Re: [vpp-dev] periodical build failure of external dependency ipsec-mb

2023-02-14 Thread Neale Ranns
Hi Laszlo, As Stanislav said, probably not enough RAM on your box to handle the build parallelism. On subsequent runs, once some files are compiled, the parallelism drops and the build will pass. /neale From: vpp-dev@lists.fd.io on behalf of Stanislav Zaikin via lists.fd.io Date: Monday,

Re: [vpp-dev] veth alternative in VPP

2023-01-04 Thread Neale Ranns
I’d suggest a pipe, each end can be in a different VRF. See src/scripts/vnet/ipsec for a config example. /neale From: vpp-dev@lists.fd.io on behalf of Benoit Ganne (bganne) via lists.fd.io Date: Thursday, 5 January 2023 at 00:18 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] veth

Re: [vpp-dev] Procedure to send API from VPP to agent based on event

2022-12-15 Thread Neale Ranns
Hi Alok, There are a few examples of these sort of “want” APIs. For example, from src/vnet/interface.api: service { rpc want_interface_events returns want_interface_events_reply events sw_interface_event; }; /neale From: vpp-dev@lists.fd.io on behalf of Alok Tiwari via lists.fd.io

Re: [vpp-dev] There is bug in esp decrypt

2022-11-22 Thread Neale Ranns
A SA is in-use if it is referred to by a policy. Remove it from the policy and no more traffic will use it. If you’re doing that with the workers running, then wait one worker loop before deleting the SA. /neale From: vpp-dev@lists.fd.io on behalf of jiangxiaoming via lists.fd.io Date:

Re: [vpp-dev] There is bug in esp decrypt

2022-11-20 Thread Neale Ranns
Deleting an SA that is in-use, should return an error and be prevented. /neale From: vpp-dev@lists.fd.io on behalf of Guangming via lists.fd.io Date: Saturday, 19 November 2022 at 00:27 To: vpp-dev Subject: Re: [vpp-dev] There is bug in esp decrypt I got the same issue when use cli

Re: [vpp-dev] There is bug in esp decrypt

2022-11-17 Thread Neale Ranns
...@baicells.com From: Neale Ranns<mailto:ne...@graphiant.com> Date: 2022-11-18 09:32 To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] There is bug in esp decrypt Hi, I’ll push a patch with UT shortly. Many thanks, neale From: vpp-dev@lists.fd.io on behalf of jiang

Re: [vpp-dev] There is bug in esp decrypt

2022-11-17 Thread Neale Ranns
Hi, I’ll push a patch with UT shortly. Many thanks, neale From: vpp-dev@lists.fd.io on behalf of jiangxiaoming via lists.fd.io Date: Friday, 18 November 2022 at 11:58 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] There is bug in esp decrypt Hi Guangming, You are right, you can push a

Re: [vpp-dev] Move VNET features to plugins

2022-10-17 Thread Neale Ranns
Hi Dave, I fully support pluginification  Is it fair though to say that if the remaining functions of vnet have a dependency on one of the modules below then that module is not a good candidate to move to a plugin? I thinking about the dependency between IPIP and TEIB. Some of the IPIP

Re: [vpp-dev] A question about fib-id with ip neighbor

2022-10-14 Thread Neale Ranns
Hi Huawei, The fib-ID should be removed from the cmd’s help. /neale From: lihuawei Date: Friday, 14 October 2022 at 16:01 To: Neale Ranns , vpp-dev@lists.fd.io Subject: A question about fib-id with ip neighbor Hi Neale, As the following picture shows: I have not see any support for the fib

Re: [vpp-dev] Gerrit Review Id 37303

2022-10-10 Thread Neale Ranns
Hi Huawei, Patch merged. Thank you. /neale From: vpp-dev@lists.fd.io on behalf of lihuawei via lists.fd.io Date: Tuesday, 11 October 2022 at 13:17 To: vpp-dev@lists.fd.io Subject: [vpp-dev] Gerrit Review Id 37303 Hi community, I have added a fix as gerrit review id 37303. gerrit link:

Re: [vpp-dev] Combined statistics for all traffic mapped to a MPLS LSP path

2022-10-10 Thread Neale Ranns
From: vpp-dev@lists.fd.io On Behalf Of Neale Ranns Sent: Friday, October 7, 2022 2:43 AM To: vpp-dev@lists.fd.io Subject: [**EXTERNAL**] Re: [vpp-dev] Combined statistics for all traffic mapped to a MPLS LSP path Hi Mohit, VPP doesn’t have a single object with stats that represents an LSP in its

