[Edited Message Follows] Hi,
I want to test VPP NAT plugin performance in NAT44 dynamic translations mode while supporting ipfix logging. (with 4 10gb ethernet interface , 40 CPU core and 40gbps throughput) based on VPP/NAT wiki page I used following configuration : unix { nodaemon log /var/log/vpp/vpp.log full-coredump cli-listen /run/vpp/cli.sock gid vpp interactive exec /root/vpp.cmd } api-trace { on } api-segment { gid vpp } cpu { main-core 41 workers 40 } dpdk { dev default { num-rx-queues 40 num-tx-queues 40 } ## Whitelist specific interface by specifying PCI address dev 0000:04:00.0 dev 0000:04:00.1 dev 0000:07:00.0 dev 0000:07:00.1 dev 0000:21:00.0 dev 0000:21:00.1 dev 0000:24:00.0 dev 0000:24:00.1 num-mbufs 1000000 socket-mem 16384,16384 } heapsize 90G nat { translation hash buckets 344827 translation hash memory 3498275862 user hash buckets 17241 user hash memory 93103448 max translations per user 5000000 } and this startup commands : set int state TenGigabitEthernet4/0/0 up set int state TenGigabitEthernet4/0/1 up set int state TenGigabitEthernet7/0/0 up set int state TenGigabitEthernet7/0/1 up set int state TenGigabitEthernet21/0/0 up set int state TenGigabitEthernet21/0/1 up set int state TenGigabitEthernet24/0/0 up set int state TenGigabitEthernet24/0/1 up comment{ ------------ IPv4 --------------- } set int ip address TenGigabitEthernet4/0/0 192.168.20.40/24 set int ip address TenGigabitEthernet4/0/1 192.168.30.40/24 set int ip address TenGigabitEthernet7/0/0 192.168.40.40/24 set int ip address TenGigabitEthernet7/0/1 192.168.50.40/24 set int ip address TenGigabitEthernet21/0/0 192.168.60.40/24 set int ip address TenGigabitEthernet21/0/1 192.168.70.40/24 set int ip address TenGigabitEthernet24/0/0 192.168.100.40/24 set int ip address TenGigabitEthernet24/0/1 192.168.110.40/24 comment{ ------------ ARP --------------- } set ip arp TenGigabitEthernet4/0/0 192.168.20.41 38:ea:a7:16:d0:f4 set ip arp TenGigabitEthernet4/0/1 192.168.30.41 38:ea:a7:16:d0:f5 set ip arp TenGigabitEthernet7/0/0 192.168.40.41 38:ea:a7:16:d2:e0 set ip arp TenGigabitEthernet7/0/1 192.168.50.41 38:ea:a7:16:d2:e1 set ip arp TenGigabitEthernet21/0/0 192.168.60.41 38:ea:a7:16:d3:14 set ip arp TenGigabitEthernet21/0/1 192.168.70.41 38:ea:a7:16:d3:15 set ip arp TenGigabitEthernet24/0/0 192.168.100.41 38:ea:a7:16:d1:18 set ip arp TenGigabitEthernet24/0/1 192.168.110.41 38:ea:a7:16:d1:19 comment{ ------------ route v4 --------------- } ip route add 16.0.0.0/8 via 192.168.20.41 ip route add 46.0.0.0/8 via 192.168.30.41 ip route add 17.0.0.0/8 via 192.168.40.41 ip route add 47.0.0.0/8 via 192.168.50.41 ip route add 18.0.0.0/8 via 192.168.60.41 ip route add 48.0.0.0/8 via 192.168.70.41 ip route add 19.0.0.0/8 via 192.168.100.41 ip route add 49.0.0.0/8 via 192.168.110.41 comment{ ------------ NAT44 Interface ---------------} set interface nat44 in TenGigabitEthernet4/0/0 out TenGigabitEthernet4/0/1 set interface nat44 in TenGigabitEthernet7/0/0 out TenGigabitEthernet7/0/1 set interface nat44 in TenGigabitEthernet21/0/0 out TenGigabitEthernet21/0/1 set interface nat44 in TenGigabitEthernet24/0/0 out TenGigabitEthernet24/0/1 comment{ ------------ NAT44 pool address ---------------} nat44 add address 16.0.0.1 - 16.0.100.255 nat44 add address 17.0.0.1 - 17.0.100.255 nat44 add address 18.0.0.1 - 18.0.100.255 comment{ ------------ IPFIX --------------} set ipfix exporter collector 192.168.110.111 src 192.168.110.40 path-mtu 100 template-interval 1 nat ipfix logging after a few seconds VPP does not any NAT translation and show error show me no error : vpp# show errors Count Node Reason 1064 nat44-in2out-slowpath Good in2out packets processed 1090 nat44-in2out Good in2out packets processed 8 lldp-input lldp packets received on disabled interfaces 13 llc-input unknown llc ssap/dsap 1076 TenGigabitEthernet4/0/1-output interface is down 1027 nat44-in2out-slowpath Good in2out packets processed 1071 nat44-in2out Good in2out packets processed 1065 TenGigabitEthernet4/0/1-output interface is down 1038 nat44-in2out-slowpath Good in2out packets processed 1077 nat44-in2out Good in2out packets processed 1013 TenGigabitEthernet4/0/1-output interface is down 997 nat44-in2out-slowpath Good in2out packets processed 1029 nat44-in2out Good in2out packets processed 996 TenGigabitEthernet4/0/1-output interface is down 1012 nat44-in2out-slowpath Good in2out packets processed 1032 nat44-in2out Good in2out packets processed 951 TenGigabitEthernet4/0/1-output interface is down 1021 nat44-in2out-slowpath Good in2out packets processed 1039 nat44-in2out Good in2out packets processed 999 TenGigabitEthernet4/0/1-output interface is down ... and after few seconds vpp# show errors Count Node Reason vpp# and show interface command just show rx-miss vpp# show interface Name Idx State Counter Count TenGigabitEthernet21/0/0 5 up rx packets 3 rx bytes 513 drops 3 rx-miss 2819437426 TenGigabitEthernet21/0/1 6 up rx packets 2 rx bytes 378 drops 2 rx-miss 3535010826 TenGigabitEthernet24/0/0 7 up rx packets 3 rx bytes 513 drops 3 TenGigabitEthernet24/0/1 8 up rx packets 2 rx bytes 378 drops 2 TenGigabitEthernet4/0/0 1 up rx packets 22662 rx bytes 5539061 drops 20696 ip4 22659 rx-miss 1016052794 TenGigabitEthernet4/0/1 2 up rx packets 3 rx bytes 513 drops 3 rx-miss 62488957 tx-error 20693 TenGigabitEthernet7/0/0 3 up rx packets 3 rx bytes 513 drops 3 rx-miss 942703387 TenGigabitEthernet7/0/1 4 up rx packets 2 rx bytes 378 drops 2 rx-miss 62983523 How should I Config VPP NAT plugin for dynamic translations, Waiting for suggestions. Thanks!
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11644): https://lists.fd.io/g/vpp-dev/message/11644 Mute This Topic: https://lists.fd.io/mt/28790237/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-