Re: [vpp-dev] About cnat FIB

2021-04-06 Thread liuyacan
Hi  Nathan,   We hope to use CNAT to play the role of kube-proxy.     Since our applications specifies namespaces,  so we want CNAT rules    to take effect in different FIB tables.Best Regards,Yacan On 4/6/2021 20:59,Nathan Skrzypczak wrote: Hi Yacan,The

[vpp-dev] VPP setup for TCP

2021-04-06 Thread Kaplan, Michael A
Greetings, I am running into performance issues passing TCP traffic through VPP. My network of docker containers achieves ~25 Gbps using iperf when VPP is disabled. When running VPP on the edge nodes of my network, that same throughput throttles back to ~300 Kbps. I can see the TCP packets trav

Re: [vpp-dev] Cisco VIC 1495 performance with DPDK and VPP 21.01

2021-04-06 Thread Vratko Polak -X (vrpolak - PANTHEON TECHNOLOGIES at Cisco) via lists.fd.io
> For VPP release 20.01, I have found few [0] results [1] I meant VPP 21.01; links are pointing there, it is just a typo. Vratko. -Original Message- From: Vratko Polak -X (vrpolak - PANTHEON TECH SRO at Cisco) Sent: Tuesday, 2021-April-06 20:59 To: Manoj Kumar (manojku5) Cc: vpp-dev@lis

Re: [vpp-dev] Cisco VIC 1495 performance with DPDK and VPP 21.01

2021-04-06 Thread Vratko Polak -X (vrpolak - PANTHEON TECHNOLOGIES at Cisco) via lists.fd.io
In CSIT, we have one testbed type (3-node Haswell) with older cards (Cisco VIC 1385 and even Cisco VIC 1227), but we are running tests on those very rarely (those NICs are not very popular, and we prefer to run larger test selection on fewer NICs). For VPP release 20.01, I have found few [0] resul

Re: [vpp-dev] update checksum for ipv6?

2021-04-06 Thread hemant via lists.fd.io
Sorry, I wasn't clear. VPP IPv4 supports IP update checksum. The IPv6 header has no checksum. But why doesn't VPP support update checksum for layer-4, e.g., udp/tcp/icmp? A routed data plane may reply to certain messages (e.g., icmp, tcp, gtpu echo) in the data plane and such replies could use a

[vpp-dev] update checksum for ipv6?

2021-04-06 Thread hemant via lists.fd.io
VPP IPv4 supports update checksum but IPv6 does not. Why is that? IPv6 only had a compute and verify checksum. Hemant smime.p7s Description: S/MIME cryptographic signature -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#19114): https://list

Re: [vpp-dev] Creating Sub Interfaces in VPP #vpp-memif #vpp #dpdk

2021-04-06 Thread abhinav.mishra via lists.fd.io
Hi Mrityunjay, There are 2 cases here : * (multipoint-to-point) Traffic is generated at NIC1, NIC2, NIC3 & NIC4. Successfully received at NIC5 using subinterfaces * (point-to-multipoint) Traffic is generated at NIC5. But the subinterfaces of NIC5 cannot receive any traffic from its parent interf

Re: [vpp-dev] TCP timeout

2021-04-06 Thread Marcos - Mgiga
Hello Filip, I checked it out, take a look at show nat44 deterministic mapping: It’s 1k ports for each user, and yet, I notice some packet drops even in host that is far from that. Any other sugestion? Best Regards De: vpp-dev@lists.fd.io Em nome de Filip Varga via lists.fd.io

Re: [vpp-dev] About cnat FIB

2021-04-06 Thread Nathan Skrzypczak
Hi Yacan, There is no particular reason, just that the code for CNAT is quite new, and we never implemented vrf support. I don't see any blocker to add it if you need it. What is the use-case you would like to support ? By specifying a table ID, do you mean for matching traffic ? Also for the rew

Re: [vpp-dev] TCP timeout

2021-04-06 Thread Filip Varga via lists.fd.io
Hi, Yes you should be able to use the command on v20.05 vpp build. I don't think the Out of ports error is timeout related. I would check mapping configurations. nat44 deterministic add in / out / Best regards, Filip Varga From: mar...@mgiga.com.br Sent: Tuesday, April 6, 2021 2:16 PM To: Fil

Re: [vpp-dev] TCP timeout

2021-04-06 Thread Marcos - Mgiga
Hello Filip, thats great to know about this update . Do you mind telling me if am I able to change this timeouts values in 20.05 using the following sintax: set nat timeout udp 300 tcp-established 900 tcp-transitory 240 icmp 90 ? Another point is I’m getting the “out of ports” error in th

Re: [vpp-dev] Thread safety issue in NAT plugin regarding counter for busy ports

2021-04-06 Thread Marcos - Mgiga
Hello Elias / Klement, Do you think this issue can affect determistic mode in version 20.05? Best Regards Marcos -Mensagem original- De: vpp-dev@lists.fd.io Em nome de Elias Rudberg Enviada em: terça-feira, 6 de abril de 2021 02:38 Para: ksek...@cisco.com Cc: vpp-dev@lists.fd.io Assunt

Re: [vpp-dev] TCP timeout

2021-04-06 Thread Filip Varga via lists.fd.io
Hello Marcos, I am currently working on updating docs for all NAT plugins. These docs & introduction should be than located in the appropriate plugin directory in markdown file. The wiki docs is outdated. To use DET44 nat (it is a separate plugin now) you would have to first enable the plugin

Re: [vpp-dev] How to enable Mellanox compilation in VPP 21.01

2021-04-06 Thread chetan bhasin
Thanks Guys ! We have a requirement to compile vppp with DPDK mellanox driver . Right now issue what i understood is , when we compile vpp_2101 , using make build-release , it builds mellanox , but when it is trying to install vpp-ext-dep rpm , it got failed because glue library created of mella

[vpp-dev] About cnat FIB

2021-04-06 Thread liuyacan
Hi,         We observed that CNAT translation rule now can only be set in the default table for v4 and v6.     Why is there such a restriction ? Best Regards,Yacan -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to th