Re: [vpp-dev] Odd problem in adding new session on vpp when its session table is full

Thanks for your following up. 😊 From: Andrew 👽 Yourtchenko Sent: Wednesday, September 26, 2018 12:31 AM To: Rubina Bianchi Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Odd problem in adding new session on vpp when its session table is full Dear Rubina, On 9/25

[vpp-dev] Want to switch to dpdk17.11.4 ,using vpp 18.0.1

Hi everyone, We are using Vpp18.0.1 that internally using dpdk 17.11 version. We want to switch to dpdk 17.11.4 as it has Mellanox fixes. Can anybody suggest the steps to do so ? Does it have any impact ? Thanks, Chetan Bhasin -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this

[vpp-dev] IPsec+ikev2 #vpp

Hi all,   I'm trying to setup ipsec tunnel in VPP and my gateway, but it always fails. After check I found my gateway is used ikev1 but VPP used ikev2, so if ikev1 and ikev2 can interactive support ? How to configure ? If can not interactive support, I want to explant the openswan ikev1 to VPP,

[vpp-dev] L2TP #vpp

Hi all,    I'm Ken and I want to setup L2TP tunnel in VPP and my gateway, but I found that my gateway is using L2TP + IPV4 but VPP only support L2TPv3 + IPV6, so I want to certainly to know if the L2TPV3 is backward support L2TP ? How to configure it ? And how to configure L2TPv3 + IPV4 ? If I w

Re: [vpp-dev] Odd problem in adding new session on vpp when its session table is full

Dear Rubina, On 9/25/18, Rubina Bianchi wrote: > Dear Andrew, > > Actually it's not a RFC standard , or known attack, we extracted the > restriction using experiment on linux netfiltter and tried to implement its > behavior. hmm okay. so my position about implementing it still stands then :-) A

Re: [vpp-dev] how to pull a 18.07 code??

Thank you Ed. :-) - J On Tue, Sep 25, 2018 at 11:43 AM Ed Warnicke wrote: > git checkout v18.07.1 > > will get you to the latest release code > > If you want the stable/18.07 branch: > > git checkout stable/1807 > > Ed > > > On September 24, 2018 at 1:43:06 PM, Jit Mehta ( > jitendra.harshad...

Re: [vpp-dev] how to pull a 18.07 code??

git checkout v18.07.1 will get you to the latest release code If you want the stable/18.07 branch: git checkout stable/1807 Ed On September 24, 2018 at 1:43:06 PM, Jit Mehta ( jitendra.harshad...@gmail.com) wrote: Could someone tell me how do I pull the 18.07 code? I have never pulled tree

Re: [**EXTERNAL**] Fwd: [vpp-dev] Failing to create untagged sub-interface

Neale, We are in need of providing a full blend of L2 and L3 services on each NIC. The permutations dictate a need for untagged to be separated from what VPP calls “default” (all non-explicit tagged traffic) on disparate sub-interfaces. I have the changes done locally that appear to make this w

Re: [vpp-dev] PCI domain should be 32 bit

On Tue, 25 Sep 2018 15:16:04 +0200 Damjan Marion wrote: > > On 25 Sep 2018, at 15:03, Stephen Hemminger > > wrote: > > > > I noticed that the PCI domain in VPP is limited to 16 bits. > > This is a problem on Azure/Hyper-V and other virtual environments. > > In these environments, the host will

Re: [vpp-dev] Odd problem in adding new session on vpp when its session table is full

Dear Andrew, Actually it's not a RFC standard or known attack, we extracted the restriction using experiment on linux netfiltter and tried to implement its behavior. I checked your patch, throughput is fine. After about 2000 seconds my throughput was still maximum and there was no drop-rate on

Re: [vpp-dev] PCI domain should be 32 bit

> On 25 Sep 2018, at 15:03, Stephen Hemminger > wrote: > > I noticed that the PCI domain in VPP is limited to 16 bits. > This is a problem on Azure/Hyper-V and other virtual environments. > In these environments, the host will generate a 32 bit synthetic value > when passing a PCI device throug