Re: [vpp-dev] Combined statistics for all traffic mapped to a MPLS LSP path

2022-10-06 Thread Neale Ranns
Hi Mohit, VPP doesn’t have a single object with stats that represents an LSP in its broad sense. You’ll have to combine the states from the objects that use/point-to the LSP (or rather use the out-going label value of the LSP) – for example IP or MPLS FIB entries, or MPLS tunnel interfaces,

Re: [vpp-dev] Insert Custom Node Into ip4-unicast Feature Arc

2022-09-30 Thread Neale Ranns
Hi Padraig, From: vpp-dev@lists.fd.io on behalf of Pádraig Connolly via lists.fd.io Date: Saturday, 1 October 2022 at 09:52 To: vpp-dev@lists.fd.io Subject: [vpp-dev] Insert Custom Node Into ip4-unicast Feature Arc Hi, For purely my own learning, I am trying to insert my custom node into

Re: [vpp-dev] Stats (rx/tx bytes) per MAC address

2022-09-28 Thread Neale Ranns
e Andre Courchesne. The information contained in this document is confidential and property of Andre Courchesne. It shall not be used, disclosed to others or reproduced without the express written consent of Andre Courchesne. On Tue, Sep 27, 2022 at 8:43 PM Neale Ranns mailto:ne...@graphian

Re: [vpp-dev] Stats (rx/tx bytes) per MAC address

2022-09-27 Thread Neale Ranns
Hi Andre, For L3 forwarding you can use the per-adjacency counters. This are not enabled by default, because, like all stats, they come with a performance cost. DBGvpp# adjacency counters ? adjacency counters adjacency counters [enable|disable] you’ll then find then

Re: [vpp-dev] ISIS with VPP+FRR

2022-09-18 Thread Neale Ranns
VPP accepts the frame based on the MAC, but there is no handler for the ISIS MAC type, so it is dropped. You’ll need to add support for this. /neale From: vpp-dev@lists.fd.io on behalf of Mohamed Naiem via lists.fd.io Date: Thursday, 15 September 2022 at 21:08 To: vpp-dev@lists.fd.io

Re: [vpp-dev] Query regarding neos mpls fib entry for tunnel interface

2022-08-25 Thread Neale Ranns
From: vpp-dev@lists.fd.io on behalf of sreejith n via lists.fd.io Date: Thursday, 25 August 2022 at 13:10 To: vpp-dev@lists.fd.io Subject: [vpp-dev] Query regarding neos mpls fib entry for tunnel interface Hi All, I have a query regarding neos mpls fib entry for tunnel interface. I have

Re: [vpp-dev] Bridge-domain function and usage.

2022-08-01 Thread Neale Ranns
Hi Pargya, That’s a multicast destination address. /neale From: vpp-dev@lists.fd.io on behalf of Pragya Nand Bhagat via lists.fd.io Date: Tuesday, 2 August 2022 at 12:25 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Bridge-domain function and usage. Hi Steven, I'm sending unknown unicast

Re: [vpp-dev] Crash in vlib_buffer_enqueue_next

2022-07-26 Thread Neale Ranns
From: vpp-dev@lists.fd.io on behalf of Vijay Kumar via lists.fd.io Date: Wednesday, 27 July 2022 at 11:27 To: vpp-dev Subject: [vpp-dev] Crash in vlib_buffer_enqueue_next Hi experts, I am seeing this callstack where the enque next crashes due to sig abort. Pls let me know possible reasons

Re: [vpp-dev] questions about fib

2022-07-25 Thread Neale Ranns
00163e002e8f0800 From: Neale Ranns<mailto:ne...@graphiant.com> Date: 2022-07-26 06:02 To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io> Subject: Re: [vpp-dev] questions about fib Hi, Before I answer can you please elaborate on what you mean by ‘stacked on’. Can you please give t

Re: [vpp-dev] questions about fib

2022-07-25 Thread Neale Ranns
Hi, Before I answer can you please elaborate on what you mean by ‘stacked on’. Can you please give the config example. /neale From: vpp-dev@lists.fd.io on behalf of haiyan...@ilinkall.cn via lists.fd.io Date: Monday, 25 July 2022 at 11:12 To: vpp-dev Subject: [vpp-dev] questions about fib

Re: [vpp-dev] #mpls enabling mpls at interface

2022-06-21 Thread Neale Ranns
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via lists.fd.io Date: Wednesday, 22 June 2022 at 05:06 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] #mpls enabling mpls at interface Hi, My question is more on clarity. It was enabled and working fine. But, some times I see

Re: [vpp-dev] Support of "qos egress map" with GTP tunnels

2022-06-08 Thread Neale Ranns
Hi Martin, QoS marking takes the buffer’s pre-classified QoS source:value and translate it through the egress map into the value at the layer the marking is specified. If we take your map id=0 as an example you are mapping a classification of IP:0 to a value 30 and since the marking is an IP

