Hi ben The firtst reason is the SA bytes/packets only show there is some trafffic that use this sa , we must record and calculation the last time in IKE processs, and this is not accurate that based on the poll frequency. This is the major reason , we want this timestamp is more accurately in DPD. The second reason is thar our IKE is strongswan , it expect get that last use time from query_sa or query_policy directly.
Thanks Gaungming zhangguangm...@baicells.com From: Benoit Ganne (bganne) via lists.fd.io Date: 2022-10-14 14:44 To: vpp-dev@lists.fd.io; neale; radu.nicolau; roy.fan.zhang Subject: Re: [vpp-dev] A question about last used timestamp in ipsec sa As you'd have to poll SA timestamp counters anyway to check the timestamp, why not just poll existing SA bytes/packets counters instead to see if some traffic is going through? Best ben > -----Original Message----- > From: vpp-dev@lists.fd.io <vpp-dev@lists.fd.io> On Behalf Of Guangming > Sent: Friday, October 14, 2022 8:37 > To: neale <ne...@graphiant.com>; radu.nicolau <radu.nico...@intel.com>; > roy.fan.zhang <roy.fan.zh...@intel.com> > Cc: vpp-dev <vpp-dev@lists.fd.io> > Subject: [vpp-dev] A question about last used timestamp in ipsec sa > > > > Hi,Neale , Radu and Fan > Now the ipsec in VPP did not record the traffic timestamp in sa and > spd like linux kernel . So we can not Implement the full DPD function In > IKE control daemon that only send DPD when no traffic . > What is the good method to add timestamp . This method should be fit to > both sync node and async mode. > Use a new timestamp counter or add timestamp in old couter > ipsec_sa_counters ? > > struct xfrm_lifetime_cur { > __u64 bytes; > __u64 packets; > __u64 add_time; > __u64 use_time; > }; > > > Thanks > Guangming > ________________________________ > > zhangguangm...@baicells.com
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#22032): https://lists.fd.io/g/vpp-dev/message/22032 Mute This Topic: https://lists.fd.io/mt/94321862/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631435203/xyzzy [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-