Re: [vpp-dev] vpp v19.04 ipsec backend
can it maybe be related to crypto devices? what can i check? I'm running on Centos if it is relevant. Thanks!. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#17642): https://lists.fd.io/g/vpp-dev/message/17642 Mute This Topic: https://lists.fd.io/mt/75537240/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] vpp v19.04 ipsec backend
Hello
Im trying to run *route base* ipsec on vpp version *19.04.4* -rc0 while using
dpdk backend but i see that the packets are not forwording and not get
encrepted / decrepted.
im using this guide here
https://wiki.fd.io/view/VPP/IPSec_and_IKEv2#Routing_traffic_through_ipsec0_interface_on_the_VPP_responder
but i see since 19.04 things changed , and this is deprecated?? acoording to
this https://wiki.fd.io/view/VPP/IPSec#Deprecated_Model (
https://wiki.fd.io/view/VPP/IPSec#Deprecated_Model ) (it used to work on
19.01.2 )
i still have all those api coomands in this version but no traffic .
i dont see that the relevent nodes are "running" - dpdk_crypto_input ,
dpdk-esp4-encrypt , dpdk-esp4-decrypt.
this is the configuration and relevent dump
buffers {
## Increase number of buffers allocated, needed only in scenarios with
## large number of interfaces and worker threads. Value is per numa node.
## Default is 16384 (8192 if running unpriviledged)
buffers-per-numa 128000
## Size of buffer data area
## Default is 2048
# default data-size 2048
}
dpdk {
uio-driver vfio-pci
vdev crypto_aesni_mb0,socket_id=0
dev default {
num-rx-desc 4096
num-tx-desc 4096
}
#num-mbufs 128000
#socket-mem 0,1024
no-multi-seg
no-tx-checksum-offload
}
vpp# show interface address
GigabitEthernet5/0/0 (dn):
GigabitEthernet5/0/1 (up):
L3 192.168.1.10/24
GigabitEthernet5/0/2 (up):
L3 100.100.100.1/24
GigabitEthernet5/0/3 (dn):
TenGigabitEthernet6/0/0 (dn):
TenGigabitEthernet6/0/1 (dn):
TenGigabitEthernet7/0/0 (dn):
TenGigabitEthernet7/0/1 (dn):
ipsec1 (up):
L3 60.60.60.1/24
local0 (dn):
vpp# show ipsec all
[0] sa 0x8000 spi 0 mode tunnel protocol esp tunnel
[1] sa 0xc000 spi 0 mode tunnel protocol esp tunnel
[2] sa 0x1 spi 3416637075 mode tunnel protocol esp tunnel
[3] sa 0x2 spi 3482884703 mode tunnel protocol esp tunnel
SPD Bindings:
Tunnel interfaces
ipsec1
out-bound sa: [3] sa 0x2 spi 3482884703 mode tunnel protocol esp tunnel
in-bound sa: [2] sa 0x1 spi 3416637075 mode tunnel protocol esp tunnel
show ip fib table 0
..
.
..
200.200.200.0/24
unicast-ip4-chain
[@0]: dpo-load-balance: [proto:ip4 index:28 buckets:1 uRPF:44 to:[0:0]]
[0] [@12]: dpo-load-balance: [proto:ip4 index:27 buckets:1 uRPF:40 to:[0:0]]
[0] [@6]: ipv4 [features] via 0.0.0.0 ipsec1: mtu:9000
*stacked-on entry:1:*
*[@2]: dpo-drop ip4*
.
