nginx.conf
Description: Binary data
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22670): https://lists.fd.io/g/vpp-dev/message/22670
Mute This Topic: https://lists.fd.io/mt/96623842/21656
Mute
Folks,
As discussed in the last 2 VPP Community meetings, I have created a
draft build artifact policy for the VPP project [0].
Please review and provide comments to this email thread.
Thanks,
-daw-
[0] https://wiki.fd.io/view/VPP/BuildArtifactRetentionPolicy
-=-=-=-=-=-=-=-=-=-=-=-
Links:
I tested using nat44 handoff under multi-workers, the forwarding
performance is not as good as single worker.
for example:
GE1 bound in thread 1
GE2 bound in thread 2
testcenter ->GE1->do_handoff--GE2--->testcenter
Is it a problem with my settings?
Why can't sent envent to per worker
Hi All,
What is the impact of memif and tap interfaces on the memory and CPU?
We are using VPP as a data plane and having 8 memif & 8 tap interfaces.
*The tap interface config is as follows:*
*Number of RX Virtqueue 1Number of TX Virtqueue 2*
*Virtqueue (RX) 0 qsz 256,
Hi Stanislav,
Following are the steps to reproduce in VPP 20.09:
ip link add name vcsr-f1c1 type veth peer name f1c1
ip link set dev f1c1 up
ip link set dev vcsr-f1c1 up
create host-interface name vcsr-f1c1
lcp create host-vcsr-f1c1 host-if Ethernet0
check in show tap
Check for fd in
Hi Pragya,
Could you provide me with the steps to reproduce?
On Tue, 28 Feb 2023 at 14:10, Pragya Nand Bhagat <
pragya.nand.bhaga...@gmail.com> wrote:
> Hi Stanislav,
>
> I debug it further. Here are the steps
>
> 1> In my config I am creating a veth interface in kernel
> 2> for that
vm->node_main.node_by_name only used in main thread,worker thread the
vm->node_main.node_by_name must be null.
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22664): https://lists.fd.io/g/vpp-dev/message/22664
Mute This Topic:
Executive summary:
Jira ticket VPP-2072 [4] describes how random RSS keys
make some performance test results too random to be useful.
This vpp-dev thread can be used for discussing ways
how to make CSIT results deterministic.
Longer version:
As far as I can tell, dpdk plugin + ICE driver
is the
Yes, you are right. The show error counters.
vpp# show errors
Count Node Reason
Severity
34dhcp-client-process DHCP discover packets sent
error
Count Node
Hi
when I use vpp-2110, vlib_worker_thread_node_refork vm->node_main.node_by_name
is pointer to main thread,but when main thread node_by_name hash_vec resize and
resize buffer not continuation cause worker thread vm->node_main.node_by_name
is wild pointer，so I want modified
Thank you both, that fixed my issue.
Note that when using the config from
https://fdio-vpp.readthedocs.io/en/latest/usecases/vhost/xmlexample.html#:~:text=%3Ccell%20id%3D%270%27%20cpus%3D%270%27%20memory%3D%27262144%27%20unit%3D%27KiB%27%20memAccess%3D%27shared%27/%3E
it
results in a kernel panic
Hi Chetan,
In our case we are observing this issue occasionally exact steps to
recreate the issue are not known.
I made changes to our process node as suggested by dave and with these
changes trying to recreate the issue.
Soon I will update my results and findings in this mail thread.
Thanks
Hi Sudhir,
Is your issue resolved?
Actually we are facing same issue on vpp.2106.
In our case "api-rx-ring" is not getting called.
in our usecase workers are calling some functions in main-thread context
leading to RPC message and memory is allocated from api section.
This leads to Api-segment
The dhcp client has a number of “show error” counters. Do you see any of the error counters increasing? The packet trace I’d like to see would be from “trace add 1000” … “show trace max 1000” or similar. The pcap trace implies that the dhcp offer packets are dropped, but we need to work out why…
There is something in the DHCP OFFER the client does not like and moves back to
new DHCP session. Or the DHCP OFFER never made it to the client.
