Hi Hyong,
VCL runs as part of the app process so yes, your intuition was right, vcl and
vpp workers are different. Note however that the session layer also accepts
attachments from vpp “builtin” applications. Those end up consuming vpp worker
cpu cycles as all the signaling will happen on the
Hi,
Are the VPP worker threads, configured in the 'cpu {' section of
'startup.conf', the same as the "workers" or "worker threads" referred to in
the context of host stack / vppcom applications? The answer seems to be no,
looking at the implementation of 'vppcom_worker_register()' but wanted
Hi Neale,
I was wrong. I did a packet capture in null-encryption mode and the packet
format is of ESP Transport mode type.
Can you please help me to config ESP Tunnel mode ? Do you have any
logs/document to refer ?
NULL encryption config:
vpp# create ipip
Hi Elias,
I have been following this discussion and finally I gave VPP a try implementing
it as a CGN gateway. Unfortunattely some issues came up, like packets loss and
I believe your patch can be helpful,
Would mind give me guidance to deploy it? I'm using VPP 20.05 as you did
Best Regards
Dear Govind,
The tunnel parameters are parsed separately in recent versions. Try:
ipsec sa add 20 spi 1000 esp crypto-alg aes-gcm-128 crypto-key
4a506a794f574265564551694d653768 salt 0x12345678 tunnel src 192.83.1.1 dst
192.83.1.2
/neale
From: vpp-dev@lists.fd.io on behalf of Govindarajan
Dear Maintainers,
I need help to fix ESP Tunnel mode configuration using debug CLI.
Following command is throwing parse error. Can you please share the latest
CLI command ?
vpp# ipsec sa add 20 spi 1000 esp tunnel-src 192.83.1.1 tunnel-dst 192.83.1.2
crypto-alg aes-gcm-128 crypto-key
Will be great if anyone write this plugin
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#18794): https://lists.fd.io/g/vpp-dev/message/18794
Mute This Topic: https://lists.fd.io/mt/80870620/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe:
Denis,
> Yep, im understand that IPFIX already implemented. But IPFIX doesnt support
> by LI in our country. Only NetFlow v9 with NSEL/NEL is supported
The solution space would include but not limited to:
1) fix country
2) contribute a patch with NSRL/v9
3) write a v9/ IPFIX proxy
Cheers,