Re: [vpp-dev] how to drop packet in the vpp's plugin?

Dear cmh2014011443, You can send the packets that you want to drop to the ‘ip4-drop’ or ‘ip6-drop’ nodd. regards, Neale De : au nom de "cmh2014011...@gmail.com" Date : jeudi 16 mai 2019 à 10:51 À : "vpp-dev@lists.fd.io" Objet : [vpp-dev] how to drop packet in the vpp's plugin? Recently,

Re: [vpp-dev] issues with proxy-arp

Hi Alexsander, I don’t see anything wrong with the configuration. Could you please provide a packet trace. Thanks, neale De : au nom de Aleksander Djuric Date : jeudi 16 mai 2019 à 16:30 À : "vpp-dev@lists.fd.io" Objet : [vpp-dev] issues with proxy-arp Hello, I need to configure proxy-arp

Re: [vpp-dev] VRF over IPSEC

Hi, VRFs are an ingress function, encryption is egress, so I’m not sure I understand your request. Perhaps you could give us more details on your use case. Regards, neale De : au nom de "omid via Lists.Fd.Io" Répondre à : "zeinalpouro...@yahoo.com" Date : samedi 18 mai 2019 à 09:40 À : Vp

Re: [vpp-dev] Jenkins testbench failure, how to rerun?

Hi Christian, Type 'recheck' as a review comment, with Jenkins as a review, he'll kick of the job again. /neale -Message d'origine- De : au nom de Christian Hopps Date : samedi 18 mai 2019 à 15:54 À : "vpp-dev@lists.fd.io" Cc : "cho...@chopps.org" Objet : [vpp-dev] Jenkins testben

[vpp-dev] RFC: IPSec Tunnel remodel

Hi VPP-IPSec-ers, I'd like to gauge comments on this article: https://wiki.fd.io/view/VPP/IPSec and the proposal for the IPSec tunnel re-model. The associated patch is: https://gerrit.fd.io/r/#/c/18956/ thanks, Neale -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this gro

Re: [vpp-dev] RFC: IPSec Tunnel remodel

Hi Ole, Thanks for taking the time to examine the proposal. Lots of comments inline > Answering as a non VPP-IPsec'er. More like an anti-IPsec'er if anything. ;-) > Eecutive summary: Not a fan. > This tastes too much of the dreams of the IPsec'ers of the past. Where IPsec

Re: [vpp-dev] Programming(add/del/mod) ACLs from another plugin

HI Murthy, There are two plugins, that I know of, that use the ACL as a service; ACL based forwarding (ABF) and group based policy (GBP). Both of these plugins expect that the user first configures the ACL using the ACL plugin, then passes the index of the ACL during ABF/GBP programming. This

Re: [vpp-dev] VPP crashes using bvi interface

Hi Uzzam, All these: sudo vppctl set interface l2 bridge loopX 1 Should be: sudo vppctl set interface l2 bridge loopX 1 bvi /neale De : au nom de Uzzam Javed Répondre à : Uzzam Javed Date : jeudi 23 mai 2019 à 14:50 À : "vpp-dev@lists.fd.io" Cc : "b...@xflowresearch.com" Objet : [vpp-d

Re: [vpp-dev] VPP crashes using bvi interface

Hi Uzzam, I have already tried using the command 'sudo vppctl set interface l2 bridge loopX 1 bvi' but the vpp crashes after few seconds. Can we see a back trace, please? While on the other hand when I use the command 'sudo vppctl set interface l2 bridge loopX 1', loop1 does not receive traffi

Re: [vpp-dev] RFC: IPSec Tunnel remodel

itioning to the new calls more straightforward. At least for me :) Thanks, -Matt On Mon, May 20, 2019 at 11:59 AM Neale Ranns via Lists.Fd.Io<http://Lists.Fd.Io> mailto:cisco@lists.fd.io>> wrote: Hi VPP-IPSec-ers, I'd like to gauge comments on this article: https://wiki.fd.io/view/

Re: [vpp-dev] About the order of  VLIB_INIT_FUNCTION called between different plugins

Pre 1908 : static clib_error_t * my_module_init (vlib_main_t * vm) { if ((error = vlib_call_init_function (vm, some_other_module_init))) return (error); } ; post 1908 : VLIB_INIT_FUNCTION (my_module_init) = { .runs_after = VLIB_INITS("some_other_module_init"), }; /neale

Re: [vpp-dev] identifying packets sent to a loopback address

Hi Matt, I have no explanation for why adj_index[VLIB_RX] is set to the same value as the TX, AFAICT it’s been that way since time immemorial 😉 I think we should change that logic to RX=TX; TX=lbi. I don’t see anything in the code that relies on RX being set to the TX. In that case the RX will