vpp# show ipsec backends
IPsec AH backends available:
Name Index Active
default openssl backend 0 yes
IPsec ESP backends available:
Name Index Active
default openssl backend 0 no
dpdk backend 1 *yes*
vpp# show trace
--- Start of thread 0 vpp_main ---
Packet 2
00:06:27:420668: dpdk-input
GigabitEthernet5/0/2 rx queue 0
buffer 0x49be2b: current data 0, length 74, buffer-pool 0, ref-count 1,
totlen-nifb 0, trace 0x1
ext-hdr-valid
l4-cksum-computed l4-cksum-correct
PKT MBUF: port 2, nb_segs 1, pkt_len 74
buf_len 2176, data_len 74, ol_flags 0x180, data_off 128, phys_addr 0x126f8b40
packet_type 0x11 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0
rss 0x0 fdir.hi 0x0 fdir.lo 0x0
Packet Offload Flags
PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid
PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid
Packet Types
RTE_PTYPE_L2_ETHER (0x0001) Ethernet packet
RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers
IP4: 00:20:d2:53:4c:db -> 08:35:71:ab:99:5f
ICMP: 100.100.100.2 -> 200.200.200.2
tos 0x00, ttl 64, length 60, checksum 0x97f0
fragment id 0x899f
ICMP echo_request checksum 0x841f
00:06:27:420671: ethernet-input
frame: flags 0x3, hw-if-index 3, sw-if-index 3
IP4: 00:20:d2:53:4c:db -> 08:35:71:ab:99:5f
00:06:27:420672: ip4-input-no-checksum
ICMP: 100.100.100.2 -> 200.200.200.2
tos 0x00, ttl 64, length 60, checksum 0x97f0
fragment id 0x899f
ICMP echo_request checksum 0x841f
00:06:27:420673: ip4-lookup
fib 0 dpo-idx 27 flow hash: 0x
ICMP: 100.100.100.2 -> 200.200.200.2
tos 0x00, ttl 64, length 60, checksum 0x97f0
fragment id 0x899f
ICMP echo_request checksum 0x841f
00:06:27:420674: ip4-load-balance
fib 0 dpo-idx 14 flow hash: 0x
ICMP: 100.100.100.2 -> 200.200.200.2
tos 0x00, ttl 64, length 60, checksum 0x97f0
fragment id 0x899f
ICMP echo_request checksum 0x841f
fib 0 dpo-idx 14 flow hash: 0x
ICMP: 100.100.100.2 -> 200.200.200.2
tos 0x00, ttl 64, length 60, checksum 0x97f0
fragment id 0x899f
ICMP echo_request checksum 0x841f
pls advice...
PS
i saw the new way in the ipsec link with *ipip* port but i dont have the
command in the vppctl of " ipsec tunnel protect ipip0 sa-in 20 sa-out 30" for
some resone
thanks
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#16981): https://lists.fd.io/g/vpp-dev/message/16981
Mute This Topic: https://lists.fd.io/mt/75537240/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Re: [vpp-dev] vpp 19.08 failed to load in CENTOS 7
maybe this is releated also? https://github.com/spdk/spdk/issues/1012 ( https://github.com/spdk/spdk/issues/1012 ) -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#16022): https://lists.fd.io/g/vpp-dev/message/16022 Mute This Topic: https://lists.fd.io/mt/72808669/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] python3 RPM vpp 19.04
[Edited Message Follows] Hello all i see in https://packagecloud.io/app/fdio/1904/search?dist==debs=63=19.04 that there is a file for python 3 VPP_API (python3-vpp-api_19.04.4-rc0~4-g8f2ac2b64~b3_amd6) but there is no RPM file for Python 3 API is there a way to make it? i build form git vpp 19.04 and didnt see also RPM file for this thanks in advance -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#16020): https://lists.fd.io/g/vpp-dev/message/16020 Mute This Topic: https://lists.fd.io/mt/72846068/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] python3 RPM vpp 19.04
Hello all i see in https://packagecloud.io/fdio/1904filter=debs that there is a file for python 3 VPP_API (python3-vpp-api_19.04.4-rc0~4-g8f2ac2b64~b3_amd6) but there is no RPM file for Python 3 API is there a way to make it? i build form git vpp 19.04 and didnt see also RPM file for this thanks in advance -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#16020): https://lists.fd.io/g/vpp-dev/message/16020 Mute This Topic: https://lists.fd.io/mt/72846068/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
Re: [vpp-dev] vpp 19.08 failed to load in CENTOS 7
Thanks for the replay i edited the qustion , it is not working with uio and iommu is enabled so i need to work with vfio-pci -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#16019): https://lists.fd.io/g/vpp-dev/message/16019 Mute This Topic: https://lists.fd.io/mt/72808669/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] vpp 19.08 failed to load in CENTOS 7
[Edited Message Follows]
Hi all
im using vpp version 19.08 , with centos 7 kernel 4.4
when i want to use vfio-pci drive i get
error allocating rte services array
EAL: FATAL: rte_service_init() failed
and vpp faild to load , i want to use vfio-pci becouse im working on I7 cpu
with iommu.
the vfio-pci driver is loaded and can be seen in lsmod.
my vm.nr_hugepages = 1024 , is there anything im doing worng regarding DPDK or
somthing?
pls if someone can advice
Thannks!!
