> On 24.05.2022., at 14:28, PRANAB DAS <pkdas.bos...@gmail.com> wrote: > > Hi Damjan, > > The snort plugin could be simple. But I am not familiar with VPP > memory/buffer management as such and I am finding it not so easy to navigate. > And looking at the physmem.c/h code, it appears the VPP uses heap memory > (mmap) and has its own heap/buffer management system.
VPP uses mmap system call (same like DPDK) to map shared memory, but that is not heap memory. VPP buffer memory is shared memory (typically hugepage backed). There is one block of shared memory per NUMA, and each block have own FD. VPP can pass that FD to remote app over UDS and remote app can simply map that shared memory, Both memif and snort plugins do exactly that. Main complexity is creating another shared memory region which holds enqueue and dequeue rings: In snort plugin you can see how that shared memory is orgaised by looking at src/plugins/snort/daq_vpp.h > Could you clarify? And in the snort plugin exposes/shares the mmap memory > region to the external program (snort). Is there any documentation that > provides an overview of VPP buffer management and how VPP memory/buffers can > be shared with external trusted applications? No, unfortunately there is no documentation, but there is running code (snort plugin) which does exactly that. If you have any questions, ask here and i will try to help. > > Thank you > > - PK Das > > > > > On Tue, May 24, 2022 at 7:51 AM Damjan Marion <dmar...@me.com > <mailto:dmar...@me.com>> wrote: > > VPP is not DPDK application, VPP features doesnt maintain DPDK metadata, in > many cases we use native drivers so DPDK is not even loaded so you cannot use > rte_ring unless you want to write complete translation layer which will > likely be significantly slower that using native way which snort plugin uses. > > Why do you think zero copy interface in snort plugin is not simple? > > — > Damjan > >> On 24.05.2022., at 13:34, PRANAB DAS <pkdas.bos...@gmail.com >> <mailto:pkdas.bos...@gmail.com>> wrote: >> >> >> Thank you very much for your response Benoit! >> I am wondering if there is another option e.g. rte-ring of DPDK or if that >> option is not feasible in VPP? >> Could you comment? We are looking for a service-chaining application similar >> to snort but would like to have a much simpler zero-copy interface. >> >> Thank you, >> >> - P K DAS >> >> On Tue, May 24, 2022 at 4:22 AM Benoit Ganne (bganne) <bga...@cisco.com >> <mailto:bga...@cisco.com>> wrote: >> It all depends on what you want to do. Usually, we try to avoid sharing >> buffers read/write between multiple process, it makes debugging much harder >> - especially buffer leaks or use-after-free... >> Here is an example to share VPP buffers read-only with snort so that snort >> can inspect traffic and gives a verdict back without any copy: >> https://git.fd.io/vpp/tree/src/plugins/snort >> <https://git.fd.io/vpp/tree/src/plugins/snort> >> >> Best >> ben >> >> > -----Original Message----- >> > From: vpp-dev@lists.fd.io <mailto:vpp-dev@lists.fd.io> >> > <vpp-dev@lists.fd.io <mailto:vpp-dev@lists.fd.io>> On Behalf Of PRANAB DAS >> > Sent: Monday, May 23, 2022 20:11 >> > To: vpp-dev@lists.fd.io <mailto:vpp-dev@lists.fd.io> >> > Subject: Re: [vpp-dev] zero memcpy interface (alternative to memif) to >> > pass packets from VPP to another trusted DPDK application >> > >> > Hi >> > >> > Could some one comment on zero-copy alternative to memif interface? Any >> > ideas, comments are welcome. >> > >> > Thank you >> > >> > - Pranab K Das >> >> >>
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#21442): https://lists.fd.io/g/vpp-dev/message/21442 Mute This Topic: https://lists.fd.io/mt/91252298/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
