Hi, On my test setup, which is server machine with Intel(R) Xeon(R) CPU E5-2680 v3 @ 2.50GHz and 16GB RAM. I am comparing dpdk aesni_mb l2fwd-crypto decryption results with VPP dpdk-esp-decrypt node. I see 1 Mpps difference. l2wd-crypto can process 3 Mpps(size 168) but vpp dpdk crypto can only process around 2 Mpps.
There is 1 Mpps difference. May be due to the fact that dpdk-input and crypto-input are process on the same core? Is it possible to run dpdk-esp-decrypt node on another core just for encryption decryption. This way we can avoid re-ordering of the packets and at the same time use multicore for single ipsec flow. show run output below... TenGigabitEthernet5/0/1-output active 28053 7177488 0 3.64e1 255.85 TenGigabitEthernet5/0/1-tx active 28053 7177488 0 1.56e2 255.85 admin-up-down-process event wait 0 0 1 2.13e3 0.00 api-rx-from-ring active 0 0 229 1.74e7 0.00 arp-input active 16 17 0 8.54e4 1.06 bfd-process event wait 0 0 1 6.14e3 0.00 cdp-process any wait 0 0 6 3.83e4 0.00 dhcp-client-process any wait 0 0 1 2.75e3 0.00 dpdk-crypto-input polling 69120707 7197689 0 1.91e3 .10 dpdk-esp-decrypt active 28117 7197696 0 8.66e2 255.99 dpdk-esp-decrypt-post active 28116 7197433 0 8.78e1 255.99 dpdk-input polling 69120707 7197969 0 3.11e3 .10 dpdk-ipsec-process done 1 0 0 4.89e7 0.00 dpdk-process any wait 0 0 15 4.54e5 0.00 error-drop active 95 19978 0 1.82e2 210.29 ethernet-input active 16 17 0 4.56e3 1.06 fib-walk any wait 0 0 39271 6.79e2 0.00 flow-report-process any wait 0 0 1 5.74e3 0.00 gmon-process time wait 0 0 9 8.44e3 0.00 ikev2-manager-process any wait 0 0 41 4.02e3 0.00 ioam-export-process any wait 0 0 1 7.64e3 0.00 ip4-glean active 79 19961 0 1.69e2 252.67 ip4-input active 28116 7197433 0 1.77e2 255.99 ip4-input-no-checksum active 28117 7197696 0 1.38e2 255.99 ip4-lookup active 28116 7197433 0 1.49e2 255.99 ip4-rewrite active 28037 7177472 0 1.66e2 256.00 ip6-icmp-neighbor-discovery-ev any wait 0 0 41 2.72e3 0.00 ipsec-input-ip4 active 56233 14395129 0 1.38e2 255.99 l2fib-mac-age-scanner-process event wait 0 0 1 2.00e3 0.00 lisp-retry-service any wait 0 0 21 6.16e3 0.00 lldp-process event wait 0 0 1 8.86e4 0.00 startup-config-process done 1 0 1 6.40e3 0.00 unix-epoll-input polling 69066012 0 0 4.78e2 0.00 vhost-user-process any wait 0 0 1 2.22e4 0.00 vpe-link-state-process event wait 0 0 3 7.97e3 0.00 vpe-oam-process any wait 0 0 20 5.37e3 0.00 vpe-route-resolver-process any wait 0 0 1 2.39e3 0.00 vxlan-gpe-ioam-export-process any wait 0 0 1 2.36e9 0.00 Thanks Yusuf
_______________________________________________ vpp-dev mailing list vpp-dev@lists.fd.io https://lists.fd.io/mailman/listinfo/vpp-dev