[vpp-dev] question on gtpu_input graph node

Hi vpp gtpu experts, We have requirement where - we create gtpu tunnel - Now, we will hit gtpu input, where we will receive gtpu packet and when we send it out on the interface replace the tied with tried and massage the ip address of src and destination and send the packet out vpp#

Re: [vpp-dev] question on gtpu_input graph node

Hi Venumadhav, Sharing my knowledge nuggets as below: * gtpu_input is an API which processes the gtpu packet for decapsulation and fire out the packet as an IP packet. You cannot reach gtpu_encap_inline with the same. But if you wish to send the Decapsulated IP packet to encap, you can using the n

Re: [vpp-dev] question on gtpu_input graph node

Hi Akash, While creating tunnels there if I set decap-next gtpu4-encap will it not work, it use the tried for the same right ? create gtpu tunnel src 10.21.58.142 dst 10.21.58.140 teid 13 tteid 14 encap-vrf-id 0 decap-next ip4 // instead of ip4, gtpu4-encap Thanks, Regards, Venu On Fri, 16 Jul

[vpp-dev] Does VPP IPSec support inner fragementation

Hi, Does VPP IPSec support fragmentation of the traffic. I mean if VPP finds that the size of the inner IP datagram with or without adding ESP headers is going to be greater than the size of MTU then does VPP fragment packet? Regards -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent

Re: [vpp-dev] Does VPP IPSec support inner fragementation

Hi Vijay, No, the ESP encrypt code does not account for the egress interface’s MTU. the outer/encapped packet will be fragmented at the phy. But for a route based VPN, where you are protecting a tunnel with an SA, then the encrypt/encap happens after any fragmentation by the tunnel interface.

[vpp-dev] OSPF and other routing protocols on VPP

Hi, I am investigating how we can implement routing protocol on the VPP platform. I see some info on VPP Sandbox/router - fd.io Trying to understand what is the recommended way. Anybody ported OSPF /BGP to VPP Host Stack VPP/HostStack - fd.io

Re: [vpp-dev] question on gtpu_input graph node

Hi Venu, decap-next supports only 3 parameters I guess .So, If you need an support like reaching gtpu4_encap-node, you might need to have a look on the gtpu_input API where the next0 fields can be set internally with some checks and enqueue the packet to gtpu4-encap. Also, Please add your require

Re: [vpp-dev] question on gtpu_input graph node

Hi Akash, Our requirement is simple we will get gtpu packet and send gtpu packet by properly replacing with proper tied and ip Thanks Regards Venu On Fri, 16 Jul, 2021, 7:25 pm Akash S R, wrote: > Hi Venu, > > decap-next supports only 3 parameters I guess .So, If you need an support > like rea

Re: [vpp-dev] question on gtpu_input graph node

Hi Venu, >From your requirement , keeping vpp support in mind, you shall send the complete GTPU packet from your device which you use to fire packets. The packet shall be marked with the exact destination so that it reaches the GTPU Tunnel created via Phys and the Decapsulated packet shall egress

[vpp-dev] compilation error in vpp 20.05

Hi Devs, I am trying to compile VPP 20.05 on centos 8.2 machine. Using the following steps for compilation: make wipe-release make install-dep make install-ext-deps make build-release make pkg-rpm I am getting the following error while creating rpm package from *make pkg-rpm* command: make[2]:

Re: [vpp-dev] question on gtpu_input graph node

Hi Akash, >From your requirement , keeping vpp support in mind, you shall send the complete GTPU >packet from your device which you use to fire packets. The packet shall be marked with the >exact destination so that it reaches the GTPU Tunnel created via Phys and the >Decapsulated packet shall egr

[vpp-dev] ACL-->ABF--> Memif, Seeing arp request for the packets #acl #abf #policy #routing

Hi Experts, We are trying to implement forwarding dst X.X.X.X/X subnet packets on interface Y to the memif1/0 To achieve that we used ACL and ABF policy rules. When I am trying to send traffic to "X.X.X.X" network I see ARP requests for that subnet on memif1/0. We don't need to send ARP for these

[vpp-dev] ACL-->ABF--> Memif, Seeing arp request for the packets #acl #abf #policy #routing

[Edited Message Follows] Hi Experts, We are trying to implement forwarding dst X.X.X.X/X subnet packets on interface Y to the memif1/0 To achieve that we used ACL and ABF policy rules. When I am trying to send traffic to "X.X.X.X" network I see ARP requests for that subnet on memif1/0. We don't

Re: [vpp-dev] Does VPP IPSec support inner fragementation

Hi Neale, Thanks for the response. Is there any CLI to set MTU on the tunnel interface (ipip0)? On Fri, Jul 16, 2021 at 5:32 PM Neale Ranns wrote: > > > Hi Vijay, > > > > No, the ESP encrypt code does not account for the egress interface’s MTU. > the outer/encapped packet will be fragmented a