Re: [vpp-dev] #vpp How to enable intel QAT hw cryptpdev

Hi Yi-Lin, You need to select the correct back end: https://wiki.fd.io/view/VPP/IPSec#IPSec_Implementations /neale De : au nom de Yilin Shieh Date : mardi 18 juin 2019 à 14:01 À : "vpp-dev@lists.fd.io" Objet : [vpp-dev] #vpp How to enable intel QAT hw cryptpdev Hi all, I tried to enable

[vpp-dev] API change notification: route addition

Dear All, Please note that: https://gerrit.fd.io/r/c/12296/ has been merged into VPP and has changed the route add/del API. /neale -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#13321): https://lists.fd.io/g/vpp-dev/message/13321 Mute This Top

Re: [vpp-dev] VPP MPLS VPN Configuration #vpp #mpls #vpn

Hi Anthony, That wiki page you reference describes this setup. Perhaps if you ask specific questions on the parts that are not clear I can help you. /neale De : au nom de Anthony Linz Date : mardi 18 juin 2019 à 12:10 À : "vpp-dev@lists.fd.io" Objet : [vpp-dev] VPP MPLS VPN Configuration #v

Re: [vpp-dev] Events for IP address addition/deletion on an interface #vpp

Hi Alexander, Then your applications need a message bus. VPP does not provide that functionality for you. Notifications are only provided for data that VPP learns, not what other client programme it with. Regards, Neale De : au nom de "Alexander Chernavin via Lists.Fd.Io" Répondre à : "ac

Re: [vpp-dev] NAT dose not exist in MAINTAINERS file

Hi Chore, Thank you for the patch, I have merged it. /neale De : au nom de emma sdi Date : mercredi 26 juin 2019 à 07:06 À : Damjan Marion Cc : vpp-dev Objet : Re: [vpp-dev] NAT dose not exist in MAINTAINERS file Hi Dear VPP Would you please take a look at https://gerrit.fd.io/r/#/c/20325

Re: [vpp-dev] test-debug in the CI

Here’s a fix for BIER: https://gerrit.fd.io/r/c/20349/ /neale De : au nom de Florin Coras Date : mercredi 26 juin 2019 à 00:51 À : "Dave Barach (dbarach)" Cc : Paul Vinciguerra , "vpp-dev@lists.fd.io" Objet : Re: [vpp-dev] test-debug in the CI This [1] seems to solve sctp issues with deb

Re: [vpp-dev] Checking for enabled feature

Hi Raj, There's no good way to do it, there's also no notification should the feature be disabled or enabled. Instead I'd suggest you 'listen' to the entity enabling/disabling the feature. Or maybe you can configure your feature to run before this one, then it's not important whether it's enabl

Re: [vpp-dev] Cannot configure IPsec in tunnel mode with manual SAs

Dear Varban, Welcome to the VPP community 😊 you have reached the right group… I suspect you need to flip the IP ranges for your inbound policy command. For the outbound policy the remote address is compared with the packet's destination, for the inbound policy the remote address is compared wi

Re: [vpp-dev] loopback admin status

Hi Matt, I would tend to agree with you. The interface’s IP addresses should not be programmed in the FIB if the interface is down. /neale De : au nom de "Matthew Smith via Lists.Fd.Io" Répondre à : "mgsm...@netgate.com" Date : mardi 16 juillet 2019 à 21:42 À : vpp-dev Cc : "vpp-dev@list

Re: [vpp-dev] loopback admin status

Hi Matt, Sounds like exactly what we need. /neale De : Matthew Smith Date : mercredi 17 juillet 2019 à 14:52 À : "Neale Ranns (nranns)" Cc : vpp-dev Objet : Re: [vpp-dev] loopback admin status Hi Neale, Thanks for your reply. I noticed that there is a function for IPv6 named ip6_sw_inter

Re: [vpp-dev] abf problem with arp

Dear Brayan, You should always add a next-hop to a path when IP routing. Answers comments inline. /neale De : au nom de brayan ortega Date : mercredi 24 juillet 2019 à 11:25 À : "vpp-dev@lists.fd.io" Objet : [vpp-dev] abf problem with arp Dear VPP Folks, I'm using vpp v19.08-rc0~698-g1f50bf

Re: [vpp-dev] abf problem with arp

Hi Brayan, First let’s discuss a bit your config and your objectives: acl ID 0 permit { any } set int ip addr GigabitEthernetb/0/0 30.30.30.1/24 set int ip addr GigabitEthernet3/0/0 20.20.20.1/24 abf policy add id 9001 acl 0 via 0.0.0.0 GigabitEthernetb/0/0 abf attach ip4 policy 9001

Re: [vpp-dev] SIGSEGV when adding route and abf with the same gateway

Hi, You can reorder the route and ABF programming as a work around. I’ll have a fix shortly. /neale De : au nom de "fdr.koz...@yandex.com" Date : lundi 29 juillet 2019 à 08:24 À : "vpp-dev@lists.fd.io" Objet : [vpp-dev] SIGSEGV when adding route and abf with the same gateway Hi vpp-dev Whe