Re: [vpp-dev] Query regarding MPLS Tunnel

2022-05-26 Thread Neale Ranns
Hi Sreejith, No good reason. Please provide a patch to add that capability. /neale From: vpp-dev@lists.fd.io on behalf of sreejith n via lists.fd.io Date: Friday, 27 May 2022 at 00:34 To: vpp-dev@lists.fd.io Subject: [vpp-dev] Query regarding MPLS Tunnel Hi All, I have a query regarding

Re: [vpp-dev] Regarding DES support in VPP

2022-05-26 Thread Neale Ranns
Hi Vijay, It sounds like the SA you programme did not install. As you say, DES is insecure, so we don’t even test it anymore. I would suggest you start with a UT in VPP and go from there. Maybe extend the algos in MyParameters in test/test_ipsec_esp.py /neale From: vpp-dev@lists.fd.io on

Re: Private: Re: [vpp-dev] Queries regarding mfib and multicast support in VPP

2022-04-20 Thread Neale Ranns
p4-chain [@0]: dpo-drop ip4 DBGvpp# /neale From: arunmitta...@gmail.com Date: Wednesday, 20 April 2022 at 05:47 To: Neale Ranns Subject: Private: Re: [vpp-dev] Queries regarding mfib and multicast support in VPP Thanks Neale, I think this information will help me a lot to understand multi

Re: [vpp-dev] User traffic is going down the wrong tunnel when multiple IKEv2/IPsec tunnels are added, removed then added.

2022-04-13 Thread Neale Ranns
Hi Sonia, How are you routing into the tunnels, and what changes to that routing do you make when removing and adding tunnels. /neale From: vpp-dev@lists.fd.io on behalf of Sonia Rovner via lists.fd.io Date: Tuesday, 12 April 2022 at 22:57 To: vpp-dev@lists.fd.io Subject: [vpp-dev] User

Re: [vpp-dev] Queries regarding mfib and multicast support in VPP

2022-04-13 Thread Neale Ranns
Hi Arun, From: vpp-dev@lists.fd.io on behalf of arunmittal88 via lists.fd.io Date: Tuesday, 12 April 2022 at 15:24 To: vpp-dev@lists.fd.io Subject: [vpp-dev] Queries regarding mfib and multicast support in VPP Hi, Just want to know if the mfib-lookup node is attached to the default packet

Re: [vpp-dev] Prevent blackhole routes being leaked into VPP

2022-04-06 Thread Neale Ranns
Hi, You need to choose an appropriate priority for: lcp_rt_fib_src = fib_source_allocate ("lcp-rt", FIB_SOURCE_PRIORITY_HI, FIB_SOURCE_BH_API); in plugins/linux-cp/lcp_router.c from vnet/fb/fib_source.h /** * The fixed source to priority mappings. * Declared here so those adding new

Re: [vpp-dev] Prevent blackhole routes being leaked into VPP

2022-04-04 Thread Neale Ranns
From: vpp-dev@lists.fd.io on behalf of Chinmaya Aggarwal via lists.fd.io Date: Monday, 4 April 2022 at 09:08 To: vpp-dev@lists.fd.io Subject: [vpp-dev] Prevent blackhole routes being leaked into VPP Hi, We have integrated linux-cp and linux-nl plugin in VPP. We create table 1203 on VPP and

Re: [vpp-dev] Crash in BVI and Loopback interaction

2022-03-28 Thread Neale Ranns
From: vpp-dev@lists.fd.io on behalf of Pim van Pelt via lists.fd.io Date: Sunday, 27 March 2022 at 14:01 To: Stanislav Zaikin Cc: vpp-dev Subject: Re: [vpp-dev] Crash in BVI and Loopback interaction Hoi Stanislav, Thanks for the response. As I noted in my original email, I am aware that

Re: [vpp-dev] vpp hangs with bfd configuration along with mpls (inner and outer ctxt)

2022-03-21 Thread Neale Ranns
Hi Sastry, There are lots of examples of MPLS routes and VRF creation in test/test_mpls.py and BFD session creation in test/test_bfd.py. Or if you’d prefer there’s src/plugins/unittest/fib_test.c with fib_test_bfd. /neale From: vpp-dev@lists.fd.io on behalf of Sastry Sista via lists.fd.io

Re: [vpp-dev] vpp hangs with bfd configuration along with mpls (inner and outer ctxt)