Hemant
From: vpp-dev@lists.fd.io On Behalf Of Thakur, Anagha
Sent: Thursday, March 02, 2023 4:02 PM
To: vpp-dev@lists.fd.io
Subject: Re:
I do see DHCP Offer in the packet tracer from the Server which I have set up on
the other side.
But VPP does not send any DHCP Request out, instead I always see that VPP
continuously keeps sending DHCP Discovery.
I have attached tx and rx pcap trace in my prevous email.
Best Regards,
Anagha
It is likely that you are missing memAccess=’shared’
https://fdio-vpp.readthedocs.io/en/latest/usecases/vhost/xmlexample.html#:~:text=%3Ccell%20id%3D%270%27%20cpus%3D%270%27%20memory%3D%27262144%27%20unit%3D%27KiB%27%20memAccess%3D%27shared%27/%3E
From: on behalf of Benjamin Vandendriessche
Hi Benjamin,
Can you please take a look at
https://www.redhat.com/en/blog/hands-vhost-user-warm-welcome-dpdk and
especially the part for 'numa' configuration for the KVM guest?
Xiaodong
On Thu, Mar 2, 2023 at 9:24 AM Benjamin Vandendriessche
wrote:
>
> Hello,
>
> I followed the guide here
>
Do you see a response to the DHCP Discover packets?
What does the vpp packet tracer show?
Thanks... Dave
> On Mar 2, 2023, at 7:03 AM, Thakur, Anagha wrote:
>
>
>
> Hello,
>
> I am testing DHCP client feature from VPP stack (v22.02) onto our system.
>
> My setup is: I run k8s cluster
Hello,
I followed the guide here
https://fdio-vpp.readthedocs.io/en/latest/usecases/vhost/vhost.html and get
into an issue as the VM running over libvirt (6.0.0) is not receiving the
traffic from the bare metal machine.
I'm using Ubuntu 20.04.3 LTS and I run VPP version:
vpp# show ver
vpp
Hoi,
Can you be more specific on 'statistic data extraction' What numbers/data
are you looking for?
Take a look at the 'stats segment' which you might address read-only using
/run/vpp/stats.sock or mount as a FUSE filesystem with
https://s3-docs.fd.io/vpp/22.06/developer/extras/vpp_stats_fs.html
Hello community,
I need your help regarding statistic data extraction in vpp.
Any suggestion or reference would be helpful.
Thanks,
Dibas
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22649): https://lists.fd.io/g/vpp-dev/message/22649
Mute
Hello,
I am testing DHCP client feature from VPP stack (v22.02) onto our system.
My setup is: I run k8s cluster on x86 system in which I have a pod which uses
VPP stack and it accesses physical NIC interface using DPDK and SR-IOV. There
are two physical interfaces which we use in VPP, one of
Hoi Pim
The dhclient of Ubuntu 22.04 doesn't have the -B option but
systemd-networkd has a RequestBroadcast option
(https://www.freedesktop.org/software/systemd/man/systemd.network.html#RequestBroadcast=)
which seems to do the same. I still don't see the response on the TAP
interface.
Hoi,
aha- the response is going to an IPv4 address that the server has assigned
to you (192.168.25.1.67 > 192.168.25.36.68) and because that address is not
configured in VPP, it will not relay it to the TAP.
For isc-dhclient, I think you can use -B (
https://linux.die.net/man/8/dhclient) to ask
Hoi Baurine,
Do you happen to have the ability to tcpdump on the DHCP server? I am
confident that linux-cp (and the lcpng) will forward this traffic out
because it's a broadcast packet (and all traffic will be handled), but I am
not confident that the packet is (a) arriving at the DHCP server and
Hi Xiaodong
Yes and if i add an ip to the tap in Linux it also shows up in VPP. I'm
adding the full config at the end of the mail.
No I can't get an answer that's what I'm trying to achieve.
[stefan@gw02:~]$ sudo dhclient -v ge0-3
Listening on LPF/ge0-3/00:0d:b9:50:99:0a
Sending on
Hi Stefan,
Did you also enable 'linux-nl' plugin, in addition to 'linux-cp'? I suppose
'linux-nl' is the one which syncs IP addresses/routes from Linux to VPP.
