capture and config. attached
vpp# sh ipsec config sa 10 spi 1001 mode transport protocol esp crypto alg aes-cbc-128 key 4a506a794f574265564551694d653768 integrity alg sha1-96 key 4339314b55523947594d6d3547666b45764e6a58 sa 20 spi 1000 mode transport protocol esp crypto alg aes-cbc-128 key 4a506a794f574265564551694d653768 integrity alg sha1-96 key 4339314b55523947594d6d3547666b45764e6a58 spd 1 outbound policies priority 10 action protect protocol any sa 10 local addr range 192.168.200.1 - 192.168.200.200 port range 0 - 65535 remote addr range 192.168.100.1 - 192.168.100.200 port range 0 - 65535 packets 0 bytes 0 inbound policies priority 10 action protect protocol any sa 20 local addr range 192.168.200.1 - 192.168.200.200 port range 0 - 65535 remote addr range 192.168.100.1 - 192.168.100.200 port range 0 - 65535 packets 0 bytes 0 SPD Bindings: 0 -> VirtualFunctionEthernet1/0/1 tunnel interfaces configure: unknown input `' vpp# sh int address VirtualFunctionEthernet1/0/1 (up): L3 192.168.30.200/24 VirtualFunctionEthernet1/0/2 (up): L3 192.168.200.1/24 local0 (dn): vpp# trace add dpdk-crypto-input 10 vpp# sh trace ------------------- Start of thread 0 vpp_main ------------------- No packets in trace buffer ------------------- Start of thread 1 vpp_wk_0 ------------------- No packets in trace buffer vpp# vpp# sh trace ------------------- Start of thread 0 vpp_main ------------------- No packets in trace buffer ------------------- Start of thread 1 vpp_wk_0 ------------------- No packets in trace buffer vpp# sh interface Name Idx State MTU (L3/IP4/IP6/MPLS) Counter Count VirtualFunctionEthernet1/0/1 1 up 9000/0/0/0 rx packets 2472624 rx bytes 252207648 drops 2472625 tx-error 1 VirtualFunctionEthernet1/0/2 2 up 9000/0/0/0 drops 1 tx-error 1 local0 0 down 0/0/0/0 vpp# sh trace ------------------- Start of thread 0 vpp_main ------------------- No packets in trace buffer ------------------- Start of thread 1 vpp_wk_0 ------------------- No packets in trace buffer vpp# sh dpdk crypto devices 0000:04:00.1 crypto_octeontx up numa_node 0, max_queues 1 free_resources 0, used_resources 1 SYMMETRIC_CRYPTO, SYM_OPERATION_CHAINING, HW_ACCELERATED, IN_PLACE_SGL, OOP_SGL_IN_SGL_OUT, OOP_SGL_IN_LB_OUT Cipher: none, aes-cbc-128, aes-cbc-192, aes-cbc-256, aes-ctr-128, aes-ctr-192, aes-ctr-256, aes-gcm-128, aes-gcm-192, aes-gcm-256 Auth: none, md5-96, sha1-96, sha-256-96, sha-256-128, sha-384-192, sha-512-256
0000:04:00.2 crypto_octeontx up numa_node 0, max_queues 1 free_resources 1, used_resources 0 SYMMETRIC_CRYPTO, SYM_OPERATION_CHAINING, HW_ACCELERATED, IN_PLACE_SGL, OOP_SGL_IN_SGL_OUT, OOP_SGL_IN_LB_OUT Cipher: none, aes-cbc-128, aes-cbc-192, aes-cbc-256, aes-ctr-128, aes-ctr-192, aes-ctr-256, aes-gcm-128, aes-gcm-192, aes-gcm-256 Auth: none, md5-96, sha1-96, sha-256-96, sha-256-128, sha-384-192, sha-512-256 0000:04:00.3 crypto_octeontx up numa_node 0, max_queues 1 free_resources 1, used_resources 0 SYMMETRIC_CRYPTO, SYM_OPERATION_CHAINING, HW_ACCELERATED, IN_PLACE_SGL, OOP_SGL_IN_SGL_OUT, OOP_SGL_IN_LB_OUT vpp#
vpp# sh ipsec config sa 10 spi 1000 mode transport protocol esp crypto alg aes-cbc-128 key 4a506a794f574265564551694d653768 integrity alg sha1-96 key 4339314b55523947594d6d3547666b45764e6a58 sa 20 spi 1001 mode transport protocol esp crypto alg aes-cbc-128 key 4a506a794f574265564551694d653768 integrity alg sha1-96 key 4339314b55523947594d6d3547666b45764e6a58 spd 1 outbound policies priority 10 action protect protocol any sa 10 local addr range 192.168.100.1 - 192.168.100.200 port range 0 - 65535 remote addr range 192.168.200.1 - 192.168.200.200 port range 0 - 65535 packets 0 bytes 0 inbound policies priority 10 action protect protocol any sa 20 local addr range 192.168.100.1 - 192.168.100.200 port range 0 - 65535 remote addr range 192.168.200.1 - 192.168.200.200 port range 0 - 65535 packets 0 bytes 0 SPD Bindings: 0 -> VirtualFunctionEthernet1/0/2 tunnel interfaces configure: unknown input `' vpp# sh int address VirtualFunctionEthernet1/0/1 (up): L3 192.168.100.1/24 VirtualFunctionEthernet1/0/2 (up): L3 192.168.30.100/24 local0 (dn): vpp# sh dpdk crypto devices 0000:04:00.1 crypto_octeontx up numa_node 0, max_queues 1 free_resources 0, used_resources 1 SYMMETRIC_CRYPTO, SYM_OPERATION_CHAINING, HW_ACCELERATED, IN_PLACE_SGL, OOP_SGL_IN_SGL_OUT, OOP_SGL_IN_LB_OUT Cipher: none, aes-cbc-128, aes-cbc-192, aes-cbc-256, aes-ctr-128, aes-ctr-192, aes-ctr-256, aes-gcm-128, aes-gcm-192, aes-gcm-256 Auth: none, md5-96, sha1-96, sha-256-96, sha-256-128, sha-384-192, sha-512-256 0000:04:00.2 crypto_octeontx up numa_node 0, max_queues 1 free_resources 1, used_resources 0 SYMMETRIC_CRYPTO, SYM_OPERATION_CHAINING, HW_ACCELERATED, IN_PLACE_SGL, OOP_SGL_IN_SGL_OUT, OOP_SGL_IN_LB_OUT Cipher: none, aes-cbc-128, aes-cbc-192, aes-cbc-256, aes-ctr-128, aes-ctr-192, aes-ctr-256, aes-gcm-128, aes-gcm-192, aes-gcm-256 Auth: none, md5-96, sha1-96, sha-256-96, sha-256-128, sha-384-192, sha-512-256 0000:04:00.3 crypto_octeontx up numa_node 0, max_queues 1 free_resources 1, used_resources 0 SYMMETRIC_CRYPTO, SYM_OPERATION_CHAINING, HW_ACCELERATED, IN_PLACE_SGL, OOP_SGL_IN_SGL_OUT, OOP_SGL_IN_LB_OUT ... vpp# trace add dpdk-crypto-input 10 vpp# sh trace ------------------- Start of thread 0 vpp_main ------------------- No packets in trace buffer ------------------- Start of thread 1 vpp_wk_0 ------------------- No packets in trace buffer vpp# sh trace ------------------- Start of thread 0 vpp_main ------------------- No packets in trace buffer ------------------- Start of thread 1 vpp_wk_0 ------------------- Packet 1 00:03:07:167310: dpdk-crypto-input status: success 00:03:07:167371: VirtualFunctionEthernet1/0/2-output VirtualFunctionEthernet1/0/2 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 00:03:07:167392: VirtualFunctionEthernet1/0/2-tx VirtualFunctionEthernet1/0/2 tx queue 1 buffer 0x2a02: current data -24, length 102, buffer-pool 0, clone-count 0, totlen-nifb 0, trace 0x0 ext-hdr-valid l4-cksum-computed l4-cksum-correct l2-hdr-offset 0 l3-hdr-offset 14 PKT MBUF: port 0, nb_segs 1, pkt_len 102 buf_len 2176, data_len 102, ol_flags 0x180, data_off 104, phys_addr 0x40150200 packet_type 0x210 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0 rss 0x0 fdir.hi 0x0 fdir.lo 0x0 Packet Offload Flags PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid Packet Types RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers RTE_PTYPE_L4_UDP (0x0200) UDP packet 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 Packet 2 00:03:07:167310: dpdk-crypto-input status: success 00:03:07:167371: VirtualFunctionEthernet1/0/2-output VirtualFunctionEthernet1/0/2 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 00:03:07:167392: VirtualFunctionEthernet1/0/2-tx VirtualFunctionEthernet1/0/2 tx queue 1 buffer 0x29ed: current data -24, length 102, buffer-pool 0, clone-count 0, totlen-nifb 0, trace 0x1 ext-hdr-valid l4-cksum-computed l4-cksum-correct l2-hdr-offset 0 l3-hdr-offset 14 PKT MBUF: port 0, nb_segs 1, pkt_len 102 buf_len 2176, data_len 102, ol_flags 0x180, data_off 104, phys_addr 0x4014f7 80 packet_type 0x210 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0 rss 0x0 fdir.hi 0x0 fdir.lo 0x0 Packet Offload Flags PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid Packet Types RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers RTE_PTYPE_L4_UDP (0x0200) UDP packet 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 Packet 3 00:03:07:167692: dpdk-crypto-input status: success 00:03:07:167742: VirtualFunctionEthernet1/0/2-output VirtualFunctionEthernet1/0/2 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 