2.0.1. What do you want it to do instead?



neale
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13828): https://lists.fd.io/g/vpp-dev/message/13828
Mute This Topic: https://lists.fd.io/mt/32998519/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: 回复: [vpp-dev] Add ip route without next-hop-address

2019-08-23 Thread Neale Ranns via Lists.Fd.Io
Hi Dave,

When routing to GigabitEthernet0/a/0 what destination MAC address should the 
packet have?

/neale


De : shi dave 
Date : vendredi 23 août 2019 à 05:01
À : "Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" 

Objet : 回复: [vpp-dev] Add ip route without next-hop-address

Hi Neale,

yes, it's a correct behavior for VPP ARP for 173.2.0.1, but in my case, 
173.2.0.1 is a inner ip(src 173.10.10.10, dst 173.2.0.1), the outer ip is IPSEC 
tunnel ip(src 172.16.3.15, dst 172.16.3.1), so that's no sense to get the mac 
of 173.2.0.1.

so is there have any method to route the packet from GigabitEthernet0/b/0 to 
GigabitEthernet0/a/0, without send any ARP request?


Best Rregards

Dave


发件人: Neale Ranns (nranns) 
发送时间: 2019年8月22日 22:03
收件人: shi dave ; vpp-dev@lists.fd.io 
主题: Re: [vpp-dev] Add ip route without next-hop-address




Hi Dave,



but from the trace, it send a ARP request to ask 173.2.0.1 directly

ip4-lookup -> ip4-glean -> GigabitEthernet0/a/0-output -> ip4-glean: ARP 
requests sent

how could I avoid this ARP request, like ?
ip4-lookup -> ip4-rewrite (GigabitEthernet0/a/0) -> ipsec-output-ip4



VPP is ARPing for 173.2.0.1. What do you want it to do instead?



neale
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13827): https://lists.fd.io/g/vpp-dev/message/13827
Mute This Topic: https://lists.fd.io/mt/32997382/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-