Re: [vpp-dev] one question about VPP IPsec implementaions

2019-01-27 Thread Zhiyong Yang
Thanks a lot, Kingwel. Very helpful. Regards Zhiyong From: vpp-dev@lists.fd.io [mailto:vpp-dev@lists.fd.io] On Behalf Of Kingwel Xie Sent: Friday, January 25, 2019 7:36 PM To: Yang, Zhiyong ; vpp-dev@lists.fd.io Subject: Re: [vpp-dev] one question about VPP IPsec implementaions First

Re: [vpp-dev] one question about VPP IPsec implementaions

2019-01-25 Thread Kingwel Xie
First, performance. Second, still performance, you can use QAT with dpdk IPSEC. Also note that dpdk ipsec doesn’t support AH. And, dpdk ipsec support GCM, but native one doesn’t. There is the 3rd one, ipsecmb ipsec, which provides even better performance if using SW ciphering/hashing only. It c