Hi Neale,
Thanks, it worked. But occasionally *I am starving for crypto buffers, how
do we increase just the crypto buffers* ? I mean to ask if I know which
numa is being used in my case.... i only want to give additional buffers to
that only. So let me give me more details , please find them below.
*Node counters*
vpp# show node counters
Count Node Reason
409391269 gtpu4-input good packets decapsulated
409391269 dpdk-esp4-encrypt ESP pkts received
*56491 dpdk-esp4-encrypt Enqueue encrypt failed
(queue full)*
409391269 dpdk-esp4-decrypt-post ESP post pkts
409516045 dpdk-esp4-decrypt ESP pkts received
*124776 dpdk-esp4-decrypt Enqueue decrypt failed
(queue full)*
818726047 dpdk-crypto-input Crypto ops dequeued
2725300 dpdk-input no error
65 arp-reply ARP replies sent
96321 arp-reply IP4 source address not
local to subnet
1886 arp-input IP4 destination address
is unset
409391269 ipsec4-output-feature IPSec policy protect
409334778 ipsec4-output-feature IPSec policy bypass
818961464 ipsec4-input-feature IPSec pkts received
409516045 ipsec4-input-feature IPSec policy match
409445419 ipsec4-input-feature IPSec policy bypass
2723575 dpdk-input no error
97927 arp-disabled ARP Disabled on this
interface
1886 arp-input IP4 destination address
is unset
vpp#
*Startup.conf*
unix {
# nodaemon
log /var/log/vpp/vpp.log
full-coredump
cli-listen /run/vpp/cli.sock
gid vpp
exec /etc/vpp/setup.conf
}
api-trace {
on
}
api-segment {
gid vpp
}
socksvr {
default
}
cpu {
main-core 18
corelist-workers 20,22
no-multi-seg
}
dpdk {
dev default {
num-rx-desc 4096
num-tx-desc 4096
}
dev 0000:87:10.0 { ## Port handled by vfio-pci driver in host
name eth0
}
dev 0000:87:10.1 { ## Port handled by vfio-pci driver in host
name eth1
}
*socket-mem 1024,1024*
vdev crypto_aesni_mb0
vdev crypto_aesni_mb1
}
buffers {
* buffers-per-numa 128000*
}
Thanks,
Regards,
Venu
On Tue, 17 Aug 2021 at 14:25, Venumadhav Josyula via lists.fd.io <vjosyula=
gmail....@lists.fd.io> wrote:
> Thanks , neale let me try this
>
> On Tue, 17 Aug 2021 at 13:21, Neale Ranns <ne...@graphiant.com> wrote:
>
>>
>>
>> Hi Venu,
>>
>>
>>
>> Before adding any IPSec state:
>>
>>
>>
>> DBGvpp# ipsec select ?