vpp# *show version*
vpp v19.08.1-release built by root on localhost.localdomain at Sun Jan 26
10:08:45 EST 2020
vpp# show *dpdk version*
DPDK Version: DPDK 19.05.0
DPDK EAL init args: -c 2 -n 4 --in-memory --vdev crypto_aesni_mb0
--file-prefix vpp --master-lcore 1
[root@localhost ~]# *uname -a*
Linux localhost.localdomain 4.4.211-1.el7.elrepo.x86_64 #1 SMP Thu Jan 23
08:11:08 EST 2020 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost ~]#
[root@localhost device]# *cat /etc/centos-release*
CentOS Linux release 7.7.1908 (Core)
[root@localhost ~]# *sysctl -a | grep hugepages*
vm.hugepages_treat_as_movable = 0
vm.nr_hugepages = 1024
vm.nr_hugepages_mempolicy = 1024
vm.nr_overcommit_hugepages = 0
[root@localhost ~]# *cat /etc/vpp/startup.conf*
unix {
nodaemon
log /var/log/vpp/vpp.log
full-coredump
cli-listen /run/vpp/cli.sock
gid vpp
}
api-trace {
on
}
api-segment {
gid vpp
}
socksvr {
default
}
dpdk {
uio-driver vfio-pci
vdev crypto_aesni_mb0
dev default {
num-rx-desc 4096
num-tx-desc 4096
}
#num-mbufs 128000
socket-mem 0,1024
no-multi-seg
no-tx-checksum-offload
}
nat {
translation hash buckets 10240
translation hash memory 268435456
user hash buckets 1280
user hash memory 134217728
max translations per user 1000
}
[root@localhost ~]# / *usr/bin/vpp -c /etc/vpp/startup.conf*
vlib_plugin_early_init:361: plugin path
/usr/lib/x86_64-linux-gnu/vpp_plugins:/usr/lib/vpp_plugins
load_one_plugin:189: Loaded plugin: abf_plugin.so (Access Control List (ACL)
Based Forwarding)
load_one_plugin:189: Loaded plugin: acl_plugin.so (Access Control Lists (ACL))
load_one_plugin:189: Loaded plugin: avf_plugin.so (Intel Adaptive Virtual
Function (AVF) Device Driver)
load_one_plugin:189: Loaded plugin: builtinurl_plugin.so (vpp built-in URL
support)
load_one_plugin:189: Loaded plugin: cdp_plugin.so (Cisco Discovery Protocol
(CDP))
load_one_plugin:189: Loaded plugin: crypto_ia32_plugin.so (Intel IA32 Software
Crypto Engine)
load_one_plugin:189: Loaded plugin: crypto_ipsecmb_plugin.so (Intel IPSEC
Multi-buffer Crypto Engine)
load_one_plugin:189: Loaded plugin: crypto_openssl_plugin.so (OpenSSL Crypto
Engine)
load_one_plugin:189: Loaded plugin: ct6_plugin.so (IPv6 Connection Tracker)
load_one_plugin:189: Loaded plugin: dhcp_plugin.so (Dynamic Host Configuration
Protocol (DHCP))
load_one_plugin:189: Loaded plugin: dns_plugin.so (Simple DNS name resolver)
load_one_plugin:189: Loaded plugin: dpdk_plugin.so (Data Plane Development Kit
(DPDK))
load_one_plugin:189: Loaded plugin: flowprobe_plugin.so (Flow per Packet)
load_one_plugin:189: Loaded plugin: gbp_plugin.so (Group Based Policy (GBP))
load_one_plugin:189: Loaded plugin: gtpu_plugin.so (GPRS Tunnelling Protocol,
User Data (GTPv1-U))
load_one_plugin:189: Loaded plugin: hs_apps_plugin.so (Host Stack Applications)
load_one_plugin:189: Loaded plugin: http_static_plugin.so (HTTP Static Server)
load_one_plugin:189: Loaded plugin: igmp_plugin.so (Internet Group Management
Protocol (IGMP))
load_one_plugin:189: Loaded plugin: ikev2_plugin.so (Internet Key Exchange
(IKEv2) Protocol)
load_one_plugin:189: Loaded plugin: ila_plugin.so (Identifier Locator
Addressing (ILA) for IPv6)
load_one_plugin:189: Loaded plugin: ioam_plugin.so (Inbound Operations,
Administration, and Maintenance (OAM))
load_one_plugin:117: Plugin disabled (default): ixge_plugin.so
load_one_plugin:189: Loaded plugin: l2e_plugin.so (Layer 2 (L2) Emulation)
load_one_plugin:189: Loaded plugin: l3xc_plugin.so (L3 Cross-Connect (L3XC))
load_one_plugin:189: Loaded plugin: lacp_plugin.so (Link Aggregation Control
Protocol (LACP))
load_one_plugin:189: Loaded plugin: lb_plugin.so (Load Balancer (LB))
load_one_plugin:189: Loaded plugin: mactime_plugin.so (Time-based MAC Source
Address Filter)
load_one_plugin:189: Loaded plugin: map_plugin.so (Mapping of Address and Port
(MAP))
load_one_plugin:189: Loaded plugin: mdata_plugin.so (Buffer metadata change
tracker.)
