Can you please try this patch and let me know if it fixes things for you?
https://gerrit.fd.io/r/17163
Thanks,
Klement
Quoting Klement Sekera via Lists.Fd.Io (2019-01-30 11:08:12)
> Hi,
>
> I see the issue, will come up with a patch shortly.
>
> Thanks,
> Klement
>
> Quoting Jan Gelety via Lists.Fd.Io (2019-01-30 10:22:18)
> > Hello vpp-dev team,
> >
> >
> >
> > Our csit performance tests for Ipsec using aes-gcm ciphering started to
> > fail because created ipsec interface cannot get to up state – tested with
> > vpp master (build 19.04-rc0~67-g72de626~b6198) as well as with
> > stable/1901
> > (build 19.01-rc2~3-g9124874~b2).
> >
> >
> >
> > We are using HW crypto card, dpdk plugin is loaded and dpdk backend is
> > active ipsec backend for ESP. We are receiving following responses for
> > set
> > interface state up command:
> >
> >
> >
> > - in case of AES-GCM-128: set interface state: unsupported
> > aes-gcm-128 crypto-alg
> >
> > - in case of AES-GCM-192: set interface state: unsupported none
> > integ-alg
> >
> >
> >
> > Could you, please, let us know if there is something wrong in our
> > configuration (see VAT commands and startup.conf below; it worked before)
> > or there is a bug in vpp?
> >
> >
> >
> > Thanks,
> >
> > Jan
> >
> >
> >
> > VAT commands used to configure vpp:
> >
> > sw_interface_set_flags sw_if_index 2 admin-up link-up
> >
> > sw_interface_set_flags sw_if_index 1 admin-up link-up
> >
> > sw_interface_dump
> >
> > hw_interface_set_mtu sw_if_index 2 mtu 9200
> >
> > hw_interface_set_mtu sw_if_index 1 mtu 9200
> >
> > sw_interface_dump
> >
> > sw_interface_dump
> >
> > sw_interface_dump
> >
> > sw_interface_add_del_address sw_if_index 2 192.168.10.1/24
> >
> > sw_interface_add_del_address sw_if_index 1 172.168.1.1/24
> >
> > ip_neighbor_add_del sw_if_index 2 dst 192.168.10.2 mac 68:05:ca:35:79:1c
> >
> > ip_neighbor_add_del sw_if_index 1 dst 172.168.1.2 mac 68:05:ca:35:76:b1
> >
> > ip_add_del_route 10.0.0.0/8 via 192.168.10.2 sw_if_index 2
> > resolve-attempts 10 count 1
> >
> > ipsec_tunnel_if_add_del local_spi 10000 remote_spi 20000 crypto_alg
> > aes-gcm-192 local_crypto_key
> > 685857656d48393835654169447a516864314e51447450666352706a
> > remote_crypto_key
> > 685857656d48393835654169447a516864314e51447450666352706a local_ip
> > 172.168.1.1 remote_ip 172.168.1.2
> >
> > exec ip route add 20.0.0.0/32 via 172.168.1.2 ipsec0
> >
> > exec set interface unnumbered ipsec0 use FortyGigabitEthernet88/0/0
> >
> > exec set interface state ipsec0 up
> >
> >
> >
> > Our startup.conf:
> >
> > ip
> >
> > {
> >
> > heap-size 4G
> >
> > }
> >
> > statseg
> >
> > {
> >
> > size 4G
> >
> > }
> >
> > unix
> >
> > {
> >
> > cli-listen /run/vpp/cli.sock
> >
> > log /tmp/vpe.log
> >
> > full-coredump
> >
> > nodaemon
> >
> > }
> >
> > ip6
> >
> > {
> >
> > heap-size 4G
> >
> > hash-buckets 2000000
> >
> > }
> >
> > heapsize 4G
> >
> > plugins
> >
> > {
> >
> > plugin default
> >
> > {
> >
> > disable
> >
> > }
> >
> > plugin dpdk_plugin.so
> >
> > {
> >
> > enable
> >
> > }
> >
> > }
> >
> > cpu
> >
> > {
> >
> > corelist-workers 20
> >
> > main-core 19
> >
> > }
> >
> > dpdk
> >
> > {
> >
> > dev 0000:88:00.1
> >
> > dev 0000:88:00.0
> >
> > no-multi-seg
> >
> > uio-driver igb_uio
> >
> > log-level debug
> >
> > dev default
> >
> > {
> >
> > num-rx-desc 2048
> >
> > num-rx-queues 1
> >
> > num-tx-desc 2048
> >
> > }
> >
> > dev 0000:86:01.0
> >
> > socket-mem 1024,1024
> >
> > no-tx-checksum-offload
> >
> > }
>
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
>
> View/Reply Online (#12058): https://lists.fd.io/g/vpp-dev/message/12058
> Mute This Topic: https://lists.fd.io/mt/29592457/675704
> Group Owner: vpp-dev+ow...@lists.fd.io
> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [ksek...@cisco.com]
> -=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#12059): https://lists.fd.io/g/vpp-dev/message/12059
Mute This Topic: https://lists.fd.io/mt/29592457/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