[vpp-dev] PCI domain should be 32 bit

I noticed that the PCI domain in VPP is limited to 16 bits. This is a problem on Azure/Hyper-V and other virtual environments. In these environments, the host will generate a 32 bit synthetic value when passing a PCI device through. The Linux kernel has 32 bit PCI domains, and libpciaccess used by

Re: [vpp-dev] continuous decline in throughput with acl

Excellent, I'm going out of office. I will rerun my test with latest version of master tomorrow. On Tue, Sep 25, 2018 at 3:03 PM Andrew 👽 Yourtchenko wrote: > Hmm this output does look exactly like what I had before commit ed435504 - > the IPv6 table bucket area gets corrupted by the overruns f

Re: [vpp-dev] continuous decline in throughput with acl

Hmm this output does look exactly like what I had before commit ed435504 - the IPv6 table bucket area gets corrupted by the overruns from IPv4 table arena. And then I spotted the leak which was happening during the rehash which I fixed in 11521387. Your (very few) freelists look like you don’t

Re: [vpp-dev] continuous decline in throughput with acl

I checked out from gerrrit, I think it's using latest master. ( but i make another version to make sure ) let me explain how I produce this situation, while true :) 1- run trex ./t-rex-64 --cfg cfg/trex_config.yaml -f cap2/sfr.yaml -m 7 -c 2 2-stop trex after ~120 seconds 3- wait until all sess

Re: [vpp-dev] question about bfd protocol message

Hi Xue, RFC 5884 is not implemented. Implemented RFCs are: 5880, 5881. Thanks, Klement Quoting 薛欣颖 (2018-09-25 12:56:56) >Hi Klement， >I'm interested in BFD for LSP (RFC 5884 ).  Thank you very much for your >reply. >Thanks, >Xue > >-

Re: [vpp-dev] question about bfd protocol message

Hi Klement， I'm interested in BFD for LSP (RFC 5884 ). Thank you very much for your reply. Thanks, Xue From: Klement Sekera via Lists.Fd.Io Date: 2018-09-25 16:57 To: 薛欣颖; vpp-dev CC: vpp-dev Subject: Re: [vpp-dev] question about bfd protocol message Hi Xue, I'm not sure what protocol mess

Re: [vpp-dev] A bug in IP reassembly?

Ok. I'll find some time tomorrow to push a patch fixing both v4 and v6. -Original Message- From: Klement Sekera Sent: Tuesday, September 25, 2018 6:02 PM To: Kingwel Xie ; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] A bug in IP reassembly? Hi Kingwel, thanks for finding this bug. Your p

Re: [vpp-dev] continuous decline in throughput with acl

Are you using latest master ? I fixed a couple of issues in bihash last week related to memory usage... if it’s the latest master, the output of used vs available looks weird... - so please let me know... As for the “general” growth - basically what happens is bihash doubles each bucket size wh

Re: [vpp-dev] continuous decline in throughput with acl

It's amazing!!! IPv4 Session lookup hash table: Hash table ACL plugin FA IPv4 session bihash 968086 active elements 65536 active buckets 13 free lists [len 16] 1 free elts [len 32] 1 free elts [len 256] 10669 free elts [len 512] 36768 free elts [len 1024]

Re: [vpp-dev] continuous decline in throughput with acl

Yes, that's right. I think is completely another issue from the patch you sent On Tue, Sep 25, 2018 at 1:35 PM Andrew 👽 Yourtchenko wrote: > Excellent, thanks! > > Memory usage - you mean in bihash arena ? > > --a > > On 25 Sep 2018, at 11:38, khers wrote: > > Throughput and session add/del is

Re: [vpp-dev] continuous decline in throughput with acl

Excellent, thanks! Memory usage - you mean in bihash arena ? --a > On 25 Sep 2018, at 11:38, khers wrote: > > Throughput and session add/del is stable as rock. The only danger i see is > growing memory usage. > look at this > > >> On Tue, Sep 25, 2018 at 11:31 AM khers wrote: >> Of course

[vpp-dev] CSIT IPsec AES-GCM 128 tests failing

Hello devs, We are observing IPSec failing tests in CSIT-perf, specially and only combination with aes-gcm (both interface AND tunnel mode, Integ Alg AES GCM 128). Note: Integ Alg SHA1 96, is working. Can you please help decrypt the error message below? Thank you. VAT error message (on both

Re: [vpp-dev] A bug in IP reassembly?

