Hi Jérôme, The Intel DPDK/VPP cryptodev team is currently scoping the IPsec-MB 3.x upgrade work. At this stage, we expect the migration to be targeted for the VPP 27.02 release cycle. The initial effort will focus on compatibility and functional enablement. Performance benchmarking and optimisation are planned as follow-on work later next year. We'll keep the community updated as the plan evolves. Thanks, Kai
________________________________ From: [email protected] <[email protected]> on behalf of Jerome Tollet via lists.fd.io <[email protected]> Sent: Monday, October 12, 2026 18:37 To: [email protected] <[email protected]> Cc: Neale Ranns <[email protected]>; Fan Zhang <[email protected]>; MARION, DAMJAN <[email protected]>; Benoît Ganne <[email protected]>; Florin Coras <[email protected]>; Dave Wallace <[email protected]> Subject: [vpp-dev] Intel IPsec-MB 3.0.0: heads-up and possible VPP migration Hi all, Intel released IPsec-MB 3.0.0 on October 1: https://github.com/intel/intel-ipsec-mb/releases/tag/v3.0.0 VPP currently uses 2.0.2. The 2.0 series remains supported for security updates, so there is no immediate migration urgency. An initial source review suggests that upgrading would require more than a version bump: - The legacy Makefile build has been removed; the external package build would need to use CMake. - IMB_MGR is now opaque. VPP currently accesses its function pointers directly for AES-GCM, key expansion and HMAC preparation, so these paths would need to move to the public APIs. - The release adds AVX10 support, an additional AVX2 AES-CBC implementation, and correctness fixes. Performance improvements for VPP would need benchmarking; a general AES-GCM speedup is not established. Is anyone already looking into this upgrade? Would it make sense to evaluate it for the 27.02 cycle? Input from anyone interested—including crypto, IPsec, host stack, build and CSIT maintainers—would be welcome, particularly on compatibility and useful performance scenarios. Thanks, Jérôme
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#27261): https://lists.fd.io/g/vpp-dev/message/27261 Mute This Topic: https://lists.fd.io/mt/121719496/21656 Group Owner: [email protected] Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/14379924/21656/631435203/xyzzy [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
