[dpdk-users] IPsec offload

[Avi Cohen (A)]

Thank you Pablo
1. Now I have multiple build errors 'undeclared here' when building dpdk for example aes_gcm_enc_128_sse . I'm trying to find where these are declared
2. Regarding the crypto-device - I have Intel x540-AT2 Nic
Regards
Avi

> -----Original Message-----
> From: De Lara Guarch, Pablo [mailto:pablo.de.lara.guarch at intel.com]
> Sent: Tuesday, 07 November, 2017 1:24 PM
> To: Avi Cohen (A); Thomas Monjalon
> Cc: users at dpdk.org; olgas at mellanox.com
> Subject: RE: [dpdk-users] IPsec offload
> 
> Hi Avi,
> 
> > -----Original Message-----
> > From: Avi Cohen (A) [mailto:avi.cohen at huawei.com]
> > Sent: Tuesday, November 7, 2017 8:55 AM
> > To: De Lara Guarch, Pablo <pablo.de.lara.guarch at intel.com>; Thomas
> > Monjalon <thomas at monjalon.net>
> > Cc: users at dpdk.org; olgas at mellanox.com
> > Subject: RE: [dpdk-users] IPsec offload
> >
> >
> > > > Thank you Pablo
> > > > Can you supply an example command line to run the ipsec-secgw ?
> > >
> > > ./examples/ipsec-secgw/build/ipsec-secgw -l 10,11 -n 4 --
> > > vdev="crypto_aesni_gcm0" /
> > > -- -p 0x1 -P --config="(0,0,10)" -f ep-sample.cfg
> > >
> > > Where ep-sample.cfg contains:
> > >
> > > sp ipv4 out esp protect 0010 pri 1 dst 001.0.0.0/24 sport 0:65535
> > > dport 0:65535 sa out 0010 aead_algo aes-128-gcm aead_key
> > de:ad:be:ef:de:ad:be:ef:de:ad:be:
> > > ef:de:ad:be:ef:de:ad:be:ef mode ipv4-tunnel src 20.0.0.0 dst
> > > 21.0.0.0 rt ipv4 dst
> > > 21.0.0.0/8 port 0
> > >
> > [Avi Cohen (A)]
> >
> > When running it almost all parameters from the config file starting from "
> > sa out 0010"  are not recognized by the application Do I have to
> > create any additional objects before running it ? I don't see it in the
> documentation .
> > I want to run IPsec offload over ethernet port Best Regards Avi
> 
> You need to make sure that you have a crypto device (SW or HW) that support
> the algorithms set in the sa lines.
> For instance, the "SA line" above is using AES-GCM, so you could use the AESNI
> GCM PMD, with the command line above (using --vdev).
> 
> Regards,
> Pablo