2022-03-21 Thread Neale Ranns
Hi Sastry, If you can reproduce it with a unit test, I’ll look into it. /neale From: vpp-dev@lists.fd.io on behalf of Sastry Sista via lists.fd.io Date: Thursday, 17 March 2022 at 10:07 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] vpp hangs with bfd configuration along with mpls (inner

Re: [vpp-dev] Coredump occur when duplicate a packet at "interface-output" arc. #vpp

2022-03-07 Thread Neale Ranns
Hi, You decrement/increment n_left_to_next/to_next twice in one iteration of the loop, so you are writing out of bounds. Have a look at other nodes that do packet copying like l2_flood. /neale From: vpp-dev@lists.fd.io on behalf of Smith Beirvin via lists.fd.io Date: Monday, 7 March 2022

Re: [vpp-dev] Ping to loopback behind Vxlan tunnel is failing #vpp-dev

2022-03-07 Thread Neale Ranns
From: vpp-dev@lists.fd.io on behalf of suresh vuppala via lists.fd.io Date: Friday, 4 March 2022 at 22:40 To: vpp-dev@lists.fd.io Subject: [vpp-dev] Ping to loopback behind Vxlan tunnel is failing #vpp-dev HI VPP-DEV team, ubuntu 20.04 vpp v22.06-rc0~79-g48bdf24ad I have my ubuntu 20.04

Re: [vpp-dev] MPLS Tunnel Interface on Provider Router

2022-02-11 Thread Neale Ranns
Hi Sreejith, There is no CLI for that. Contributions welcome. /neale From: vpp-dev@lists.fd.io on behalf of sreejithsurendrannair2 via lists.fd.io Date: Friday, 11 February 2022 at 14:37 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] MPLS Tunnel Interface on Provider Router Hi All, I have

Re: [vpp-dev] multipoint ipsec!!

2022-02-11 Thread Neale Ranns
Hi Sagar, You protection needs to be for the peer on the tunnel (44.44.44.44) not the peer on the Ethernet. /neale From: vpp-dev@lists.fd.io on behalf of sagar g via lists.fd.io Date: Friday, 11 February 2022 at 12:44 To: vpp-dev@lists.fd.io Subject: [vpp-dev] multipoint ipsec!! Hi All,

Re: [vpp-dev] VXLAN overlay routing

2022-02-08 Thread Neale Ranns
L3 mode means there is no L2 header. Both ends need to agree to that. /neale From: vpp-dev@lists.fd.io on behalf of David Gohberg via lists.fd.io Date: Sunday, 6 February 2022 at 15:57 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] VXLAN overlay routing Hi, I'm not interested in bridging so

Re: [vpp-dev] VXLAN overlay routing

2022-02-05 Thread Neale Ranns
Hi David, If you want to combine L2 and L3 forwarding on a VXLAN interface, use a BVI as Petr suggests. If you want the VXLAN tunnels to only act like an L3 interface, then you can use create the tunnels in L3 mode. /neale From: vpp-dev@lists.fd.io on behalf of Petr Boltík via lists.fd.io

Re: [vpp-dev] MPLS Tunnel Interface on Provider Router

2022-01-18 Thread Neale Ranns
From: vpp-dev@lists.fd.io on behalf of Amit Mehra via lists.fd.io Date: Monday, 17 January 2022 at 09:30 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] MPLS Tunnel Interface on Provider Router Thanks Neale for the response. We are trying to simulate L3VPN usecase and want to maintain

Re: [vpp-dev] MPLS Tunnel Interface on Provider Router

2022-01-15 Thread Neale Ranns
Hi Amit, From: vpp-dev@lists.fd.io on behalf of Amit Mehra via lists.fd.io Date: Friday, 14 January 2022 at 12:50 To: vpp-dev@lists.fd.io Subject: [vpp-dev] MPLS Tunnel Interface on Provider Router Hi, I was doing a PoC to simulate label swap operation on Service Provider Router(non PE

Re: [vpp-dev] VXLAN and RSS

2022-01-14 Thread Neale Ranns
at 11:28 To: Neale Ranns Cc: vpp-dev Subject: Re: [vpp-dev] VXLAN and RSS Hoi, Neale, thank you for pointing that out! I verified the intent, and I can confirm that VXLAN uses random source ports [1], and so does GENEVE [2], so this is WAI. I mirrored traffic between the two VPP hosts, while

Re: [vpp-dev] VXLAN and RSS

2022-01-14 Thread Neale Ranns
Hi Pim, For VXLAN the intention is to use random source ports. The code you sight builds the ‘static’ portion of the imposed header. The source ports are overwritten with the hash of the encapped packet in encap.c:246 /neale From: vpp-dev@lists.fd.io on behalf of Pim van Pelt via