00:03:07:167766: VirtualFunctionEthernet1/0/2-tx VirtualFunctionEthernet1/0/2 tx queue 1 buffer 0x29d8: current data -24, length 102, buffer-pool 0, clone-count 0, totlen-nifb 0, trace 0x2 ext-hdr-valid l4-cksum-computed l4-cksum-correct l2-hdr-offset 0 l3-hdr-offset 14 PKT MBUF: port 0, nb_segs 1, pkt_len 102 buf_len 2176, data_len 102, ol_flags 0x180, data_off 104, phys_addr 0x4014ed00 packet_type 0x210 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0 rss 0x0 fdir.hi 0x0 fdir.lo 0x0 Packet Offload Flags PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid Packet Types RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers RTE_PTYPE_L4_UDP (0x0200) UDP packet 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 Packet 4 00:03:07:167692: dpdk-crypto-input status: success 00:03:07:167742: VirtualFunctionEthernet1/0/2-output VirtualFunctionEthernet1/0/2 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 00:03:07:167766: VirtualFunctionEthernet1/0/2-tx VirtualFunctionEthernet1/0/2 tx queue 1 buffer 0x29c3: current data -24, length 102, buffer-pool 0, clone-count 0, totlen-nifb 0, trace 0x3 ext-hdr-valid l4-cksum-computed l4-cksum-correct l2-hdr-offset 0 l3-hdr-offset 14 PKT MBUF: port 0, nb_segs 1, pkt_len 102 buf_len 2176, data_len 102, ol_flags 0x180, data_off 104, phys_addr 0x4014e280 packet_type 0x210 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0 rss 0x0 fdir.hi 0x0 fdir.lo 0x0 Packet Offload Flags PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid Packet Types RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers RTE_PTYPE_L4_UDP (0x0200) UDP packet 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 Packet 5 00:03:07:167692: dpdk-crypto-input status: success 00:03:07:167742: VirtualFunctionEthernet1/0/2-output VirtualFunctionEthernet1/0/2 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 00:03:07:167766: VirtualFunctionEthernet1/0/2-tx VirtualFunctionEthernet1/0/2 tx queue 1 buffer 0x29ae: current data -24, length 102, buffer-pool 0, clone-count 0, totlen-nifb 0, trace 0x4 ext-hdr-valid l4-cksum-computed l4-cksum-correct l2-hdr-offset 0 l3-hdr-offset 14 PKT MBUF: port 0, nb_segs 1, pkt_len 102 buf_len 2176, data_len 102, ol_flags 0x180, data_off 104, phys_addr 0x4014d800 packet_type 0x210 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0 rss 0x0 fdir.hi 0x0 fdir.lo 0x0 Packet Offload Flags PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid Packet Types RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers RTE_PTYPE_L4_UDP (0x0200) UDP packet 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 Packet 6 00:03:07:167692: dpdk-crypto-input status: success 00:03:07:167742: VirtualFunctionEthernet1/0/2-output VirtualFunctionEthernet1/0/2 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 00:03:07:167766: VirtualFunctionEthernet1/0/2-tx VirtualFunctionEthernet1/0/2 tx queue 1 buffer 0x2999: current data -24, length 102, buffer-pool 0, clone-count 0, totlen-nifb 0, trace 0x5 ext-hdr-valid l4-cksum-computed l4-cksum-correct l2-hdr-offset 0 l3-hdr-offset 14 PKT MBUF: port 0, nb_segs 1, pkt_len 102 buf_len 2176, data_len 102, ol_flags 0x180, data_off 104, phys_addr 0x4014cd80 packet_type 0x210 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0 rss 0x0 fdir.hi 0x0 fdir.lo 0x0 Packet Offload Flags PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid Packet Types RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers RTE_PTYPE_L4_UDP (0x0200) UDP packet 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 Packet 7 00:03:07:167692: dpdk-crypto-input status: success 00:03:07:167742: VirtualFunctionEthernet1/0/2-output VirtualFunctionEthernet1/0/2 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 00:03:07:167766: VirtualFunctionEthernet1/0/2-tx