BTW, were you able to get the IP address / route after you ran the dhcp
client on the tap interface? If not what do the error / log
Hi
I would like to use VPP with the lcpng plugin as a home gateway where I
have to use dhcp to get an IP from my ISP. If I use the dhcp plugin of
VPP it works and I can see an IP address on the interface on Linux but
no route which was to be expected as lcpng doesn't sync routes from VPP
to
Hi,
You may try with vpp-swan plugin that makes Strongswan offloading IPsec
to VPP and keep the IKE part to itself.
The project is still not perfect but takes care of child-SA and
overlapped subnet.
As of ipip interface instead of ipsec interface - it is correct behavior
as it allows
Hemant,
VPP build infrastructure does not currently support building docker
images containing the VPP pkg-deb. You'll have to create your own
Dockerfile to do so.
Thanks,
-daw-
On 2/28/2023 3:09 PM, hemant via lists.fd.io wrote:
Folks,
I use “sudo make pkg-deb” to build.
How to I build
Hi Varun,
Pls find my inputs inline.
Regards
Ashish Mittal
On Sat, 25 Feb, 2023, 11:23 pm Varun Tewari, wrote:
> Hello Team,
>
> I am new to VPP and probing this technology to build an IPSec responder
> for our use-cases.
> Our initial tests do show the performance might of VPP.
> However on
Hi All,
I'm using vpp 20.09.
When I create around 180 - 200 bvi interface vpp gets stuck and I'm unable
to login using vppctl.
#!/bin/bash
for var in
{202..1199}
do
echo "creating bvi $var"
vppctl bvi create instance $var
sleep 1
done
same happens with loopback interface.
Following is the
Can you send your queries in sort mail, it's too long mail.
On Wed, 1 Mar, 2023, 4:43 am Srikanth Akula, wrote:
> Hi Team,
>
> Any help is appreciated on this topic.
> We are trying to do a POC with IPSec+Ikev plugin of vpp , any
> suggestions/pointers would be helpful in this regard.
>
>
Hi Team,
Any help is appreciated on this topic.
We are trying to do a POC with IPSec+Ikev plugin of vpp , any
suggestions/pointers would be helpful in this regard.
Regards,
Srikanth
On Sat, Feb 25, 2023 at 9:53 AM Varun Tewari wrote:
> Hello Team,
>
> I am new to VPP and probing this
Folks,
I use "sudo make pkg-deb" to build.
How to I build a docker image for pkg-deb?
Hemant
smime.p7s
Description: S/MIME cryptographic signature
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22633):
Hi,
We are using dpdk vmxnet3 driver for our use case. We are getting below
errors in show hardware interfaces .
rx q0 rx buf alloc failure 8846166
rx q1 rx buf alloc failure 6245832
Whenever we check “show dpdk buffers” , we see very few mbuf are
any input?
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22631): https://lists.fd.io/g/vpp-dev/message/22631
Mute This Topic: https://lists.fd.io/mt/97168468/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe:
Hi Stanislav,
I debug it further. Here are the steps
1> In my config I am creating a veth interface in kernel
2> for that interface I am creating a hostif interface using "create
host-interface name "
3> This intern create 4 fds in "show unix files"
4>
[image: image.png]
5> I think this 59
Hi Stanislav,
Thanks for the response.
Please find the response inline
Do you see any errors in `show log`?
[Pragya] No I don't see any error log
Do you see this fd 59 in `show unix files`?
[Pragya] Yes, I can see 59 in show unix files
"show unix files" fetch the fd from
Thanks for letting us know.
-daw-
On 2/26/2023 8:49 AM, Jens Rösiger via lists.fd.io wrote:
Hi Dave,
i have apply the patch and the build process has no more errors. All
.deb packages are created.
Thank you very much.
--
Jens
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent
Hi Dave,
i have apply the patch and the build process has no more errors. All .deb
packages are created.
Thank you very much.
--
Jens
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22627): https://lists.fd.io/g/vpp-dev/message/22627
Mute This
Hello Team,
I am new to VPP and probing this technology to build an IPSec responder for our
use-cases.
Our initial tests do show the performance might of VPP.