Re: [vpp-dev] abf problem with arp

Hi Brayan, Please try with: https://gerrit.fd.io/r/c/20913/ /neale De : au nom de brayan ortega Date : dimanche 28 juillet 2019 à 12:44 À : "Neale Ranns (nranns)" Cc : "vpp-dev@lists.fd.io" Objet : Re: [vpp-dev] abf problem with arp Dear Neale, I have tried to config vpp based on your prop

Re: [vpp-dev] SIGSEGV when adding route and abf with the same gateway

Hi, Here’s the fix: https://gerrit.fd.io/r/c/20914/ /neale De : au nom de "Neale Ranns via Lists.Fd.Io" Répondre à : "Neale Ranns (nranns)" Date : lundi 29 juillet 2019 à 19:25 À : "fdr.koz...@yandex.com" , "vpp-dev@lists.fd.io" Cc : "vpp-de

Re: [vpp-dev] Feature: Update of nat44 addresses VRF after changing VRF on interfaces #vpp #nat44

Hi Dmitry, It’s definitely a good idea to add changes that prevent things breaking 😊 The question is how do you do it? You’ll have noticed in your testing that the following sequence is disallowed: DBGvpp# loop cre DBGvpp# ip table add 2 DBGvpp# set int ip addr loop0 10.10.10.10/24 DBGvpp#

Re: [vpp-dev] ipsec traffic backend

De : au nom de "amitmulay...@gmail.com" Date : lundi 5 août 2019 à 07:21 À : "vpp-dev@lists.fd.io" Objet : [vpp-dev] ipsec traffic backend Hello Guys i wanted to ask how can i know if my ipsec is running with QAT (intel quick assist) traffic backend (i am sure that i have a cpu that support

Re: [vpp-dev] a question about route del,thanks

Hi, I don’t really understand what you’re asking, but if the question is, can I delete routes via the CLI that I add via the API, the answer is no (nor vice-versa). /neale De : au nom de "dengxun...@163.com" Date : vendredi 9 août 2019 à 10:33 À : "vpp-dev@lists.fd.io" Objet : [vpp-dev] a

Re: [vpp-dev] a question about route del,thanks

The FIB is a shared resource and each user of that shared resource needs to be managed so they don’t interfere with one another. Different users are termed ‘sources’. FIB treats the API and CLI as separate ‘sources’ of routes. One source cannot delete the state (routes nor paths) added by anoth

Re: [vpp-dev] ipsec packets fragmented post encryption

Hi Sam, Please upgrade to at least 19.04. a lot of work went into IPSec for this release. /neale De : au nom de "Caffeine Coder via Lists.Fd.Io" Répondre à : "caffeine.co...@yahoo.com" Date : mercredi 14 août 2019 à 00:16 À : Vpp-dev Cc : "vpp-dev@lists.fd.io" Objet : [vpp-dev] ipsec pac

Re: [vpp-dev] Help with two interfaces accessing outside network

Your VPP configs look fine. I can only guess at general network issues. My first guess would be that the DHCP process did not complete, yet. For my second guess, this: vpp# ping 8.8.8.8 source wan1 means take the source address from wan1, but this: ip route add 0.0.0.0/0 via 172.78.10.1

Re: [vpp-dev] Help with two interfaces accessing outside network

Hi Carlito, You almost certainly want them in the same table. As I said, if you do this: ping 8.8.8.8 source wan1 then the ping packet will be constructed with a source address from wan1, but it will still follow your routing config for transmission. This means that if you have: ip r

Re: [vpp-dev] Add ip route without next-hop-address

Hi Dave, but from the trace, it send a ARP request to ask 173.2.0.1 directly ip4-lookup -> ip4-glean -> GigabitEthernet0/a/0-output -> ip4-glean: ARP requests sent how could I avoid this ARP request, like ? ip4-lookup -> ip4-rewrite (GigabitEthernet0/a/0) -> ipsec-output-ip4 VPP is ARPing

Re: 回复: [vpp-dev] Add ip route without next-hop-address

Hi Dave, When routing to GigabitEthernet0/a/0 what destination MAC address should the packet have? /neale De : shi dave Date : vendredi 23 août 2019 à 05:01 À : "Neale Ranns (nranns)" , "vpp-dev@lists.fd.io" Objet : 回复: [vpp-dev] Add ip route without next-hop-address Hi Neale, yes, it's a

Re: 回复: 回复: 回复: [vpp-dev] Add ip route without next-hop-address

Hi Dave, That flow would suggest the packet was correctly sent out of GigEth0/a/0 with the destination MAC of 172.16.3.1. was that not the case? Or was that your desired flow not the actual? /neale De : shi dave Date : vendredi 23 août 2019 à 09:11 À : "Neale Ranns (nranns)" , "vpp-dev@lists