load_one_plugin:189: Loaded plugin: memif_plugin.so (Packet Memory Interface
(memif) -- Experimental)
load_one_plugin:189: Loaded plugin: nat_plugin.so (Network Address Translation
(NAT))
load_one_plugin:189: Loaded plugin: nsh_plugin.so (Network Service Header (NSH))
load_one_plugin:189: Loaded plugin: nsim_plugin.so (Network Delay Simulator)
load_one_plugin:117: Plugin disabled (default): oddbuf_plugin.so
load_one_plugin:189: Loaded plugin: perfmon_plugin.so (Performance Monitor)
load_one_plugin:189: Loaded plugin: ping_plugin.so (Ping (ping))
load_one_plugin:189:
[vpp-dev] vpp 19.08 failed to load in CENTOS 7
[Edited Message Follows]
Hi all
im using vpp version 19.08 , with centos 7 kernel 4.4
when i want to use vfio-pci drive i get
error allocating rte services array
EAL: FATAL: rte_service_init() failed
and vpp faild to load but if i use uio_pci_generic then vpp is ok , i want to
use vfio-pci becouse im working on I7 cpu with iommu.
the vfio-pci driver is loaded and can be seen in lsmod my vm.nr_hugepages =
1024 , is there anything im doing worng regarding DPDK or somthing?
pls if someone can advice
Thannks!!
vpp# *show version*
vpp v19.08.1-release built by root on localhost.localdomain at Sun Jan 26
10:08:45 EST 2020
vpp# show *dpdk version*
DPDK Version: DPDK 19.05.0
DPDK EAL init args: -c 2 -n 4 --in-memory --vdev crypto_aesni_mb0
--file-prefix vpp --master-lcore 1
[root@localhost ~]# *uname -a*
Linux localhost.localdomain 4.4.211-1.el7.elrepo.x86_64 #1 SMP Thu Jan 23
08:11:08 EST 2020 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost ~]#
[root@localhost device]# *cat /etc/centos-release*
CentOS Linux release 7.7.1908 (Core)
[root@localhost ~]# *sysctl -a | grep hugepages*
vm.hugepages_treat_as_movable = 0
vm.nr_hugepages = 1024
vm.nr_hugepages_mempolicy = 1024
vm.nr_overcommit_hugepages = 0
[root@localhost ~]# *cat /etc/vpp/startup.conf*
unix {
nodaemon
log /var/log/vpp/vpp.log
full-coredump
cli-listen /run/vpp/cli.sock
gid vpp
}
api-trace {
on
}
api-segment {
gid vpp
}
socksvr {
default
}
dpdk {
uio-driver vfio-pci
vdev crypto_aesni_mb0
dev default {
num-rx-desc 4096
num-tx-desc 4096
}
#num-mbufs 128000
socket-mem 0,1024
no-multi-seg
no-tx-checksum-offload
}
nat {
translation hash buckets 10240
translation hash memory 268435456
user hash buckets 1280
user hash memory 134217728
max translations per user 1000
}
[root@localhost ~]# / *usr/bin/vpp -c /etc/vpp/startup.conf*
vlib_plugin_early_init:361: plugin path
/usr/lib/x86_64-linux-gnu/vpp_plugins:/usr/lib/vpp_plugins
load_one_plugin:189: Loaded plugin: abf_plugin.so (Access Control List (ACL)
Based Forwarding)
load_one_plugin:189: Loaded plugin: acl_plugin.so (Access Control Lists (ACL))
load_one_plugin:189: Loaded plugin: avf_plugin.so (Intel Adaptive Virtual
Function (AVF) Device Driver)
load_one_plugin:189: Loaded plugin: builtinurl_plugin.so (vpp built-in URL
support)
load_one_plugin:189: Loaded plugin: cdp_plugin.so (Cisco Discovery Protocol
(CDP))
load_one_plugin:189: Loaded plugin: crypto_ia32_plugin.so (Intel IA32 Software
Crypto Engine)
load_one_plugin:189: Loaded plugin: crypto_ipsecmb_plugin.so (Intel IPSEC
Multi-buffer Crypto Engine)
load_one_plugin:189: Loaded plugin: crypto_openssl_plugin.so (OpenSSL Crypto
Engine)
load_one_plugin:189: Loaded plugin: ct6_plugin.so (IPv6 Connection Tracker)
load_one_plugin:189: Loaded plugin: dhcp_plugin.so (Dynamic Host Configuration
Protocol (DHCP))
load_one_plugin:189: Loaded plugin: dns_plugin.so (Simple DNS name resolver)