However on probing this further in depth, I noticed a few limitations and I am
dropping this rider seeking clarification around these.
Hi,
I was testing the LCP plugin with the Netlink listener and faced two
major issues:
1. If the LCP interface is being created on startup and you create
sub-interfaces directly afterwards, then linux-cp/router will flush the
table, install all routes and addresses again and this goes
Hi Eugene!
I recently worked on the policer, and you seem right.
In VPP v22.10 (and even in the latest v23.02), a policer's name is used as a
hashmap's key but is never freed when the policer is deleted.
My recent modifications to the policer should solve this issue. ( 37873:
policer: API
Hi Stanislav,
I repeated test with disabled api trace
vpp# show api trace-status
RX Trace disabled
TX Trace disabled
vpp# show threads
ID NameTypeLWP Sched Policy (Priority) lcore
Core Socket State
0 vpp_main178961
Hello Pragya,
Do you see any errors in `show log`?
Do you see this fd 59 in `show unix files`?
On Fri, 24 Feb 2023 at 07:59, Pragya Nand Bhagat <
pragya.nand.bhaga...@gmail.com> wrote:
> Hi All,
>
> I'm using an older version of vpp 20.09 .
> When I create a bvi interface using bvi create cli.
Hi All,
I'm using an older version of vpp 20.09 .
When I create a bvi interface using bvi create cli.
A corresponding tap is created with same name as follows:
*itf-pair: [19] bvi100 tap-39-bvi100 bvi100 960 type tap *
But one FD of the tap interface is *missing* when I check in linux.
vpp#
Jens,
Forwarding to vpp-dev@lists.fd.io where VPP contributors answer these
types of questions.
The srtp plugin is not built in the CI [0] and ubuntu-22.04 includes
version 2.4.2 of libsrtp2 [1]. The ekt field was deprecated in 2.4.0
since it was never fully implemented and the draft
Does anybody have any tips on implementing SIIT-DC? There is just
slightly more than no documentation about it online, and the one VPP
page that mentions it was last updated 6 years ago.
So far I have translation working in one direction. The v4 packets get
rewritten correctly and arrive at the
Congratulations to everyone in the FD.io community who continuing the
excellence in delivering VPP features, fixes, and improvements on a rock
solid cadence.
A special thanks to Andrew for his effort to automate & execute the
release process.
-daw-
FD.io TSC Chairperson
On 2/22/23 11:46
How can i user IPFIX / Flowprobe for IPv4 and IPv6 flows on the same interface?
My setup (vppctl):
vpp# set ipfix exporter collector 192.168.190.2 src 192.168.190.12
template-interval 20 port 2055 path-mtu 1450
vpp# flowprobe params record l3 l4 active 20 passive 120
Now, i can set flowprobe
Hi Team,
I have a deployment where control plane runs on separate POD and vpp runs on
separate POD. sctp packets and some udp packets are coming as control packets.
How to forward sctp and UDP packet to control plane POD.
Thanks,
Praveen
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages
Hi Team,
I am running a vpp 21.06 version. attaching two VF from Intel 82599 VF.
Facing the error which starting VPP.
vppctl sh hardware-interface
NameIdx Link Hardware
eth0 1 up eth0
Link speed: 10 Gbps
RX Queues:
Hi all,
VPP release 23.02 is complete ! Artifacts are at their usual place at
https://packagecloud.io/fdio/release
Many thanks to all the contributors for their work that went into the release,
and thanks to Dave Wallace and Vanessa Valderrama for the help in the process !
Onwards to 23.06!
Hello everyone,
I am currently working on synchronizing session information between
two nodes in a High Availability (HA) setup. When the Master node
sends session information to the Backup node, it is important that the
information is handed off to the corresponding worker thread in order
to
Hi Eugene,
Could you run again with disabled api trace, wait until let's say 1g is
consumed and then show us the output of show memory main-heap verbose?
On Tue, 21 Feb 2023 at 20:13, wrote:
> Hi Steven,
>
>
>
> Thanks for response.
>
>
>
> I added “nitems 65535” and repeated test. The
Hi,
Thank You For Your response.