Re: [vpp-dev] Add ip route without next-hop-address

Hi Dave, As with all IP routing, you need to configure the route with the nexthop on that interface’s subnet. So : Ip route 173.2.0.0/24 via GigEthx/y/z Rather than Ip route 173.2.0.0/24 via GigEthx/y/z /neale From: shi dave Date: Friday 23 August 2019 at 09:36 To: "Neale Ranns (nranns)

Re: [vpp-dev] fib_urpf_check_size crash during interface flap

I Gyan, Maybe this : https://gerrit.fd.io/r/c/vpp/+/20558 /neale From: on behalf of Gyan Ranjan Date: Thursday 29 August 2019 at 10:00 To: "vpp-dev@lists.fd.io" Subject: [vpp-dev] fib_urpf_check_size crash during interface flap Hello experts I am seeing below backtrace when the interface

Re: [vpp-dev] Packet hits wrong FIB look up

From: on behalf of Aswin Surendran Date: Thursday 26 September 2019 at 15:43 To: "vpp-dev@lists.fd.io" Subject: [vpp-dev] Packet hits wrong FIB look up Hi, I am facing an issue in FIB entry look-up in vpp-18.07 version. A packet is being sent with source IP as 10.60.186.218 and destination

Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08

Hi Chuan, IPSec and GRE is supported using the tunnel protection mechanism : https://wiki.fd.io/view/VPP/IPSec GRE over IPSec is only support when the SA is in tunnel mode. This means there is a double encap of the IP header ; once by the SA (in tunnel mode) and once by the tunnel itself. (W

Re: [vpp-dev] How to configure l2 gre over ipsec in vpp 19.08

Hi Chuan, Please remove the SPD config. For tunnels all packets that ingress/egress the tunnel are decrypted/encrypted, so no policy is required. The presence of the SPD on the ingress eth0 link could be why it’s not working. Please provide packet traces when you are reporting packet loss probl

Re: [vpp-dev] auto-remove fib entries

Hi Liran, I assume you’re using the router plugin to reflect linux routing state in VPP. I’ve cc’d the appropriate mailer and bcc vpp-dev. /neale. From: on behalf of Liran Date: Monday 7 October 2019 at 13:35 To: "vpp-dev@lists.fd.io" Subject: [vpp-dev] auto-remove fib entries Hi All, is th

Re: [vpp-dev] auto-remove fib entries

Ok this time with vppsb-dev CC’d. /neale From: on behalf of "Neale Ranns via Lists.Fd.Io" Reply to: "Neale Ranns (nranns)" Date: Monday 7 October 2019 at 13:57 To: Liran Cc: "vpp-dev@lists.fd.io" Subject: Re: [vpp-dev] auto-remove fib entries Hi Liran, I

Re: [vpp-dev] test_srmpls.py and test_ip_mcast.py fail under "make test-debug"

Hi Burt, Two separate issues : https://gerrit.fd.io/r/c/vpp/+/22597 https://gerrit.fd.io/r/c/vpp/+/22598 thanks for the report 😊 /neale From: "Dave Barach (dbarach)" Date: Monday 7 October 2019 at 21:28 To: "Benoit Ganne (bganne)" , Burt Silverman , vpp-dev , "Neale Ranns (nranns)" Subj

Re: [vpp-dev] VPP IPSec failed to add SA

Hi Ruoyo, Possiblly because your loaded crypto engine/backend does not support the requested algorithms. Please provide : show crypto engine show ipsec backend also whenever asking for assistance: sh version Thanks, neale From: on behalf of "Ying, Ruoyu" Date: Thursday 17 October 2019

Re: [vpp-dev] VPP core dump with PPPoE

Hi Raj, I think your analysis is spot on. Thank you! How you're a VPP PPPoE expert __ do you have some suggestions on a fix? /neale On 17/10/2019 16:18, "vpp-dev@lists.fd.io on behalf of Raj" wrote: Hello all, I could do some more analysis of this issue and I think I have i

Re: [vpp-dev] VPP core dump with PPPoE

That will work. Looking into the fixup function, all that's used from the session is the ergress interface. So only that needs to be 'pushed'. I suspect using the whole session was a convenience for the orignal author, whoever that might have been ... /neale On 17/10/2019 18:38, "Benoit Gan

Re: [vpp-dev] VPP IPSec failed to add SA

egistered by default or we need to manually register them? Thanks. Best Regards, Ruoyu From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of Neale Ranns via Lists.Fd.Io Sent: Thursday, October 17, 2019 8:36 PM To: Ying, Ruoyu mailto:ruoyu.y.