load_one_plugin:189: Loaded plugin: dpdk_plugin.so (Data Plane Development Kit
(DPDK))
load_one_plugin:189: Loaded plugin: flowprobe_plugin.so (Flow per Packet)
load_one_plugin:189: Loaded plugin: gbp_plugin.so (Group Based Policy (GBP))
load_one_plugin:189: Loaded plugin: gtpu_plugin.so (GPRS Tunnelling Protocol,
User Data (GTPv1-U))
load_one_plugin:189: Loaded plugin: hs_apps_plugin.so (Host Stack Applications)
load_one_plugin:189: Loaded plugin: http_static_plugin.so (HTTP Static Server)
load_one_plugin:189: Loaded plugin: igmp_plugin.so (Internet Group Management
Protocol (IGMP))
load_one_plugin:189: Loaded plugin: ikev2_plugin.so (Internet Key Exchange
(IKEv2) Protocol)
load_one_plugin:189: Loaded plugin: ila_plugin.so (Identifier Locator
Addressing (ILA) for IPv6)
load_one_plugin:189: Loaded plugin: ioam_plugin.so (Inbound Operations,
Administration, and Maintenance (OAM))
load_one_plugin:117: Plugin disabled (default): ixge_plugin.so
load_one_plugin:189: Loaded plugin: l2e_plugin.so (Layer 2 (L2) Emulation)
load_one_plugin:189: Loaded plugin: l3xc_plugin.so (L3 Cross-Connect (L3XC))
load_one_plugin:189: Loaded plugin: lacp_plugin.so (Link Aggregation Control
Protocol (LACP))
load_one_plugin:189: Loaded plugin: lb_plugin.so (Load Balancer (LB))
load_one_plugin:189: Loaded plugin: mactime_plugin.so (Time-based MAC Source
Address Filter)
load_one_plugin:189: Loaded plugin: map_plugin.so (Mapping of Address and Port
(MAP))
load_one_plugin:189: Loaded plugin: mdata_plugin.so (Buffer metadata change
tracker.)
load_one_plugin:189: Loaded plugin: memif_plugin.so (Packet Memory Interface
(memif) -- Experimental)
load_one_plugin:189: Loaded plugin: nat_plugin.so (Network Address Translation
(NAT))
load_one_plugin:189: Loaded plugin: nsh_plugin.so (Network Service Header (NSH))
load_one_plugin:189: Loaded plugin: nsim_plugin.so (Network Delay Simulator)
load_one_plugin:117: Plugin disabled (default): oddbuf_plugin.so
load_one_plugin:189: Loaded plugin: perfmon_plugin.so (Performance Monitor)
load_one_plugin:189: Loaded plugin:
[vpp-dev] vpp 19.08 failed to load in CENTOS 7
Hi all
im using vpp version 19.08 , with centos 7 kernel 4.4
when i want to use vfio-pci drive i get
error allocating rte services array
EAL: FATAL: rte_service_init() failed
and vpp faild to load but if i use uio_pci_generic then vpp is ok , i want to
use vfio-pci becouse im working on I7 cpu with iommu.
the vfio-pci driver is loaded and can be seen in lsmod my vm.nr_hugepages =
1024 , is there anything im doing worng regarding DPDK or somthing?
pls if someone can advice
Thannks!!
vpp# *show version*
vpp v19.08.1-release built by root on localhost.localdomain at Sun Jan 26
10:08:45 EST 2020
vpp# show *dpdk version*
DPDK Version: DPDK 19.05.0
DPDK EAL init args: -c 2 -n 4 --in-memory --vdev crypto_aesni_mb0
--file-prefix vpp --master-lcore 1
[root@localhost ~]# *uname -a*
Linux localhost.localdomain 4.4.211-1.el7.elrepo.x86_64 #1 SMP Thu Jan 23
08:11:08 EST 2020 x86_64 x86_64 x86_64 GNU/Linux
[root@localhost ~]#
[root@localhost device]# *cat /etc/centos-release*
CentOS Linux release 7.7.1908 (Core)
[root@localhost ~]# *sysctl -a | grep hugepages*
vm.hugepages_treat_as_movable = 0
vm.nr_hugepages = 1024
vm.nr_hugepages_mempolicy = 1024
vm.nr_overcommit_hugepages = 0
[root@localhost ~]# *cat /etc/vpp/startup.conf*
unix {
nodaemon
log /var/log/vpp/vpp.log
full-coredump
cli-listen /run/vpp/cli.sock
gid vpp
}
api-trace {
on
}
api-segment {
gid vpp
}
socksvr {
default
}
dpdk {
uio-driver vfio-pci
vdev crypto_aesni_mb0
dev default {
num-rx-desc 4096
