Hi Dave,
DPDK cryptodev engine do not support aesni_mb vdev due to so linkage issue.
However even it is supported AESNI-MB PMD does not support jumbo frame either.
Did you enable IPsec async mode? It would be nice if you can share the VPP
commands and startup.conf you used for both IPsec_1 and 2.
Regards,
Fan
From: Dave Shi <shi.d...@mavenir.com>
Sent: Thursday, April 21, 2022 2:21 PM
To: vpp-dev@lists.fd.io; fteh...@cisco.com; Zhang, Roy Fan
<roy.fan.zh...@intel.com>; MARION, DAMJAN <damar...@cisco.com>
Subject: does cryptodev support ipsec jumbo frame
Hi experts,
I found DPDK Cryptodev Engine could not handle ipsec jumbo frame, VPP version
is 22.02, only dpdk_cryptodev (vdev aesni_mb) handler is used here,
native/ipsecmb/sw_scheduler are all disabled.
I’m not sure whether it’s related with aesni_mb pmd, could you help confirm?
The network topology is shown as follow, pump traffic (2600 Bytes) from Trex,
do esp encrypt in IPSec_1, and decrypt in IPSec_2.
Meet two issues:
1． get “crypto-dispatch bad-hmac error” in IPSec_2.
2． and few packets later, vpp crashed in IPSec_1.
[cid:image001.png@01D85591.7D88DD10]
(gdb) bt
#0 0x00007f323f1d3387 in raise () from /lib64/libc.so.6
#1 0x00007f323f1d4a78 in abort () from /lib64/libc.so.6
#2 0x00000000004071fa in os_exit () at
/home/dave.shi/git/vpp/src/vpp/vnet/main.c:437
#3 0x00007f32412353b7 in unix_signal_handler (signum=7, si=<optimized out>,
uc=<optimized out>) at /home/dave.shi/git/vpp/src/vlib/unix/main.c:187
#4 <signal handler called>
#5 0x00007f31fa9f86a1 in iavf_xmit_pkts () from
/usr/local/mnvpp-pkg/lib64/vpp_plugins/dpdk_plugin.so
#6 0x00007f31fca186ec in rte_eth_tx_burst (nb_pkts=<optimized out>,
tx_pkts=0x7f320298b240, queue_id=<optimized out>, port_id=<optimized out>)
at
/home/dave.shi/git/vpp/build-root/install-vpp-native/external/include/rte_ethdev.h:5680
#7 tx_burst_vector_internal (n_left=1, mb=0x7f320298b240, xd=<optimized out>,
vm=<optimized out>) at
/home/dave.shi/git/vpp/src/plugins/dpdk/device/device.c:175
#8 dpdk_device_class_tx_fn_skx () at
/home/dave.shi/git/vpp/src/plugins/dpdk/device/device.c:435
#9 0x00007f32411e2b65 in dispatch_node (last_time_stamp=<optimized out>,
frame=0x7f31ffab03c0, dispatch_state=VLIB_NODE_STATE_POLLING,
type=VLIB_NODE_TYPE_INTERNAL,
node=0x7f320295d300, vm=0x7f320295d300) at
/home/dave.shi/git/vpp/src/vlib/main.c:975
#10 dispatch_pending_node (vm=vm@entry=0x7f3202949280,
pending_frame_index=pending_frame_index@entry=6, last_time_stamp=<optimized
out>)
at /home/dave.shi/git/vpp/src/vlib/main.c:1134
#11 0x00007f32411e464f in vlib_main_or_worker_loop (is_main=0,
vm=0x7f3202949280, vm@entry=0x7f3202ae1500) at
/home/dave.shi/git/vpp/src/vlib/main.c:1600
#12 vlib_worker_loop (vm=vm@entry=0x7f3202949280) at
/home/dave.shi/git/vpp/src/vlib/main.c:1734
#13 0x00007f3241217bcd in vlib_worker_thread_fn (arg=0x7f320193adc0) at
/home/dave.shi/git/vpp/src/vlib/threads.c:1530
BRs
Dave
________________________________
This e-mail message may contain confidential or proprietary information of
Mavenir Systems, Inc. or its affiliates and is intended solely for the use of
the intended recipient(s). If you are not the intended recipient of this
message, you are hereby notified that any review, use or distribution of this
information is absolutely prohibited and we request that you delete all copies
in your control and contact us by e-mailing to
secur...@mavenir.com<mailto:secur...@mavenir.com>. This message contains the
views of its author and may not necessarily reflect the views of Mavenir
Systems, Inc. or its affiliates, who employ systems to monitor email messages,
but make no representation that such messages are authorized, secure,
uncompromised, or free from computer viruses, malware, or other defects. Thank
You
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#21277): https://lists.fd.io/g/vpp-dev/message/21277
Mute This Topic: https://lists.fd.io/mt/90606376/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