There is one more case. we are observing rx buffer allocation error in
vppctl show hardware output. this error rx buffer allocation failure is
happening in the dpdk vmxnet3_recv_pkts() function.
rx q0 rx buf alloc failure 8846166
Hi Steven,
Thanks for response.
I added “nitems 65535” and repeated test. The main-heap usage still growing up.
Also I completely disabled the “api-trace” and nothing changed =(
Best Regards,
Eugene
From: vpp-dev@lists.fd.io On Behalf Of steven luong via
lists.fd.io
Sent:
I bet you didn’t limit the number of API trace entries. Try limit the number of
API trace entries that VPP keeps with nitems and give it a reasonable number.
api-trace {
on
nitems 65535
}
Steven
From: on behalf of
Hi Dear Developers,
I am testing creating and deleting of policers and it looks that there is a
memory leak
VPP Version: v22.10-release
My simple script:
#!/bin/env python
from vpp_papi import VPPApiClient
from vpp_papi import VppEnum
import os
import fnmatch
import sys
Hi Dave,
Thank you very much for your inputs. I will try this out and get back to
you with the results.
Regards,
Sudhir
On Mon, Feb 20, 2023 at 6:01 PM Dave Barach wrote:
> Please try something like this, to eliminate the possibility that some bit
> of code is sending this process an event.
Please try something like this, to eliminate the possibility that some bit of
code is sending this process an event. It’s not a good idea to skip the
vec_reset_length (event_data) step.
while (1)
{
uword event_type, * event_data = 0;
int i;
Hi Dave,
Thank you for your response and help.
Please find the additional details below.
VPP Version *21.10*
We are creating a process node* rtb-vpp-epoll-process *to handle control
plane events like interface add/delete, route add/delete.
This process node waits for *10ms* of time (Not
HI：
*
I have the same problem，
bfd process node stop running. I raised this issue,
https://lists.fd.io/g/vpp-dev/message/22380
I think there is a problem with the porcess scheduling module when using the
time wheel.
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
Hi,
I recently started to try to use MLX MT27520 ConnectX-3 Pro cards
(2x40Gbps) with VPP. The card itself should be supported in DPDK with
the mlx4 PMD, but I had to add a small patch to vpp-dpdk to allow 1007
as device ID.
Besides that, I'm not able to start VPP because it crashes with
Process is a bit of a misnomer, “cooperative multitasking thread” would be more
accurate. Src/vlib/main.c makes no effort to interrupt process nodes. If a
process runs forever vpp will have a bad day.
Recitations: which version of vpp is involved? Please send “show run” output
for the
Sunil is using dpdk vmxnet3 driver. So he doesn’t need to load VPP native
vmxnet3 plugin. Gdb dpdk code to see why it returns -22 when VPP adds the NIC
to dpdk.
rte_eth_dev_start[port:1, errno:-22]: Unknown error -22
Steven
From: on behalf of Guangming
Reply-To: "vpp-dev@lists.fd.io"
Hi Team,
We have a process node. which we will use to do some control plane related
activity. Sometimes we observe that this *process node is
suspended indefinitely*.
I know that if any process node is taking *Unreasonably long time* such
nodes will not be scheduled further. But not able to
you can use vppctl show log to display more startup meesage.
VMXNET3 need load vmxnet3_plugin.so.
zhangguangm...@baicells.com
From: sunil kumar
Date: 2023-02-17 21:46
To: vpp-dev
Subject: [vpp-dev] VPP Hardware Interface Output show Carrier Down
Hi,
We are observing the state of the vpp
Hi,
We are observing the state of the vpp interface as carrier down in command
vppctl show hardware output. This is observed while starting the vpp:
vppctl show hardware output:
==
device_c/0/0 2down device_c/0/0
Link speed: 10 Gbps
Thank for the explanation, I will check it next time when pops up. If the
mentioned problem identified, we will increase the memory for the worker node
where the build is running.
Regards,
Laszlo
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online
Hi Laszlo,
As Stanislav said, probably not enough RAM on your box to handle the build
parallelism. On subsequent runs, once some files are compiled, the parallelism
drops and the build will pass.
