[vpp-dev] vppctl doesn't report returned pings from rdma int

2019-05-22 Thread Thomas F Herbert
I noticed on a couple of servers that I have interconnected in packet.net that when using vppctl ping command, the rdma interface the ping command doesn't report returned packets. ping says 0 received, but the received packets show up in counts in show int though. --Tom -- *Thomas F Herbert

[vpp-dev] middlebox plugin

2019-05-22 Thread K Edeline
Hello, I have written a basic middlebox plugin some months ago and pushed it to vppsb. As the action on this repo is very low, I would like to make sure that someone saw it. I have found uses for it, so others might as well. If you are too busy, please ignore this message =) https://gerrit.fd.i

[vpp-dev] x86 ubuntu bionic gcc repointed from gcc-8 to gcc7

2019-05-22 Thread Ed Kern via Lists.Fd.Io
While debugging both a csit compilation problem and also some recent failures in bionic verify and merge jobs I have re-pointed gcc from gcc8 back down to gcc7 to see if that mitigates the problem. If it does not I will be rebuilding the X86 ubuntu image without gcc-8 (and its required package

Re: [vpp-dev] RFC: IPSec Tunnel remodel

2019-05-22 Thread Matthew Smith via Lists.Fd.Io
Hi Neale, We (Netgate/TNSR) use strongswan for IKE with a module that connects to the VPP binary API to manage IPsec tunnel interfaces. The API changes mostly look fine from my perspective. It won't be that much different than what we do now. Currently we create an IPsec tunnel interface before a

Re: [vpp-dev] RFC: IPSec Tunnel remodel

2019-05-22 Thread Ole Troan
Hi Neale, > Thanks for taking the time to examine the proposal. Lots of comments inline > >> Answering as a non VPP-IPsec'er. More like an anti-IPsec'er if anything. ;-) > >> Eecutive summary: Not a fan. > >> This tastes too much of the dreams of the IPsec'ers of the past. Where IPsec >> was a

Re: [vpp-dev] Packet classification based on range of values

2019-05-22 Thread Andrew Yourtchenko
No, you can’t do ranges in classifier. You can add multiple chained tables with different masks, but performance wise it most certainly be worse than simply create a mask with exact match for the port and adding 1112 entries for each of the ports you need to match. --a > On 22 May 2019, at 08:

Re: [vpp-dev] VCL hoststack test & asserts

2019-05-22 Thread Florin Coras
Hi Nathan, Just a quick reply. I regularly run make test-debug TEST=vcl so please continue to do that and please report any issues you may encounter. Something is weird because packets make it to udp-ping-local which shouldn’t be hit at all. Will take a look as soon as I can. Thanks, Florin