[vpp-dev] IPSec proposal to improve "ipsec4-output-feature" node performance

Hi Neale, I am working on optimizing "ipsec4-output-feature" node on ARM based systems. Towards that, I saw an opportunity to supplement SPD table lookup (linear search) with Bihash based flow cache. This approach is similar to ACL plugin stateful mode implementation. This approach will

Re: [vpp-dev] VPP Host Stack - TCP Proxy without FIFO #vpp-hoststack

Thanks Florin! That really helped. > > Yes, but keep in mind that’s an explicit proxy (client connects to the > proxy’s ip). Yes, you're right. How about a transparent one by listening on 0/0 all ports and by modifying proxy to use src and dst ip dynamically for the other connection? > >

Re: [vpp-dev] TCP connection using VPP

Hi Chetan, Interesting. As far as I know, there haven’t been any new updates in that area. It would be great if somebody ported the code to use vcl as opposed to the session layer directly. That would ensure compatibility going forward … Regards, Florin > On Mar 2, 2021, at 12:18 PM,

Re: [vpp-dev] TCP connection using VPP

Thanks Florin. I was able to figure out using the vcl.conf.  I am using that version because that seems like the last version compatible with SPDK. Is there a later version of it that can still work with SPDK?  Thanks,Chethan On Tuesday, March 2, 2021, 09:38:34 PM GMT+5:30, Florin Coras

Re: [vpp-dev] VPP Host Stack - TCP Proxy without FIFO #vpp-hoststack

Hi, Inline. > On Mar 2, 2021, at 8:19 AM, theoliviadun...@gmail.com wrote: > > Dear All, > > The example application hs_apps/proxy.c > seems > to achieve the functionality of TCP proxy using VPP host stack. FC: Yes, but

Re: [vpp-dev] plugin tracing?

Hi Stanislav Yes, I know about the “trace add dpdk-input 100” trace and have used it fine. However, I am debugging a problem for interface-output and packets headed out would not be covered by dpdk-input, right? I have trex and VPP node directly connected. Trex sends packets to

Re: [vpp-dev] plugin tracing?

Hi Hemant, Try something like this: trace filter include upf6 100 trace add dpdk-input 100 dpdk-input for regular dpdk interfaces, virtio-input for tap/virtio interfaces, memif-input for memif interfaces. On Tue, 2 Mar 2021 at 19:58, hemant via lists.fd.io wrote: > Is this how a plugin

[vpp-dev] plugin tracing?

Is this how a plugin enables tracing? vpp# trace filter include upf6 5 I don't see any packets with this trace yet. Is it possible to add trace code to a plugin to support per-node trace? vpp# trace add upf6 5 trace add: node 'upf6' doesn't support per-node tracing.

[vpp-dev] VPP Host Stack - TCP Proxy without FIFO #vpp-hoststack

Dear All, The example application hs_apps/proxy.c ( https://github.com/FDio/vpp/blob/master/src/plugins/hs_apps/proxy.c ) seems to achieve the functionality of TCP proxy using VPP host stack. 1. It uses Session Layer API with FIFO. My understanding is that it includes 2 packet memcpy for all

Re: [vpp-dev] TCP connection using VPP

Hi Chetan, That is a pretty old version of vpp, so I would first recommend updating to something newer. Regarding the specific issue you are hitting, it’s hard to tell what’s causing it from your description. Maybe also try iperf3 like here [1] and see if that works. If that’s still not

Re: [vpp-dev] Performance of PAPI request in multi threaded VPP

Hi Xuo, I’ve seen a maybe related problem recently - could you try an image with https://gerrit.fd.io/r/c/vpp/+/31368 in it and see if you still have a similarly large difference or does it make things faster for you ? --a > On 25 Feb 2021, at 16:20, Xuo Guoto via lists.fd.io > wrote: >  >

[vpp-dev] Clean upgrade to vpp 21.01

Hi All, We have been using VPP 20.05 on our deployment servers, and need to upgrade to VPP 21.01. I have following questions regarding the upgradation: 1.How can we do upgrade activity so that state and configuration of the system is preserved ? 2.Is there any method by which we can automate

[vpp-dev] Wireguard in hub and spoke mode with peers behind NAT

Hi, I'm trying to configure VPP as a public VPN instance. Doesn't the VPP wireguard implementation support dynamically updating peer's endpoint address yet? Would have thought this should work: wireguard peer add wg0 public-key allowed-ip 192.168.50.0/24 Which it does on Linux but not on VPP.

[vpp-dev] TCP connection using VPP

Hi, I am using VPP 19.04.2. I was able to establish "ping" connectivity between 2 VPP instances running on 2 VMs. I am not able to establish TCP socket level connectivity. When I use sock_test_(server|client), the server just sits there waiting for the client and the client hangs as well.