/neale
From: vpp-dev@lists.fd.io on behalf of Stanislav Zaikin
via lists.fd.io
Date: Monday,
Hi vpp-dev and csit-dev,
Do you guys bumped into below issue on icelake 8380 platform with ubuntu 22.04 ?
1. make build-release; make pkg-deb
Built vpp from vpp repo master branch, the latest commit id as below,
commit 590a82c237337f560cc3d5beac47a235c5e97eac
Author: Tianyu Li
VPP CLI configuration and VPP version.
vpp# show qos record
TenGigabitEthernet1c/0/1.1914:
MPLS
TenGigabitEthernet1c/0/1.3741:
MPLS
IP
vpp# show qos mark
TenGigabitEthernet1c/0/1.1914( incoming interface ):
ext: map:0
VLAN: map:2
MPLS: map:0
IP: map:0
TenGigabitEthernet1c/0/1.3741
Hi Burcu,
Yes you are able to use VPP host stack implementation with LD_PRELOAD.
Please refer to https://wiki.fd.io/view/VPP/HostStack/LDP/sshd .
Best regards,
Filip Varga
ut 14. 2. 2023 o 14:50 Matthew Smith via lists.fd.io napísal(a):
>
> You set the next hop address to the same as the
You set the next hop address to the same as the local interface address:
On Tue, Feb 14, 2023 at 7:42 AM Burcu YUKSEL <
burcu.yuk...@ulakhaberlesme.com.tr> wrote:
[...]
> set int ip address memif0/0 10.10.1.1/24
>
[...]
> abf policy add id 0 acl 0 via 10.10.1.1 memif0/0
>
If you want packets
Hi Matthew,
According to the information that you gave us, we run the below configuration :
VPP version : 23.02-rc0~219-g6903da2
set int ip address TwentyFiveGigabitEthernetd8/0/0 10.20.10.22/24
set interface state TwentyFiveGigabitEthernetd8/0/0 up
create interface memif id 0 master
Hello!
I am trying to assign qos egress map id 3 to TenGigabitEthernet1c/0/1.3741
interface. For a while, VPP works correctly, and assigns id 3 correctly, and
when displaying "show qos mark", it also outputs id 3 correctly.
But after a while, it stops working. I assign id 3, but in the "show qos
Folks,
In light of the recent VPP Security Vulnerability, the FD.io TSC
discussed and would like to recommend that each project adopt and
publish a retention policy for packages uploaded to
https:packagecloud.io/fdio.
The Security Response Team is recommending that any package which was
Folks,
A vulnerability in the VPP IPSec plugin was identified by Benoit Ganne
who has also provided a fix that has been committed to master and
cherry-picked to all affected VPP Release branches.
Here is the Security Advisory report for CVE-2022-46397 [0]:
Description:
FP.io VPP (Vector
Burcu,
Unfortunately, no one in the community has stepped up to maintain the
Centos build infrastructure after Red Hat left the community a few years
back.
VPP 20.09 was the last supported release of CentOS-7 and VPP 21.10 was
the last supported release of CentOS-8 by the FD.io CI jobs.
The
Hello,
We have exactly the same errors when we try to compile VPP v23.02 on Centos 7.
Is there anyone who can solve this problem?
Regards,
Burcu
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22585): https://lists.fd.io/g/vpp-dev/message/22585
Hi Laszlo,
Have you checked the system's logs? It might be killed by an out-of-memory
killer.
On Mon, 13 Feb 2023 at 11:45, Laszlo Király wrote:
> Hello,
>
> Time to time our automated build fails during ipsec-mb external
> dependency. It is not a constant failure, usually passing for second
Hello,
Time to time our automated build fails during ipsec-mb external dependency. It
is not a constant failure, usually passing for second run.
The failure have been seen on vpp versions 22.06 and 22.04.
--- building ipsec-mb 1.1 - log: /vpp/build/external/rpm/tmp/ipsec-mb.build.log
Hi Guangming
You are right, and it is part that I’ve overlooked. However, your change is
only half of the fix – the other half that needs to be changed is mask
calculation.