Re: [vpp-dev] VPP core dump with PPPoE

Hi Raj, Thanks for spending the time for further investigation. Some comments inline. /neale On 18/10/2019 11:27, "vpp-dev@lists.fd.io on behalf of Raj" wrote: On Thu, Oct 17, 2019 at 8:45 PM Neale Ranns (nranns) wrote: > I think your analysis is spot on. Thank you! > How you'r

Re: [vpp-dev] VPP IPSec failed to add SA

>> Subject: RE: [vpp-dev] VPP IPSec failed to add SA Hi Neale, I’m really new to VPP and can you tell me where’s the plugins you mentioned? Thanks a lot. Best Regards, Ruoyu From: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> mailto:vpp-dev@lists.fd.io>> On Behalf Of Nea

Re: [vpp-dev] vpp with gtpu

Hi Ruijing, Comments inline. /neale From: on behalf of "Guo, Ruijing" Date: Thursday 31 October 2019 at 09:29 To: "Ni, Hongjun" , "vpp-dev@lists.fd.io" Subject: Re: [vpp-dev] vpp with gtpu Hi, Hongjun After adding the configuration, ping still failed as: Packet 14 00:02:10:052842: af-pa

Re: [vpp-dev] ECMP consistency hash #vpp #ecmp

Hi, If you’re refering to basic IP ECMP (as opposed to the LB plugin), then yes, it uses a 5-tuple hash by default. You can configure this per-table with : set_ip_flow_hash. /neale From: on behalf of Cipher Chen Date: Monday 4 November 2019 at 04:21 To: "vpp-dev@lists.fd.io" Subject: [vpp-

Re: [vpp-dev] VPWS not working when adjacency is not resolved

Hi Vyshakh, I’ll look into it. Please give me a few days. /neale From: on behalf of vyshakh krishnan Date: Monday 4 November 2019 at 05:51 To: "vpp-dev@lists.fd.io" Subject: [vpp-dev] VPWS not working when adjacency is not resolved Hi All, I have been trying to setup VPWS using VPP host a

Re: [vpp-dev] VPP Route Management vs Kernel

Hi Emma, It is not necessary for VPP and the linux kernel to act the same way. They will both have their own reasons for acting the way they do. From VPP’s point of view, the general programming model for all objects, is that if they were added explicitly by the user, then they must be removed

Re: [vpp-dev] traceroute in VPP

Hi Vyshakh, VPP does not support traceroute. The only reason it does not, is that no kind soul has implemented it yet… /neale From: on behalf of vyshakh krishnan Date: Wednesday 6 November 2019 at 08:16 To: "vpp-dev@lists.fd.io" Subject: [vpp-dev] traceroute in VPP Hi All, Does VPP suppor

Re: [vpp-dev] VPWS not working when adjacency is not resolved

OK. I see in your pcap file that there are many ARP requests generated. This is would expect if nothing is responding. Regards, neale From: on behalf of "Neale Ranns via Lists.Fd.Io" Reply to: "Neale Ranns (nranns)" Date: Monday 4 November 2019 at 10:27 To: vyshakh

Re: [vpp-dev] how to remove all route paths with specific condition

Hi, There is no such mechanism. Maybe call fib_table_entry_path_remove() on each prefix for which you previously added such a path. I’m assuming you added it, it’s not polite to remove some-one else’s path. FIB already reacts to certain changes, like interface down or BFD down and adjust forw

Re: [vpp-dev] vpp crash while configuring route #vpp

Hi Cipher, Thank you for the bug report. I was able to reproduce it once i had analysed the curiosities in your config. Here’s the Jira bug i created : https://jira.fd.io/browse/VPP-1803 and the patch : https://gerrit.fd.io/r/c/vpp/+/23645 your setup is exceptional because, you have the sa

Re: [vpp-dev] ipsec: configuration for ike generated tunnels

Hi Carl, I think both options are viable. Perhaps 1) is preferable when IKE is a responder and 2) when an initiator. 1) doesn't exist, but there are many other cases where VPP sends notifcation events to the agent when it has discovred something - search for APIs named want_* For 2) it's imp

Re: [vpp-dev] FIB Route Sources

Hi Jon, Apologies for the delay. Is this what you’re after : https://gerrit.fd.io/r/c/vpp/+/23808 /neale From: on behalf of "Jon Loeliger via Lists.Fd.Io" Reply to: "j...@netgate.com" Date: Thursday 7 November 2019 at 06:28 To: vpp-dev Cc: "vpp-dev@lists.fd.io" Subject: [vpp-dev] FIB Ro

Re: [vpp-dev] more than 65K entries in a FIB table

Hi Miklos, I would not be against it. Please push a patch. Thanks, neale From: on behalf of Miklos Tirpak Date: Friday 20 December 2019 at 00:41 To: "vpp-dev@lists.fd.io" Subject: [vpp-dev] more than 65K entries in a FIB table Hi, the FIB table implements two reference counters: /**

Re: [vpp-dev] VPP Crash while programming DPO from a VPP Worker

Hi Murthy, You can only update the FIB from the main thread. Send [rate limited] events from the workers to the main thread to do this, e.g. arp_learn(). /neale From: on behalf of Satya Murthy Date: Monday 30 December 2019 at 17:58 To: "vpp-dev@lists.fd.io" Subject: [vpp-dev] VPP Crash whi

Re: [vpp-dev] multipath dpo buckets is wrong.