Hi Kingwel, thanks for finding this bug. Your patch looks fine - would you mind making a similar fix in ip4_reassembly.c? The logic suffers from the same flaw there. Thanks, Klement Quoting Kingwel Xie (2018-09-25 11:06:49) >Hi, > >  > >I worked on testing IP reassembly recently, t

Re: [vpp-dev] VMBus netvsc integration

> On 25 Sep 2018, at 11:08, Stephen Hemminger > wrote: > > I am looking into the best way to integrate setup of the Hyper-V/Azure > Network Poll Mode Driver > (netvsc PMD) from DPDK. The device shows up on vmbus (not PCI) therefore > setting it up transparently > in VPP requires some additio

Re: [vpp-dev] continuous decline in throughput with acl

Throughput and session add/del is stable as rock. The only danger i see is growing memory usage. look at this On Tue, Sep 25, 2018 at 11:31 AM khers wrote: > Of course, I test your patch, there is no slowdown with my scenario. I > need more time to test

[vpp-dev] VMBus netvsc integration

I am looking into the best way to integrate setup of the Hyper-V/Azure Network Poll Mode Driver (netvsc PMD) from DPDK. The device shows up on vmbus (not PCI) therefore setting it up transparently in VPP requires some additional setup logic; it can be setup now via other methods such as driverct

[vpp-dev] A bug in IP reassembly?

Hi, I worked on testing IP reassembly recently, the hit a crash when testing IP reassembly with IPSec. It took me some time to figure out why. The crash only happens when there are >1 feature node enabled under ip-unicast and ip reassembly is working, like below. ip4-unicast: ip4-reassembly-

Re: [vpp-dev] question about bfd protocol message

Hi Xue, I'm not sure what protocol message you mean. Can you please elaborate or point to RFC number & section which describes the message you're interested in? Thanks, Klement Quoting xyxue (2018-09-25 09:48:58) >Hi guys�� >I��m testing the bfd . Is the bfd support protocol message?  >

Re: [vpp-dev] Make test failures on ARM - IP4, L2, ECMP, Multicast, GRE, SCTP, SPAN, ACL

I created the new tickets under CSIT, which is an oversight, but I fixed it and now the tickets are under VPP: *GRE crash *SCTP failure/crash o Me and Marco resolved a similar issue in the past, but this c

Re: [vpp-dev] continuous decline in throughput with acl

Of course, I test your patch, there is no slowdown with my scenario. I need more time to test other scenarios and make sure. On Mon, Sep 24, 2018 at 3:11 PM Andrew 👽 Yourtchenko wrote: > Cool. Then it is probably indeed the session requeues that are not yet > efficient... I have been looking at

[vpp-dev] QoS architecture issues #VPP_QoS #VPP_Hard_Code #VPP_Stability

I have a question about the architecture of QoS Section in VPP: - Why the implementation code of the features in this section is static generally? - Is the limitation of resource management system has lead to this decision (static code)? - If features are not hard-coded, does it cause instabilit

[vpp-dev] question about bfd protocol message

Hi guys， I’m testing the bfd . Is the bfd support protocol message? Thanks, Xue -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#10633): https://lists.fd.io/g/vpp-dev/message/10633 Mute This Topic: https://lists.fd.io/mt/26218372/21656 Group Own

Re: [**EXTERNAL**] Fwd: [vpp-dev] Failing to create untagged sub-interface

Hi Mike, Perhaps you could tell us why you want to create an untagged sub-interface. Regards, Neale De : au nom de "Bly, Mike" Date : vendredi 21 septembre 2018 à 17:06 À : "John Lo (loj)" , Edward Warnicke , "vpp-dev@lists.fd.io" Objet : Re: [**EXTERNAL**] Fwd: [vpp-dev] Failing to create