num-tx-desc 4096
}
#num-mbufs 128000
socket-mem 0,1024
no-multi-seg
no-tx-checksum-offload
}
nat {
translation hash buckets 10240
translation hash memory 268435456
user hash buckets 1280
user hash memory 134217728
max translations per user 1000
}
vlib_plugin_early_init:361: plugin path
/usr/lib/x86_64-linux-gnu/vpp_plugins:/usr/lib/vpp_plugins
load_one_plugin:189: Loaded plugin: abf_plugin.so (Access Control List (ACL)
Based Forwarding)
load_one_plugin:189: Loaded plugin: acl_plugin.so (Access Control Lists (ACL))
load_one_plugin:189: Loaded plugin: avf_plugin.so (Intel Adaptive Virtual
Function (AVF) Device Driver)
load_one_plugin:189: Loaded plugin: cdp_plugin.so (Cisco Discovery Protocol
(CDP))
load_one_plugin:189: Loaded plugin: crypto_ia32_plugin.so (Intel IA32 Software
Crypto Engine)
load_one_plugin:189: Loaded plugin: crypto_ipsecmb_plugin.so (Intel IPSEC
Multi-buffer Crypto Engine)
load_one_plugin:189: Loaded plugin: crypto_openssl_plugin.so (OpenSSL Crypto
Engine)
load_one_plugin:189: Loaded plugin: ct6_plugin.so (IPv6 Connection Tracker)
load_one_plugin:189: Loaded plugin: dns_plugin.so (Simple DNS name resolver)
load_one_plugin:189: Loaded plugin: dpdk_plugin.so (Data Plane Development Kit
(DPDK))
load_one_plugin:189: Loaded plugin: flowprobe_plugin.so (Flow per Packet)
load_one_plugin:189: Loaded plugin: gbp_plugin.so (Group Based Policy (GBP))
load_one_plugin:189: Loaded plugin: gtpu_plugin.so (GPRS Tunnelling Protocol,
User Data (GTPv1-U))
load_one_plugin:189: Loaded plugin: hs_apps_plugin.so (Host Stack Applications)
load_one_plugin:189: Loaded plugin: http_static_plugin.so (HTTP Static Server)
load_one_plugin:189: Loaded plugin: igmp_plugin.so (Internet Group Management
Protocol (IGMP))
load_one_plugin:189: Loaded plugin: ikev2_plugin.so (Internet Key Exchange
(IKEv2) Protocol)
load_one_plugin:189: Loaded plugin: ila_plugin.so (Identifier Locator
Addressing (ILA) for IPv6)
load_one_plugin:189: Loaded plugin: ioam_plugin.so (Inbound Operations,
Administration, and Maintenance (OAM))
load_one_plugin:117: Plugin disabled (default): ixge_plugin.so
load_one_plugin:189: Loaded plugin: l2e_plugin.so (Layer 2 (L2) Emulation)
load_one_plugin:189: Loaded plugin: l3xc_plugin.so (L3 Cross-Connect (L3XC))
load_one_plugin:189: Loaded plugin: lacp_plugin.so (Link Aggregation Control
Protocol (LACP))
load_one_plugin:189: Loaded plugin: lb_plugin.so (Load Balancer (LB))
load_one_plugin:189: Loaded plugin: mactime_plugin.so (Time-based MAC Source
Address Filter)
load_one_plugin:189: Loaded plugin: map_plugin.so (Mapping of Address and Port
(MAP))
load_one_plugin:189: Loaded plugin: memif_plugin.so (Packet Memory Interface
(memif) -- Experimental)
load_one_plugin:189: Loaded plugin: nat_plugin.so (Network Address Translation
(NAT))
load_one_plugin:189: Loaded plugin: nsh_plugin.so (Network Service Header (NSH))
load_one_plugin:189: Loaded plugin: nsim_plugin.so (Network Delay Simulator)
load_one_plugin:117: Plugin disabled (default): oddbuf_plugin.so
load_one_plugin:189: Loaded plugin: perfmon_plugin.so (Performance Monitor)
load_one_plugin:189: Loaded plugin: quic_plugin.so (Quic transport protocol)
load_one_plugin:189: Loaded plugin: rdma_plugin.so (RDMA IBverbs Device Driver)
load_one_plugin:189: Loaded plugin: router.so (router)
load_one_plugin:117: Plugin disabled (default): sctp_plugin.so
load_one_plugin:189: Loaded plugin: srv6ad_plugin.so (Dynamic Segment Routing
for IPv6 (SRv6) Proxy)
load_one_plugin:189:
Re: [vpp-dev] What RPM contains vpp debug symbols?