>>
>> ipsec select backend ipsec select backend <ah|esp>
>> <backend index>
>>
>>
>>
>> /neale
>>
>>
>>
>> *From: *vpp-dev@lists.fd.io <vpp-dev@lists.fd.io> on behalf of
>> Venumadhav Josyula via lists.fd.io <vjosyula=gmail....@lists.fd.io>
>> *Date: *Tuesday, 17 August 2021 at 08:30
>> *To: *Sweetu Hubby <vjosy...@gmail.com>
>> *Cc: *vpp-dev <vpp-dev@lists.fd.io>
>> *Subject: *Re: [vpp-dev] using dpdk backend with vpp 20.09 using
>> stable/2009
>>
>> Hi *Sergio,*
>>
>>
>>
>> *Any help would be really appreciated.*
>>
>>
>>
>> *Thanks,*
>>
>> *Regards,*
>>
>> *Venu*
>>
>>
>>
>> On Tue, 17 Aug 2021 at 11:21, Venumadhav Josyula via lists.fd.io
>> <vjosyula=gmail....@lists.fd.io> wrote:
>>
>> Hi All,
>>
>> Please note we have build vpp from stable/2009 branch, following is
>> startup.conf
>>
>> unix {
>> # nodaemon
>> log /var/log/vpp/vpp.log
>> full-coredump
>> cli-listen /run/vpp/cli.sock
>> gid vpp
>> exec /etc/vpp/setup.conf
>> }
>> api-trace {
>> on
>> }
>> api-segment {
>> gid vpp
>> }
>> socksvr {
>> default
>> }
>> cpu {
>> main-core 18
>> corelist-workers 20,22
>> no-multi-seg
>> }
>> dpdk {
>> dev default {
>> num-rx-desc 4096
>> num-tx-desc 4096
>> }
>>
>> dev 0000:87:10.0 { ## Port handled by vfio-pci driver in host
>> name eth0
>> }
>> dev 0000:87:10.1 { ## Port handled by vfio-pci driver in host
>> name eth1
>> }
>> socket-mem 1024,1024
>> vdev crypto_aesni_mb0
>> vdev crypto_aesni_mb1
>>
>> }
>>
>>
>>
>> Commands used to ipsec tunnel
>>
>> vpp
>> -----------
>> ipsec sa add 10 spi 1001 esp crypto-alg aes-cbc-256 crypto-key
>> 4a506a794f574265564551694d6537684a506a794f574265564551694d653768 integ-alg
>> sha-256-128 integ-key
>> 2b7e151628aed2a6abf7158809cf4f3d2b7e151628aed2a6abf7158809cf4f3d tunnel-src
>> 172.17.4.246 tunnel-dst 172.17.4.251
>> ipsec sa add 11 spi 1002 esp crypto-alg aes-cbc-256 crypto-key
>> 4a506a794f574265564551694d6537684a506a794f574265564551694d653768 integ-alg
>> sha-256-128 integ-key
>> 2b7e151628aed2a6abf7158809cf4f3d2b7e151628aed2a6abf7158809cf4f3d tunnel-src
>> 172.17.4.251 tunnel-dst 172.17.4.246
>> ipsec spd add 1
>> set interface ipsec spd eth0 1
>> ipsec policy add spd 1 priority 10 outbound action protect sa 10
>> local-ip-range 172.17.4.246 - 172.17.4.246 remote-ip-range 172.17.4.251 -
>> 172.17.4.251
>> ipsec policy add spd 1 priority 10 inbound action protect sa 11
>> local-ip-range 172.17.4.246 - 172.17.4.246 remote-ip-range 172.17.4.251 -
>> 172.17.4.251
>>
>> ipsec policy add spd 1 priority 100 inbound action bypass protocol 50
>> ipsec policy add spd 1 priority 100 outbound action bypass protocol 50
>>
>>
>>
>>
>>
>> Following output
>>
>>
>>
>> vpp# show ipsec backends
>> IPsec AH backends available:
>> Name Index Active
>> crypto engine backend 0 yes
>> IPsec ESP backends available:
>> Name Index Active
>> crypto engine backend 0 yes
>> dpdk backend 1 no
>> vpp#
>>
>> vpp# show version
>> vpp v20.09.0-65~gdbaff84 built by root on 9315b7360381 at
>> 2021-08-05T08:20:42
>> vpp# show dp
>> dpdk dpo
>> vpp# show dpdk version
>> DPDK Version: DPDK 20.08.0
>> DPDK EAL init args: -c 540000 -n 4 --in-memory --vdev
>> crypto_aesni_mb0 --vdev crypto_aesni_mb1 --file-prefix vpp -w 0000:87:10.0
>> -w 0000:87:10.1 --master-lcore 18
>> vpp#
>>
>>
>>
>> How do we make it use dpdk backend ?
>>
>>
>>
>> Thanks,
>>
>> Regards,
>>
>> Venu
>>
>>
>>
>>
>>
>>
>
>
>
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#19979): https://lists.fd.io/g/vpp-dev/message/19979
Mute This Topic: https://lists.fd.io/mt/84941801/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