It is the correct behaviour. The number of load-balance buckets is always a power of 2. The lowest value is chosen to achieve the desired ratio to within a certain margin of error. /neale From: on behalf of "abbas ali chezgi via Lists.Fd.Io" Reply to: "che...@yahoo.com" Date: Saturday 4 Ja

Re: [vpp-dev] multipath dpo buckets is wrong.

2020 at 16:05 To: "Neale Ranns (nranns)" Subject: Re: [vpp-dev] multipath dpo buckets is wrong. hi Neale, power of 2 for 3 paths must be 4 dpo or maximum 8 dpo. this shows 16 dpos. thanks On Monday, January 6, 2020, 01:34:10 AM GMT+3:30, Neale Ranns via Lists.Fd.Io wrote: It is t

Re: [vpp-dev] vpp19.08 ipsec issue

From: Terry Date: Monday 6 January 2020 at 23:51 To: "Neale Ranns (nranns)" Cc: "vpp-dev@lists.fd.io" Subject: Re:Re:Re: [vpp-dev] vpp19.08 ipsec issue [trim] And when I ping 192.168.1.2 from 100.0.0.3(user1), the TRACE packet information is as follows: Packet 1 00:38:45:983763: handoff_tr

Re: [vpp-dev] vpp19.08 ipsec issue

From: Terry Date: Tuesday 7 January 2020 at 13:12 To: "Neale Ranns (nranns)" Cc: "vpp-dev@lists.fd.io" Subject: Re:Re: [vpp-dev] vpp19.08 ipsec issue Hi Neale, My understanding is that the interface GigabitEthernet2/1/0 should only protect traffic from 100.0.0.0/24 and 172.168.1.0/24 and le

Re: [vpp-dev] #vapi -- Need multiple times " ip table del xxx" to delete a specific 'ip table' within vpp?

Hi Ryan, It’s probably a sign that you have bound multiple interfaces to that table : set int ip table And you need to unbind them (or bind them back to the default table) all before deleting the table : set int ip table 0 regards, neale From: on behalf of "rya...@yunify.com" Date: Mo

Re: [vpp-dev] #vapi -- Need multiple times " ip table del xxx" to delete a specific 'ip table' within vpp?

From: on behalf of "rya...@yunify.com" Date: Tuesday 14 January 2020 at 14:07 To: "vpp-dev@lists.fd.io" Subject: Re: [vpp-dev] #vapi -- Need multiple times " ip table del xxx" to delete a specific 'ip table' within vpp? Hi Neale, Thanks for answer. Another question: If I remove the l3 inter

Re: [vpp-dev] vpp crashes on deleting route 0.0.0.0/0 via interface #vpp

Hi, Thanks for the bug report, I’ll fix the crash. A question for you. DBGvpp# ip route add 0.0.0.0/0 table 10 via gre0 Says “all destinations in table 10 are reachable via an interface in table 0”. It implies therefore that all addresses in table 10 refer to the same device in table 0, i.e.

Re: [vpp-dev] Packet not going to Classifier & action #classify #vpp #flowprobe #vppwithoutdpdk

Hi, [snip] Trace as below Packet 1 00:04:30:392423: memif-input memif: hw_if_index 2 next-index 4 slot: ring 0 00:04:30:392444: ethernet-input IP4: b2:5f:84:5e:0b:43 -> 9e:db:96:ff:25:fa 00:04:30:392460: error-drop rx:memif0/2 00:04:30:392462: drop ethernet-input: l3 mac mismatch t

Re: [vpp-dev] vpp crashes on deleting route 0.0.0.0/0 via interface #vpp

0x764162dc in vlib_process_startup (vm=0x0, p=0x8, f=0x766b6680 ) at /home/elantsev/vpp/src/vlib/main.c:1497 Backtrace stopped: previous frame inner to this frame (corrupt stack?) (gdb) ``` 15.01.2020, 01:54, "Neale Ranns via Lists.Fd.Io" : Hi, Thanks for the bug report, I’ll fix t

Re: [vpp-dev] routing configuration other than default

Hi Sothy, If you want ping to use a non-default table to lookup the address, you have to specify the table: vpp# ping 172.30.1.1 table-id 1 /neale From: on behalf of sothy Date: Wednesday 22 January 2020 at 08:43 To: "Balaji Venkatraman (balajiv)" Cc: "vpp-dev@lists.fd.io" Subject: Re: [v

Re: [vpp-dev] #vnet Any command to individually enable and disable IP forwarding per interface level

hi, to enables IP4 forwarding on an interface, either apply an address or make it unnumberered to another interface (that has an address); set int ip addr set int unnumbered use to enables IP4 forwarding on an interface, either apply an address or enable ip6 on it. set int ip addr

Re: [vpp-dev] Error:null-node: blackholed packets

The IP lookup failed on the decapped packet, there’s no route to 60.60.0.100 in fib index 1 – which I assume is table 1. You can check which table it is with: sh ip fib index 1 summary I’m not familiar with UPF so I can’t tell you why the lookup was done that way. /neale From: on behalf of