Re: [vpp-dev] MPLS: fib table 1 display issue #mpls

2021-12-31 Thread Neale Ranns
You are configuring it incorrectly. Please re-read the emails I have already sent you. /neale From: vpp-dev@lists.fd.io on behalf of Sastry Sista via lists.fd.io Date: Thursday, 30 December 2021 at 04:49 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] MPLS: fib table 1 display issue #mpls

Re: [vpp-dev] searching for all routes that point to an attached next-hop neighbor #routing

2021-12-29 Thread Neale Ranns
Hi David, Here’s some back ground on FIB graph walks: https://s3-docs.fd.io/vpp/21.10/gettingstarted/developers/fib20/graphwalks.html I can’t think of any examples similar to what you are attempting, but you could conceivably achieve it with: 1 – a pub/sub API. Similar to

Re: [vpp-dev] searching for all routes that point to an attached next-hop neighbor #routing

2021-12-29 Thread Neale Ranns
Hi David, Are you hoping to get these routes from queries via the CLI/API or are you prepared to write a plugin in VPP to extract and publish this information to your control plane via new events? For the former, Stanislav’s advice is your best option. So I would suggest you consider the

Re: [vpp-dev] MPLS: fib table 1 display issue #mpls

2021-12-12 Thread Neale Ranns
Hi Sastry, For the last time… you bind a label to a prefix first by defining the forwarding for the prefix: Ip route table X 1.2.3.4/32 via 10.10.10.10 eth0 And then you bind a label to it: Mpls local-label 44 1.2.3.4/32 table X That’s all. If you’re building a product, then you are

Re: [vpp-dev] MPLS: fib table 1 display issue #mpls

2021-12-09 Thread Neale Ranns
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via lists.fd.io Date: Thursday, 9 December 2021 at 02:17 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] MPLS: fib table 1 display issue #mpls Hi Neale, Thank you for detailed explanation. Its working fine by providing

Re: [vpp-dev] MPLS: fib table 1 display issue #mpls

2021-12-08 Thread Neale Ranns
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via lists.fd.io Date: Wednesday, 8 December 2021 at 03:35 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] MPLS: fib table 1 display issue #mpls Hi Neale, Thank you for the help. We are trying to exercise vpp mpls vpn and

Re: [vpp-dev] MPLS: fib table 1 display issue #mpls

2021-12-07 Thread Neale Ranns
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via lists.fd.io Date: Thursday, 2 December 2021 at 13:25 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] MPLS: fib table 1 display issue #mpls Thank you Neale. We may need to develop something like show mpls bind for our purpose. My test

Re: [vpp-dev] Use ABF to route UDP traffic to different paths

2021-12-07 Thread Neale Ranns
Cc: Neale Ranns Subject: Use ABF to route UDP traffic to different paths On my VPP setup, I have two IPSec tunnels can reach 192.168.200.0/24, the interfaces for those two IPSec tunnels are ipip0 and ipip1. I try to set up abf to direct UDP packets to 192.168.200.20 based on destination port

Re: [vpp-dev] MPLS: fib table 1 display issue #mpls

2021-11-30 Thread Neale Ranns
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via lists.fd.io Date: Tuesday, 30 November 2021 at 02:35 To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] MPLS: fib table 1 display issue #mpls Hi Neale, Then, mpls table ID we give for mpls commands always represents ip

Re: [vpp-dev] MPLS: fib table 1 display issue #mpls

2021-11-29 Thread Neale Ranns
Hi Sastry, For IP unicast MPLS VPNs there is only mpls table 0. Label to vrf mapping is done based on the label allocation scheme (see the doc). /neale From: vpp-dev@lists.fd.io on behalf of Sastry Sista via lists.fd.io Date: Monday, 29 November 2021 at 13:00 To: vpp-dev@lists.fd.io

Re: [vpp-dev] MPLS: fib table 1 display issue #mpls

2021-11-29 Thread Neale Ranns
Hi Sastry, I’d suggest you start with the docs here: https://wiki.fd.io/view/VPP/MPLS_FIB /neale From: vpp-dev@lists.fd.io on behalf of Sastry Sista via lists.fd.io Date: Monday, 29 November 2021 at 08:17 To: vpp-dev@lists.fd.io Subject: [vpp-dev] MPLS: fib table 1 display issue #mpls

Re: [vpp-dev] VPP Linux-cp plugin with multicast packets

2021-11-17 Thread Neale Ranns
[Adding the public mailer so we all benefit] Hi Wei, You need to add the multicast routes to VPP too. /neale From: Wei Huang Date: Wednesday, 17 November 2021 at 03:57 To: nra...@cisco.com , Neale Ranns Subject: VPP Linux-cp plugin with multicast packets Hi Neale I am using the linux-cp