BR,
Piotr
From: zhangguangm...@baicells.com
Sent: Monday, February 13, 2023 4:40 AM
To: Bronowski, PiotrX ; vpp-dev
Hi, Piotr
The follow is example fixed code.
ipsec_fp_get_policy_5tuple (ipsec_policy_t *policy, ipsec_fp_5tuple_t *tuple,
bool inbound)
{
memset (tuple, 0, sizeof (*tuple));
tuple->is_ipv6 = policy->is_ipv6;
if (tuple->is_ipv6)
{
tuple->ip6_laddr =
Hi, Piotr
My question is that the src and dst entry in fp_5tuple in function
ipsec_fp_ip4_add_policy are diffrent from src and dst entry in fp_5tuple
in function ipsec4_input_node. So inboud match will be not match failed.
You see in IKE code kernel_vpp_ipsec.c , the
Hi Guangming
I am not sure if I understand your question. There was a bug, in implementation
of fast path for inbound traffic, where I've messed up translation of src and
dst to the local and remote address, but it has been fixed with
commit 1d9780a43fe54a55c7540f3528b8703ede0a5871
Author:
Hi Piotr,
I found you work on the ipsec policy mode optiimization, introduced a
fast path about ipsec policy match .
In the fast path ipv4 inbound , add item into hash, you used traffic
selector src and dst address, but search item from hash
you used esp packetr src and dst
Folks,
Please register to join the virtual LFN Developer & Test Forum next week!
Thanks,
-daw-
Forwarded Message
Subject:[tsc] February LFN Virtual Developer & Testing Forum
Date: Fri, 10 Feb 2023 08:12:55 -0800
From: Casey Cain
To: TAC , ODIM TSC
, ONAP TSC ,
You haven't shared any details of where you placed these calls in the dpdk
plugin, but I suspect that they were successful because they were executed
after the dpdk plugin had already called rte_eal_init(). When called from
your plugin, rte_eal_init() had probably not been called yet.
You could
Hi Burcu,
You can probably use ABF (https://wiki.fd.io/view/VPP/ABF) to do this. When
you have linux-cp enabled and an interface is added to a linux-cp interface
pair, the normal behavior is that packets received on that interface which
are destined to the interface IP address will be punted to
Hoi,
Linux CP forwards all (unicast, multicast, ARP) through the TAP tunnel to
the Linux kernel. It's not possible to add a classifier that selectively
forwards some but not all traffic. Matthew mentioned in a thread about NAT
(which kind of wants to do the same thing, perform NAT on some of the
Hello Everyone,
We want to transfer the SSH packets coming from Device A to Linux Stack, other
packets to Application B full duplex. We transferred packets with using LCP
plugin. However in this case we have transferred all the packets to Linux
stack. Is there a way to forward only TCP packets
Hello Everyone,
We want to transfer the SSH packets coming from Device A to Linux Stack, other
packets to Application B full duplex. We transferred packets with using LCP
plugin. However in this case we have transferred all the packets to Linux
stack. Is there a way to forward only TCP packets
Hi,
I saw the change but had not had time to review it yet. Hopefully I'll be able
to do so in the coming days.
We are already in RC2 for 23.02 so I do not think it will be part of it as it
does not seem to be a critical bug fix.
Best
ben
> -Original Message-
> From:
Hi Benoit and vpp-dev,What is your opinion about this patch
https://gerrit.fd.io/r/c/vpp/+/38135 ? Could it be merged in FD.io 23.02 ?
Best Regards
Yulong Pei
-Original Message-
From: vpp-dev@lists.fd.io On Behalf Of Pei, Yulong
Sent: Tuesday, February 7, 2023 10:10 PM
To:
Hello Stanislav,
Sorry for late answer, I was temporary deprived of my testbed :-)
So, applied patches:
1. Last patch attached to this thread
2. Patch from Gerrit from above.
Looks everything working now. OSI/IS-IS packets are passed to CP, routing
protocol working.
Issue with VPP crash after
Hi all,
The VPP RC2 milestone is done, the RC2 artifacts are available from the
packagecloud repository at https://packagecloud.io/fdio/2302
Now we accept only the fixes from CSIT testing in preparation for the release,
which is scheduled to happen in 2 weeks from now.
--a /* your friendly
101 - 200 of 17496 matches
Mail list logo