Hello im usuing vpp v19.08.1 on centos 7 Kernel: Linux 4.4.211-1.el7.elrepo.x86_64 How can i build debug RPMS for vpp? if not is there any workaround for that? Thanks! -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#15920): https://lists.fd.io/g/vpp-dev/message/15920 Mute This Topic: https://lists.fd.io/mt/10642729/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] thread context per node
Hello guys I have a question regarding thread context. I have a node that uses the function “vlib_put_frame_to_node()” to “move” the frame forward to the next node. My problem is that I want it to run in a context of worker thread instead of the main_vpp thread. Can I run the whole node in a context of worker thread or can I dispatch the frame next To the worker thread to handle? -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#14920): https://lists.fd.io/g/vpp-dev/message/14920 Mute This Topic: https://lists.fd.io/mt/68797792/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] ipsec traffic backend
Hello Guys
i wanted to ask how can i know if my ipsec is running with QAT (intel quick
assist) traffic backend (i am sure that i have a cpu that supports it..)?
i'm sure that it is not OPEN SLL becouse i see dpdk on those outputs
DBGvpp# show ipsec backends
IPsec ESP backends available:
Name Index Active
default openssl backend 0 no
dpdk backend 1 yes
DBGvpp# show dpdk crypto devices
crypto_aesni_mb0 crypto_aesni_mb up
numa_node 0, max_queues 8
free_resources 3, used_resources 1
SYMMETRIC_CRYPTO, SYM_OPERATION_CHAINING, CPU_SSE, CPU_AESNI
Cipher: aes-cbc-128, aes-cbc-192, aes-cbc-256, aes-ctr-128, aes-ctr-192,
aes-ctr-256, aes-gcm-128, aes-gcm-192, aes-gcm-256
Auth: md5-96, sha1-96, sha-256-128, sha-384-192, sha-512-25
DBGvpp# show dpdk crypto placement
Thread 0 (vpp_main):
crypto_aesni_mb0 dev-id 0 inbound-queue 0 outbound-queue 1
DBGvpp# show log
2019/ 8/ 1 06:24:20:647 warn dpdk EAL init args: -c 2 -n 4
--in-memory --vdev crypto_aesni_mb0 --file-prefix vpp --master-lcore 1
2019/ 8/ 1 06:24:23:365 notice dpdk DPDK drivers found 6 ports...
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: Some devices want iova as va
but pa will be used because.. EAL: vfio-noiommu mode configured
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: No free hugepages reported
in hugepages-1048576kB
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: No free hugepages reported
in hugepages-1048576kB
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: No free hugepages reported
in hugepages-1048576kB
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: VFIO support initialized
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: WARNING! Base virtual
address hint (0x141000 != 0x144000) not respected!
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: This may cause issues
with mapping memory into secondary processes
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: WARNING! Base virtual
address hint (0x1c40002000 != 0x1c8000) not respected!
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: This may cause issues
with mapping memory into secondary processes
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: WARNING! Base virtual
address hint (0x2480003000 != 0x24c000) not respected!
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: This may cause issues
with mapping memory into secondary processes
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: WARNING! Base virtual
address hint (0x2cc0064000 != 0x2cc020) not respected!
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: This may cause issues
with mapping memory into secondary processes
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: WARNING! Base virtual
address hint (0x30c02c5000 != 0x30c040) not respected!
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: This may cause issues
with mapping memory into secondary processes
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: WARNING! Base virtual
address hint (0x34c0526000 != 0x34c060) not respected!
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: This may cause issues
with mapping memory into secondary processes
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: WARNING! Base virtual
address hint (0x38c0787000 != 0x38c080) not respected!
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: This may cause issues
with mapping memory into secondary processes
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: Invalid NUMA socket,
default to 0
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: using IOMMU type 1 (Type 1)
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: Invalid NUMA socket,
default to 0
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: Invalid NUMA socket,
default to 0
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: Invalid NUMA socket,
default to 0
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: Invalid NUMA socket,
default to 0
2019/ 8/ 1 06:24:23:378 notice dpdk EAL: Invalid NUMA socket,
default to 0
2019/ 8/ 1 06:24:23:378 notice dpdk Invalid port_id=6
cat /etc/vpp/startup.conf:
dpdk {
vdev crypto_aesni_mb0
#vdev crypto_aesni_gcm_mb1
dev default {
num-rx-desc 512
num-tx-desc 512
}
num-mbufs 2
socket-mem 1024
}
DBGvpp# show version
vpp v19.01.2-release
does this all mean that im using QAT? or "regular" dpdk ?
if not how can i make sure im using it?
thanks all !!