Re: [vpp-dev] a free_bitmap may expand while pool_put

2021-11-05 Thread Neale Ranns
Hi Stanislav, IMHO the ASSERT is a false negative, even though the load-balance has been put in the pool, its memory is still valid and can still be safely retrieved from a worker. If the load-balance was re-used before all workers were done with it, then we’d have problems, but that doesn’t

Re: [vpp-dev] assert in pool_elt_at_index

2021-10-22 Thread Neale Ranns
have a reliable reproduction environment, could you cook your own pool_put_would_expand macro to test this theory? /neale From: Stanislav Zaikin Date: Friday, 22 October 2021 at 15:06 To: Neale Ranns Cc: vpp-dev Subject: Re: [vpp-dev] assert in pool_elt_at_index Hi Neale, Sure, here

Re: [vpp-dev] assert in pool_elt_at_index

2021-10-22 Thread Neale Ranns
Hi Stanislav, Can you do: thread apply all bt I’d like to see what the other threads are doing. /neale From: vpp-dev@lists.fd.io on behalf of Stanislav Zaikin via lists.fd.io Date: Wednesday, 13 October 2021 at 20:30 To: vpp-dev Subject: [vpp-dev] assert in pool_elt_at_index Hello folks,

Re: [vpp-dev]: SIGSEV in mpls_tunnel_collect_forwarding

2021-10-21 Thread Neale Ranns
Hi Rajith, Can you try this: https://gerrit.fd.io/r/c/vpp/+/34200 I think Stanislav’s solution would also work, but it would mean a no-op restack for the tunnel. Not walking the new child is more efficient. /neale From: vpp-dev@lists.fd.io on behalf of Stanislav Zaikin via lists.fd.io

Re: [vpp-dev] VPP - GRE tunnel

2021-10-01 Thread Neale Ranns
15:29 To: Neale Ranns , kusumanjal...@gmail.com Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] VPP - GRE tunnel Hi Neale , If that is the case , Server1 (TenGigabitEthernet1/0/1 ) and server2(TenGigabitEthernet1/0/2) are connected back to back . If I assign the same ip to GRE , will packet go v

Re: [vpp-dev] VPP - GRE tunnel

2021-09-30 Thread Neale Ranns
Also the tunnel src,dst addresses should be 43.0.0.x /neale From: vpp-dev@lists.fd.io on behalf of Kusuma DS via lists.fd.io Date: Thursday, 30 September 2021 at 14:25 To: Archana Sampath Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] VPP - GRE tunnel Hi Archana, Instead of creating

Re: [vpp-dev] getting ip6-glean:address overflow drops

2021-09-23 Thread Neale Ranns
on that link is unreachable. /neale From: mark antony Date: Thursday, 23 September 2021 at 12:12 To: Neale Ranns Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] getting ip6-glean:address overflow drops Hi neale, Thanks for the info, is enabling ipv6 on interface with "enable ip6 interface"

Re: [vpp-dev] getting ip6-glean:address overflow drops

2021-09-23 Thread Neale Ranns
Hi Mark, If traffic matches a ipv6-glean then it is destined to a host on an attached subnet that does not yet have an ND entry. Matching the glean will generate an ND solicitation to that host, but these are rate limited. An address overflow can happen when: 1. when the rate limiting

Re: [vpp-dev] VPP vnet event for route/FIB table update?

2021-09-22 Thread Neale Ranns
Hi, No. the expectation is that the entity that added the route would inform other entities in the system. VPP is not the system message bus. /neale From: vpp-dev@lists.fd.io on behalf of PRANAB DAS via lists.fd.io Date: Tuesday, 21 September 2021 at 13:29 To: vpp-dev@lists.fd.io

Re: [vpp-dev] IPv6 unnumbered interface

2021-09-16 Thread Neale Ranns
Hi Artme, I’d suggest you replace: set int unnumbered memif0/0 use loop0 with enable ip6 interface memif0/0 or add something like this: https://gerrit.fd.io/r/c/vpp/+/32770/4/src/vnet/interface.c#1701 /neale From: vpp-dev@lists.fd.io on behalf of Artem Glazychev via lists.fd.io Date:

Re: [vpp-dev]: Assert in vnet_mpls_tunnel_del()

2021-09-14 Thread Neale Ranns
Hi Rajiyh, Maybe there’s something that still resolves through the tunnel when it’s deleted? /neale From: vpp-dev@lists.fd.io on behalf of Rajith PR via lists.fd.io Date: Tuesday, 14 September 2021 at 13:17 To: vpp-dev Subject: [vpp-dev]: Assert in vnet_mpls_tunnel_del() Hi All, We