VirtualFunctionEthernet1/0/2 tx queue 1 buffer 0x2984: current data -24, length 102, buffer-pool 0, clone-count 0, totlen-nifb 0, trace 0x6 ext-hdr-valid l4-cksum-computed l4-cksum-correct l2-hdr-offset 0 l3-hdr-offset 14 PKT MBUF: port 0, nb_segs 1, pkt_len 102 buf_len 2176, data_len 102, ol_flags 0x180, data_off 104, phys_addr 0x4014c300 packet_type 0x210 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0 rss 0x0 fdir.hi 0x0 fdir.lo 0x0 Packet Offload Flags PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid Packet Types RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers RTE_PTYPE_L4_UDP (0x0200) UDP packet 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 Packet 8 00:03:07:167692: dpdk-crypto-input status: success 00:03:07:167742: VirtualFunctionEthernet1/0/2-output VirtualFunctionEthernet1/0/2 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 00:03:07:167766: VirtualFunctionEthernet1/0/2-tx VirtualFunctionEthernet1/0/2 tx queue 1 buffer 0x296f: current data -24, length 102, buffer-pool 0, clone-count 0, totlen-nifb 0, trace 0x7 ext-hdr-valid l4-cksum-computed l4-cksum-correct l2-hdr-offset 0 l3-hdr-offset 14 PKT MBUF: port 0, nb_segs 1, pkt_len 102 buf_len 2176, data_len 102, ol_flags 0x180, data_off 104, phys_addr 0x4014b880 packet_type 0x210 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0 rss 0x0 fdir.hi 0x0 fdir.lo 0x0 Packet Offload Flags PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid Packet Types RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers RTE_PTYPE_L4_UDP (0x0200) UDP packet 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 Packet 9 00:03:07:167692: dpdk-crypto-input status: success 00:03:07:167742: VirtualFunctionEthernet1/0/2-output VirtualFunctionEthernet1/0/2 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 00:03:07:167766: VirtualFunctionEthernet1/0/2-tx VirtualFunctionEthernet1/0/2 tx queue 1 buffer 0x295a: current data -24, length 102, buffer-pool 0, clone-count 0, totlen-nifb 0, trace 0x8 ext-hdr-valid l4-cksum-computed l4-cksum-correct l2-hdr-offset 0 l3-hdr-offset 14 PKT MBUF: port 0, nb_segs 1, pkt_len 102 buf_len 2176, data_len 102, ol_flags 0x180, data_off 104, phys_addr 0x4014ae00 packet_type 0x210 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0 rss 0x0 fdir.hi 0x0 fdir.lo 0x0 Packet Offload Flags PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid Packet Types RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers RTE_PTYPE_L4_UDP (0x0200) UDP packet 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 Packet 10 00:03:07:167692: dpdk-crypto-input status: success 00:03:07:167742: VirtualFunctionEthernet1/0/2-output VirtualFunctionEthernet1/0/2 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01 00:03:07:167766: VirtualFunctionEthernet1/0/2-tx VirtualFunctionEthernet1/0/2 tx queue 1 buffer 0x2945: current data -24, length 102, buffer-pool 0, clone-count 0, totlen-nifb 0, trace 0x9 ext-hdr-valid l4-cksum-computed l4-cksum-correct l2-hdr-offset 0 l3-hdr-offset 14 PKT MBUF: port 0, nb_segs 1, pkt_len 102 buf_len 2176, data_len 102, ol_flags 0x180, data_off 104, phys_addr 0x4014a380 packet_type 0x210 l2_len 0 l3_len 0 outer_l2_len 0 outer_l3_len 0 rss 0x0 fdir.hi 0x0 fdir.lo 0x0 Packet Offload Flags PKT_RX_IP_CKSUM_GOOD (0x0080) IP cksum of RX pkt. is valid PKT_RX_L4_CKSUM_GOOD (0x0100) L4 cksum of RX pkt. is valid Packet Types RTE_PTYPE_L3_IPV4 (0x0010) IPv4 packet without extension headers RTE_PTYPE_L4_UDP (0x0200) UDP packet 0x0000: 02:0f:b7:00:00:00 -> 02:0f:b7:00:00:01
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#12122): https://lists.fd.io/g/vpp-dev/message/12122 Mute This Topic: https://lists.fd.io/mt/29538345/21656 Mute #vpp: https://lists.fd.io/mk?hashtag=vpp&subid=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-