Re: [vpp-dev] question on gtpu_input graph node

Hi Venu, >From your points, I understand that your GTPU packet must not be decapsulated and fired out to Phys once the packet reaches VPP. If your requirement is on Forwarding the packet via tunnel then include some code in gtpu_input so that the packet is not decapsulated and the forwarding also

Re: [vpp-dev] compilation error in vpp 20.05

> On 16.07.2021., at 16:58, ashish.sax...@hsc.com wrote: > > Hi Devs, > I am trying to compile VPP 20.05 on centos 8.2 machine. Using the following > steps for compilation: > > make wipe-release > make install-dep > make install-ext-deps > make build-release > make pkg-rpm > > > > I am ge

Re: [vpp-dev] question on gtpu_input graph node

Am Fr., 16. Juli 2021 um 17:04 Uhr schrieb Venumadhav Josyula < vjosy...@gmail.com>: > Hi Akash, > > >From your requirement , keeping vpp support in mind, you shall send the > complete GTPU > >packet from your device which you use to fire packets. The packet shall > be marked with the >exact desti

Re: [vpp-dev] Does VPP IPSec support inner fragementation

DBGvpp# set int mtu ? set interface mtuset interface mtu [packet|ip4|ip6|mpls] /neale From: Vijay Kumar Date: Friday, 16 July 2021 at 17:20 To: Neale Ranns Cc: vpp-dev Subject: Re: [vpp-dev] Does VPP IPSec support inner fragementation Hi Neale, Thanks for the resp

Re: [vpp-dev] question on gtpu_input graph node

Hi Andreas, > If you are already using an UPF, why don't you use another UPF for this purpose? We do not have UPF, we are working CU where incoming packet are DU ( GTP-U) and outgoing packets towards UPF ( GTP-U ). Our requirement is to 1. receive GTP-U packet from DU 2. Replace the tied

Re: [vpp-dev] question on gtpu_input graph node

Hi Akash, You are more or less right, but there is an exception, we want to replace tried, the src ip, dst ip and then forward it. 1. receive GTP-U packet from DU 1. Replace the tied with tried and put the proper source and destination ip and send to UPF. The dest ip is ip of UPF and

Re: [vpp-dev] ACL-->ABF--> Memif, Seeing arp request for the packets #acl #abf #policy #routing

Hi Ravi, A memif interface is not p2p, so your ABF policy path needs a next-hop: abf policy add id 0 acl 0 via 192.168.1.X memif1/0 where .X is the host on the other end. /neale From: vpp-dev@lists.fd.io on behalf of RaviKiran Veldanda via lists.fd.io Date: Friday, 16 July 2021 at 17:15 T

Re: [vpp-dev] Does VPP IPSec support inner fragementation

VPP supports fragmentation in ipsec, but overall buffer size limit is 2048, If mtu is 1500, then you can effort 2 fragment, Not other than that as owe current role of vpp On Fri, 16 Jul, 2021, 3:30 pm Vijay Kumar, wrote: > Hi, > > Does VPP IPSec support fragmentation of the traffic. I mean if

Re: [vpp-dev] question on gtpu_input graph node

Hi Andreas, Actually thanks for the link! Noticed you guys keep a set of vpp patches and some of them have not been merged yet. In particular, this [1] looked really useful and subsequently realized it was submitted but not merged because it failed checkstyle. Feel free to insist when that hap

Re: [vpp-dev] question on gtpu_input graph node

Hi Venu, If you need to switch teid with tried/tteid you may do it on code and ensure that decapsulation is not happening and you directly fire the packet out/enqueue . Regards, Akash On Fri, Jul 16, 2021, 9:52 PM Venumadhav Josyula wrote: > Hi Akash, > > You are more or less right, but there

Re: [vpp-dev] ACL-->ABF--> Memif, Seeing arp request for the packets #acl #abf #policy #routing

Hi Neale, Thanks for your time. Yes I got that and I did created a dummy arp to make this work. ip neighbor memif1/0 192.168.1.3 dead.dead.dead set acl-plugin acl permit dst 172.172.0.0/24 abf policy add id 0 acl 0 via 192.168.1.3 memif1/0 abf attach ip4 policy 0  HundredGigabitEthernet12/0/0

Re: [vpp-dev] ACL-->ABF--> Memif, Seeing arp request for the packets #acl #abf #policy #routing

[Edited Message Follows] Hi Neale, Thanks for your time. Yes I got that and I did created a dummy arp to make this work. ip neighbor memif1/0 192.168.1.3 dead.dead.dead set acl-plugin acl permit dst 172.172.0.0/24 abf policy add id 0 acl 0 via 192.168.1.3 memif1/0 abf attach ip4 policy 0  Hun