First, performance. Second, still performance, you can use QAT with dpdk IPSEC.
Also note that dpdk ipsec doesn’t support AH. And, dpdk ipsec support GCM, but
native one doesn’t.
There is the 3rd one, ipsecmb ipsec, which provides even better performance if
using SW ciphering/hashing only. It currently supports AES-CBC only.
Hope this helps.
From: vpp-dev@lists.fd.io <vpp-dev@lists.fd.io> On Behalf Of Zhiyong Yang
Sent: Friday, January 25, 2019 7:15 PM
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] one question about VPP IPsec implementaions
Hi VPP expert,
When I look at the IPsec code，It looks that two implementations
coexists in VPP. One is dpdk IPsec, and another is native IPsec.
I wonder what’s difference between them from functionality perspective?
Any input is appreciated.
Regards
Zhiyong
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#12007): https://lists.fd.io/g/vpp-dev/message/12007
Mute This Topic: https://lists.fd.io/mt/29536073/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
