[vpp-dev] About lock-free operation in policer

2019-01-14 Thread blankspot
hi all,


I have a question about policer classify.
The code of bind/unbind a policer with interface is:  


  if (is_add)
pcm->classify_table_index_by_sw_if_index[ti][sw_if_index] = pct[ti];
  else
pcm->classify_table_index_by_sw_if_index[ti][sw_if_index] = ~0;


and the code checking the value in "ip4-policer-classify" node is: 


table_index0 =
pcm->classify_table_index_by_sw_if_index[tid][sw_if_index0];


There is no lock protecting the table index.


The function of policer is ok in multi-thread vpp, but I don't know why it is 
lock-free.
Can any one help?


Thanks.


yonggong  -=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#11917): https://lists.fd.io/g/vpp-dev/message/11917
Mute This Topic: https://lists.fd.io/mt/2915/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


Re: [vpp-dev] fragment error in ip4_input.h

2018-11-09 Thread blankspot
That makes sense.
Thank you for your reply.


Best regards
yongong
|
blanks...@163.com
|
On 11/9/2018 17:10,Ole Troan wrote:



On 9 Nov 2018, at 15:42, blankspot  wrote:


hi, vpp dev


I am doing some fragment test using vpp 18.07.  IP4 Packet with offset 8 is 
dropped with trace error: 


00:20:04:661292: error-drop
  ip4-input: ip4 fragment offset == 1


I find the comment in ip4_input.h: /* Drop fragmentation offset 1 packets. */


Does someone know why? 


Because it’s a tiny fragment attack?


Cheers 
Ole




Best regards,


yonggong


|
blanks...@163.com
|
签名由网易邮箱大师定制
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#11183): https://lists.fd.io/g/vpp-dev/message/11183
Mute This Topic: https://lists.fd.io/mt/28046882/675193
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [otr...@employees.org]
-=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#11186): https://lists.fd.io/g/vpp-dev/message/11186
Mute This Topic: https://lists.fd.io/mt/28046882/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


[vpp-dev] fragment error in ip4_input.h

2018-11-09 Thread blankspot
hi, vpp dev


I am doing some fragment test using vpp 18.07.  IP4 Packet with offset 8 is 
dropped with trace error: 


00:20:04:661292: error-drop
  ip4-input: ip4 fragment offset == 1


I find the comment in ip4_input.h: /* Drop fragmentation offset 1 packets. */


Does someone know why? 


Best regards,


yonggong


|
blanks...@163.com
|
签名由网易邮箱大师定制-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#11183): https://lists.fd.io/g/vpp-dev/message/11183
Mute This Topic: https://lists.fd.io/mt/28046882/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-


回复: [vpp-dev] [vpp] VXLAN arp response packet is dropped

2018-07-18 Thread blankspot




在2018年7月18日 16:27,Neale Ranns via Lists.Fd.Io 写道:
Can I see the packet trace?

/neale

-Original Message-
From: 井上里美 
Date: Wednesday, 18 July 2018 at 09:54
To: "Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" 

Cc: "Norimasa Asai (noasai)" , エッジ仮想化hcoML 
, 小柳達也様 , 
N転P_西岡孟朗様 
Subject: [vpp] VXLAN arp response packet is dropped

Hi neale san,

Thank you for your reply.
We used a vpp packet trace.
show trace is no error but on the caputure device,ARP request packet is
droped.
It happend the same event even L2.

Could you give me some advice?

【Architecture】
  __
|    |→caputure device→IXIA(port 2)
|VPP|
|   |←IXIA(port 1)
|__|

On 2018/07/06 21:39, Neale Ranns (nranns) wrote:
Hi Satomi

Debugging packet loss is much easier with a VPP packet trace…

Regards,
neale

-Original Message-
From:  on behalf of 井上里美 
Date: Friday, 6 July 2018 at 12:38
To: "vpp-dev@lists.fd.io" 
Cc: "Norimasa Asai (noasai)" , エッジ仮想化hcoML 
, 小柳達也様 , 
N転P_西岡孟朗様 
Subject: [vpp-dev] [pw] [vpp] VXLAN arp response packet is dropped

The password is here.
1j^?iKvC]C;%

On 2018/07/06 19:37, 井上里美 wrote:
Hi VPP Team,

I'm Satomi Inoue and I belong to NTT laboratories.
Could you tell me why ARP response packet is dropped?

We set up vxlan while looking at
”Using_VPP_as_a_VXLAN_Tunnel_Terminator”manual.
The procedure is as follows.

[The result]
・ARP request packet : IXIA(port2)→VPP→IXIA(port1):OK
・ARP response packet : IXIA(port1)→VPP→IXIA(port2):NG
 →We checked it by trace command. Loopback interface in VPP drop the
ARP response packet.

[set up vxlan]
1. Create sub-interface
vpp# create sub-interfaces VirtualFunctionEthernet0/9/0 1
vpp# set interface state VirtualFunctionEthernet0/9/0.1 up

2. Create bridge-domain
create bridge-domain 10001 learn 1 forward 1 uu-flood 1 arp-term 0

3. Create Loopback interface
vpp# loopback create mac 1a:2b:3c:4d:5e:6f
vpp# set interface state loop0 up
vpp# set interface ip address loop0 1.1.1.1/32
vpp# set interface ip table loop0 7

4. Apply loopback interface to bride-domain
vpp# set interface l2 bridge loop0 10001 bvi

5.Apply sub-interface to bride-domain
vpp# set interface l2 bridge VirtualFunctionEthernet0/9/0.1 10001 0

6.Create VXLAN tunnel
vpp# create vxlan tunnel src 1.1.1.1 dst 20.10.0.1 vni 10001
encap-vrf-id 7 decap-next l2
vpp# set interface l2 bridge vxlan_tunnel0 10001 1

Regards,
Satomi

--






--
-

井上里美(Satomi Inoue)
〒180-8585 東京都武蔵野市緑町3-9-11
PHONE:0422-59-4151
E-MAIL:inoue.sat...@lab.ntt.co.jp




-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#9863): https://lists.fd.io/g/vpp-dev/message/9863
Mute This Topic: https://lists.fd.io/mt/23669154/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub  [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-