Re: [vpp-dev] #vnet Any command to individually enable and disable IP forwarding per interface level

From: on behalf of "Gigo Thomas via Lists.Fd.Io" Reply to: "gig...@thinkpalm.com" Date: Thursday 23 January 2020 at 22:31 To: "vpp-dev@lists.fd.io" Cc: "vpp-dev@lists.fd.io" Subject: Re: [vpp-dev] #vnet Any command to individually enable and disable IP forwarding per interface level [Edi

Re: [vpp-dev] #vnet Any command to individually enable and disable IP forwarding per interface level

arp-reply arc arp disable On Wed, Jan 22, 2020 at 12:16 PM Neale Ranns via Lists.Fd.Io<http://Lists.Fd.Io> mailto:cisco@lists.fd.io>> wrote: hi, to enables IP4 forwarding on an interface, either apply an address or make it unnumberered to another interface (that has an

Re: [vpp-dev] Issue coming while fib lookup in vpp 18.01 between /8 and default route

18.01 might be missing patches in ip4_mtrie.c. /neale From: on behalf of chetan bhasin Date: Friday 31 January 2020 at 11:47 To: vpp-dev Subject: [vpp-dev] Issue coming while fib lookup in vpp 18.01 between /8 and default route Hello Everyone, I know that vpp 18.01 is not supported furthe

Re: [vpp-dev] issue with ARP and classify packet forwarding #classify

Hi Po, From: on behalf of Po Date: Friday 24 January 2020 at 08:14 To: "vpp-dev@lists.fd.io" Subject: [vpp-dev] issue with ARP and classify packet forwarding #classify Hi, I would like to classify the packet and forward to desired destination - Classify hits the rules - ARP proxy enabled Ex

Re: [vpp-dev] How to receive broadcast messages in VPP?

Hi Elias, Please see inline. On 06/02/2020 12:41, "vpp-dev@lists.fd.io on behalf of Elias Rudberg" wrote: Hello everyone, I am trying to figure out how to receive broadcast messages in VPP (vpp version 19.08 in case that matters). This is in the context of some chan

Re: [vpp-dev] How to receive broadcast messages in VPP?

ip mroute add 224.0.0.1 via MyInterface Accept ip mroute add 224.0.0.1 via local Forward After that it works using multicast. Thanks for your help! (Please let me know if the above is not the right way to do it) Best regards, Elias On Thu, 2020-02

Re: [vpp-dev] sub interface after virtual interfaces doesn't work

Please be more specific about what ‘doesn’t work’. You script on n1 does: #add gre tunnel create gre tunnel src 200.1.2.1 dst 200.1.2.2 set interface state gre0 up set interface ip address gre0 10.10.10.11/32 ip route add 2.1.1.0/24 via gre0 #del gre tunnel set interface state gre

Re: [vpp-dev] sub interface after gre doesn't work

Please try with: https://gerrit.fd.io/r/c/vpp/+/25242 /neale From: on behalf of "abbas ali chezgi via Lists.Fd.Io" Reply to: "che...@yahoo.com" Date: Tuesday 18 February 2020 at 12:14 To: Vpp-dev Cc: "vpp-dev@lists.fd.io" Subject: [vpp-dev] sub interface after gre doesn't work please s

Re: [vpp-dev] route lookup api

Hi Chris, Adding an API to dump a single route would be a welcome addition to the API. /neale From: on behalf of Paul Vinciguerra Date: Wednesday 19 February 2020 at 04:21 To: Christian Hopps Cc: vpp-dev Subject: Re: [vpp-dev] route lookup api Those don't seem to be exposed via the api du

Re: [vpp-dev] [Question] L3 xconnects example usage

Hi Denis, You can always use the help function on the CLI; DBGvpp# l3xc ? l3xc l3xc [add|del] via ... an example would then be: l3xc add ip4 eth1 via 10.10.10.10 eth0 to send all IP4 packets received on eth1 to 10.10.10.10 on eth0. /neale From: on be

Re: [vpp-dev] VPP Plugins build errors from IPSec module

Hi Kausik, Did you run: make install-ext-dep /neale From: on behalf of "Majumdar, Kausik" Date: Tuesday 25 February 2020 at 23:35 To: "vpp-dev@lists.fd.io" Cc: "vppsb-...@lists.fd.io" , "Majumdar, Kausik" Subject: [vpp-dev] VPP Plugins build errors from IPSec module Hi folks,   I am try

Re: [vpp-dev] VPP Plugins build errors from IPSec module

Hi Kausik, The remaining build errors are from the router plugin, those I cannot help with. /neale On 26/02/2020 08:19, "vpp-dev@lists.fd.io on behalf of Majumdar, Kausik" wrote: Hi Neale, Thanks for your reply! Yes, now I have compiled vpp v20.01 codebase, built rpm pac

Re: [vpp-dev] VPP IPSec Responder Server (VPN Server) VPP Route injection

Hi Ravin, I would suggest two things: 1. In your application you should maintain an association between strongswan’s client and the tunnel you create in VPP for it. Then, since the routes are associated with the client they can easily be matched to the tunnel. You’ll need this sort of asso

Re: [vpp-dev] Error: esp4-encrypt-tun-handoff : congestion drop #ipsec

Ravin, Due to the RX and TX actions that need to be performed on an SA in an ‘atomic’ fashion, each SA is bound to a single worker thread. The trhread chosen is the one that first sees a packet for that SA. When subsequent packets arrive on a different thread they need to be transferred to the

Re: [vpp-dev] Can I submit some API changes for 19.08, et al. release branches?