Re: [vpp-dev] IPSec input/output: default action for non-matching traffic

2021-09-12 Thread Neale Ranns
Hi Zach, Apologies for the late reply and thank you for the considered analysis. ..snip.. Is there a reason that the input side is setup like this? Unless there is a good reason for allowing inbound traffic by default, I would propose to patch the ipsec-input node to align with ipsec-output

Re: [vpp-dev] Question regarding ip4/ip6 nexthop load balance flexibility #vnet

2021-09-08 Thread Neale Ranns
Date: Tuesday, 7 September 2021 at 20:11 To: Neale Ranns Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Question regarding ip4/ip6 nexthop load balance flexibility #vnet Hi Neale, Thanks for getting back. I thought as much that cloning code (even though I do a graph node replacement) wouldn't h

Re: [vpp-dev] Regarding VPP IPSec pipeline

2021-09-06 Thread Neale Ranns
Hi Prashant, From: vpp-dev@lists.fd.io on behalf of Prashant Upadhyaya via lists.fd.io Date: Monday, 6 September 2021 at 11:05 To: vpp-dev@lists.fd.io Subject: [vpp-dev] Regarding VPP IPSec pipeline Hi, I am using VPP21.06. I have successfully created an IPSec tunnel between VPP and a Strong

Re: [vpp-dev] Question regarding ip4/ip6 nexthop load balance flexibility #vnet

2021-09-05 Thread Neale Ranns
Hi Venky, There are several ways you might go about this but I would council that cloning code is a last resort – it would be a mainanence headache if you replace the current one or have i’s own set of challenges to use your replace node. if you could give me some more detail on how you want

Re: [vpp-dev] Adding new route via ipv6 link-local

2021-08-20 Thread Neale Ranns
Hi Ed, When creating an adjacency for the first time we send out a probe packet (ARP/ND) to see if the peer will resolve it. /neale From: Ed Warnicke Date: Friday, 20 August 2021 at 16:54 To: Neale Ranns Cc: zsta...@gmail.com , Artem Glazychev , vpp-dev Subject: Re: [vpp-dev] Adding new

Re: [vpp-dev] Adding new route via ipv6 link-local

2021-08-20 Thread Neale Ranns
Hi Ed, It does. But in this case the command is adding a route through an interface, which is not the same as configuring a prefix on an interface (nor ip6 enabling it). /neale From: Ed Warnicke Date: Friday, 20 August 2021 at 16:40 To: Neale Ranns Cc: zsta...@gmail.com , Artem Glazychev

Re: [vpp-dev] Adding new route via ipv6 link-local

2021-08-20 Thread Neale Ranns
Hi Stanislav, Excellent, thank you! /neale From: Stanislav Zaikin Date: Friday, 20 August 2021 at 16:38 To: Neale Ranns Cc: Artem Glazychev , vpp-dev Subject: Re: [vpp-dev] Adding new route via ipv6 link-local Hi Neale, If there are no volunteers, there's the patch: https://gerrit.fd.io/r

Re: [vpp-dev] Adding new route via ipv6 link-local

2021-08-20 Thread Neale Ranns
Hi Artem, Stanislav, I agree graceful handling is needed, return false if there is no link local. If you enabled ip6 on the link first, this wouldn’t be a problem. The link will need to be ip6 enabled if you want something to reply. /neale From: vpp-dev@lists.fd.io on behalf of Stanislav

Re: [vpp-dev] using dpdk backend with vpp 20.09 using stable/2009

2021-08-17 Thread Neale Ranns
Hi Venu, Before adding any IPSec state: DBGvpp# ipsec select ? ipsec select backend ipsec select backend /neale From: vpp-dev@lists.fd.io on behalf of Venumadhav Josyula via lists.fd.io Date: Tuesday, 17 August 2021 at 08:30 To: Sweetu Hubby Cc: vpp-dev Subject:

Re: [vpp-dev] some confusions about l2 forward and flood

2021-08-12 Thread Neale Ranns
Hi Xiaopeng, If you disable flooding in a BD then it will not forward broadcast nor multicast (BM) packets, because there is nothing else to do with such packets other than flood. The l2fib is not consulted for BM packets, so if you added a static entry for a BM address it won’t be used. The

Re: [vpp-dev] BVI interface on a Bridge domain

2021-08-12 Thread Neale Ranns
Hi, The packet has a multicast destination MAC so it was flooded, including to the BVI. The BVI dropped it because it does not have a valid ether type. The trace says the ethertype value was 0x162. I don’t know what a gns3 simulation is, nor do I want to  /neale From: vpp-dev@lists.fd.io

Re: [vpp-dev] problem with updating incomplete adj nbr entries upon MAC address change