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#13659): https://lists.fd.io/g/vpp-dev/message/13659
Mute This Topic: https://lists.fd.io/mt/32722882/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] vpp process stuck
Hello all i have test client that use the ' *c api* ' connection to config and get dump from the vpp. i noticed that if my test client got an exception then the vpp got stuck also this is the massgae that i see in the vpp log about my application: *vl_mem_send_client_keepalive_w_reg:573: REAPER: binary API client 'test' died* and this is the stack from the gdb: ... 0x7fcf5e331023 in *__GI___pthread_mutex_lock* ( mutex=mutex@entry=0x130021008) at ../nptl/pthread_mutex_lock.c:78 #2 0x7fcf5f4abcfd in vl_mem_api_dead_client_scan ( am=0x7fcf5f6d7c40 , shm=shm@entry=0x1300423cc, now=now@entry=57515.91504279 ) at /mnt/vpp_code/vpp/src/vlibmemory/memory_api.c:639 #3 0x7fcf5f4be03d in vl_api_clnt_process (vm=, node=0x7fcf1d174000, f=) at /mnt/vpp_code/vpp/src/vlibmemory/vlib_api.c:430 #4 0x7fcf5e57eab6 in vlib_process_bootstrap (_a=) at /mnt/vpp_code/vpp/src/vlib/main.c:1440 #5 0x7fcf5e0b1614 in clib_calljmp () from /usr/lib/x86_64-linux-gnu/libvppinfra.so.19.01.2 #6 0x7fcf1dbffe00 in ?? () #7 0x7fcf5e584679 in vlib_process_startup (f=0x0, p=0x7fcf1d174000, vm=0x7fcf5e7c83c0 ) at /mnt/vpp_code/vpp/src/vlib/main.c:1462 #8 dispatch_process (vm=0x7fcf5e7c83c0 , p=0x7fcf1d174000, last_time_stamp=150702803856, f=0x0) at /mnt/vpp_code/vpp/src/vlib/main.c:1507 it seem that it stuck on mutex somehow on function *vl_mem_api_dead_client_scan* () can someone pls advice ? im using Version: v19.01.2-release Compiled by: root Compile host: ubuntu Compiler: GCC 7.4.0 thnaks -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#13524): https://lists.fd.io/g/vpp-dev/message/13524 Mute This Topic: https://lists.fd.io/mt/32513844/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] RAW IP VIA VPP
Hi guys i have an issue that i want to consulte. VPP as we know dosent "support" usb devices meaning that if i have a wwan0 port the vpp will not take it if i wanted to connect it to vpp the way was via tap in the vpp that connected to linux bridge on one end and the wwan0 port on the other (working withwith router plugin). the problem is that what if the wwan0 port is working in raw ip mode meaning no L2 on it (no mac etc) and becouse of that i cant connect it to linux bridge how would you suggest to connect it? i dont want to use NAT feature, i saw some stuff regarding memif libery but i cant fegure how to connect it to the wwan port thanks in advance -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#13171): https://lists.fd.io/g/vpp-dev/message/13171 Mute This Topic: https://lists.fd.io/mt/31831067/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] ipsec questions
Hello every one im new to vpp ipsec and i saw there has been an improvment in version vpp 19.01 for ipsec. i have a couple of questions regarding ipsec on vpp. 1. after that i have new port name lets say "ipsec0", is there a unique identifier that will show from what *ikev2 profile it has been created* ? (if i have many connections i want to know which one is which for status and statistics...) 2. can i use multiple isakmp policies (ans esp also )for a *single ikev2 profile* in vpp ( ikev2 profile set pr1 ike-crypto-alg ike-integ-alg ike-dh )?? for a eample in strongswan: conn %default keyexchange=ikev2 authby=secret type=tunnel *ike=aes256-sha2_512-modp2048,aes128-sha1-ecp384,aes128-sha1-modp1536!* dpdaction=clear dpddelay=3 dpdtimeout=15 mobike=no if so how is the best practive - i dont think using 3 diff profiles with just diffrent ike profiles will do the trick becouse i can end up with multipule connections that i didnt wanted... thanks in advance!!! -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12484): https://lists.fd.io/g/vpp-dev/message/12484 Mute This Topic: https://lists.fd.io/mt/30389253/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
[vpp-dev] wwan0 intarface - vpp
Hello all , im new to vpp and just started to reseach about it i was wandering regarding an issue , i want that the vpp will recognaize in his port list a wwan0 intarface (wifi) that i have in the linux device. it has its own pci address ,i can see it under sudo lshw -class network -businfo pci@:01:00.0 wlan0 network QCA986x/988x 802.11ac Wireless Network A but the vpp dosent "take it" can i make it happen? pls advice thanks alot Am -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11853): https://lists.fd.io/g/vpp-dev/message/11853 Mute This Topic: https://lists.fd.io/mt/28963384/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