Hi Chris, Adding an IS_INBOUND flag could be non-backward compatible if not setting the INBOUND flag on an SA and then using it in an inbound context resulted in an error being returned to the user. so existing clients would be obligated to set this new flag. If that’s not the case, and client

Re: [vpp-dev] Can I submit some API changes for 19.08, et al. release branches?

From: on behalf of Christian Hopps Date: Tuesday 25 February 2020 at 22:09 To: Andrew 👽 Yourtchenko Cc: Christian Hopps , "Dave Barach (dbarach)" , vpp-dev Subject: Re: [vpp-dev] Can I submit some API changes for 19.08, et al. release branches? > On Feb 25, 2020, at 3:44 PM, Andrew 👽 You

Re: [vpp-dev] Q: how best to avoid locking for cleanup.

Hi Chris, All of the APIs that result in the removal of an SA are not marked as MP safe. This means that the worker threads are paused at the ‘barrier’ as the API is handled. Worker threads reach the barrier once they complete the frame they are working on. So there are no packets in flight whe

Re: [vpp-dev] Can I submit some API changes for 19.08, et al. release branches?

From: on behalf of Christian Hopps Date: Thursday 27 February 2020 at 15:16 To: "Neale Ranns (nranns)" Cc: Christian Hopps , Andrew 👽 Yourtchenko , "Dave Barach (dbarach)" , vpp-dev Subject: Re: [vpp-dev] Can I submit some API changes for 19.08, et al. release branches? [snip] > > In my c

Re: [vpp-dev] Can I submit some API changes for 19.08, et al. release branches?

of Christian Hopps Date: Thursday 27 February 2020 at 16:32 To: "Neale Ranns (nranns)" Cc: Christian Hopps , "vpp-dev@lists.fd.io" Subject: Re: [vpp-dev] Can I submit some API changes for 19.08, et al. release branches? > On Feb 27, 2020, at 9:41 AM, Neale Ranns vi

Re: [vpp-dev] Can I submit some API changes for 19.08, et al. release branches?

n behalf of Christian Hopps > Date: Thursday 27 February 2020 at 16:32 > To: "Neale Ranns (nranns)" > Cc: Christian Hopps , "vpp-dev@lists.fd.io" > Subject: Re: [vpp-dev] Can I submit some API changes for 19.08, et

Re: [vpp-dev] Can I submit some API changes for 19.08, et al. release branches?

es) be against VPP design philosophy? > >Thanks, >Chris. > > > >> >> /neale >> >> From: on behalf of Christian Hopps >> Date: Thursday 27 February 2020 at

Re: [vpp-dev] Can I submit some API changes for 19.08, et al. release branches?

Hi Chris, There are two overlapping sets of paths associated with each prefix in the FIB; the desired set as programmed by the control plane and the set that can be used (based on path availability, based on e.g. link or BFD state). I assume you fetch the former by parsing through the path-lis

Re: [vpp-dev] vpp project committers: formal vote to add Matt Smith as a vpp committer

+1 /neale From: on behalf of "d...@barachs.net" Date: Monday 2 March 2020 at 15:20 To: "vpp-dev@lists.fd.io" Subject: [vpp-dev] vpp project committers: formal vote to add Matt Smith as a vpp committer VPP committers, please vote +1, 0, -1 on adding Matt Smith (mgsm...@netgate.com

Re: [vpp-dev] APPROVED: add Matt Smith as a vpp committer, subject to TSC approval this Thursday

Enjoy the ride 😊 From: on behalf of "Matthew Smith via Lists.Fd.Io" Reply to: "mgsm...@netgate.com" Date: Monday 2 March 2020 at 22:11 To: "Dave Barach (dbarach)" Cc: "vpp-dev@lists.fd.io" Subject: Re: [vpp-dev] APPROVED: add Matt Smith as a vpp committer, subject to TSC approval this Thur

Re: [vpp-dev] How to direct traffic destined to a given subnet to a specific node of my choice? #vpp

Indeed DPOs are the way forward, you define your own that add a route to the FIB pointing to an instance of your DPO. There are lots of examples in the code base. The function to add to the FIB is: fib_table_entry_special_dpo_add() that will help guide your search, /neale From: on behalf of

  1   2   3   >