2021-08-11 Thread Neale Ranns
Dear Ivan, That’s the best bug report I’ve seen in ages, so thank you! I’ll take your patch as a starting point, but I’ll think I move the responsibility for walking the incomplete adjacencies into the adj code; it seems a little unfair for the ip-neighbour module to be responsible for

Re: [vpp-dev] Regarding Traffic selectors (IP and port range) usage in vnet/ipsec encrypt

2021-08-11 Thread Neale Ranns
Hi Vijay, Use the APIs in ipsec_spd.h /neale From: Vijay Kumar Date: Wednesday, 11 August 2021 at 14:05 To: Neale Ranns Cc: vpp-dev Subject: Re: [vpp-dev] Regarding Traffic selectors (IP and port range) usage in vnet/ipsec encrypt Hi Neale, Thanks for the clarification. We are not using

Re: [vpp-dev] Regarding Traffic selectors (IP and port range) usage in vnet/ipsec encrypt

2021-08-11 Thread Neale Ranns
Hi Vijay, VPP’s IKE implementation only supports route-based VPNs (where a tunnel interface is created) and not policy based (where the SPD is used). /neale From: vpp-dev@lists.fd.io on behalf of Vijay Kumar via lists.fd.io Date: Wednesday, 11 August 2021 at 13:00 To: vpp-dev Subject:

Re: [vpp-dev] Delete ACL rules #acl_plugin #acl #abf

2021-08-10 Thread Neale Ranns
Hi Ravi, There’s no CLI to remove them. the CLI is for debug use only. Feel free to contribute a patch to add a CLI if you need one. /neale From: vpp-dev@lists.fd.io on behalf of RaviKiran Veldanda via lists.fd.io Date: Monday, 9 August 2021 at 22:42 To: vpp-dev@lists.fd.io Subject:

Re: [vpp-dev] ping to loopback

2021-08-10 Thread Neale Ranns
The same way you ping the normal interface. Just make sure the forward and reverse routes are present. Send a packet trace if it doesn’t work. /neale From: vpp-dev@lists.fd.io on behalf of mark antony via lists.fd.io Date: Monday, 9 August 2021 at 22:24 To: vpp-dev@lists.fd.io Subject:

Re: [vpp-dev] memif: failed: no source address for egress interface

2021-08-10 Thread Neale Ranns
From: Ed Warnicke Date: Monday, 9 August 2021 at 16:16 To: Neale Ranns Cc: otr...@employees.org , artem.glazyc...@xored.com , vpp-dev@lists.fd.io Subject: Re: [vpp-dev] memif: failed: no source address for egress interface On Mon, Aug 9, 2021 at 7:40 AM Neale Ranns mailto:ne

Re: [vpp-dev] memif: failed: no source address for egress interface

2021-08-09 Thread Neale Ranns
On 09/08/2021 10:15, "otr...@employees.org" wrote: > I think that is telling you not to use /32 address on interface for which you > expect there to be connected peers. > From an IP networking perspective, if you want two peers to be connected on > an interface, they need to be within the

Re: [vpp-dev] memif: failed: no source address for egress interface

2021-08-09 Thread Neale Ranns
Hi Artem, I think that is telling you not to use /32 address on interface for which you expect there to be connected peers. >From an IP networking perspective, if you want two peers to be connected on an >interface, they need to be within the same subnet, so use a /31. /neale From:

Re: [vpp-dev] MAC Learning in vpp

2021-08-05 Thread Neale Ranns
August 2021 at 11:13 To: Neale Ranns Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] MAC Learning in vpp Hi , we want to write a port security script. In the first router work normally , all interfaces have ip addresses . then the user wants to set port security on an interface. and here we must

Re: [vpp-dev] MAC Learning in vpp

2021-08-05 Thread Neale Ranns
HI Mohsen, From: Mohsen Meamarian Date: Thursday, 5 August 2021 at 08:24 To: Neale Ranns Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] MAC Learning in vpp Hi Neale, Thanks , I’m looking for another way because I have a problem with the bridge. Another way to do what? Do you want to do l2

Re: [vpp-dev] MAC Learning in vpp

2021-08-04 Thread Neale Ranns
[limit ] [age ] [recycle|norecycle] there are no other means to control what IP neighbours are or aren’t learned. /neale From: Mohsen Meamarian Date: Wednesday, 4 August 2021 at 07:26 To: Neale Ranns Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] MAC Learning in vpp Hi Neal, Thanks, Is there a way

Re: [vpp-dev] FIB entry being created on peer VPP node for the localsid

2021-08-03 Thread Neale Ranns
Hi, I don’t know how SRv6 works on either platform. My point is that VPP added the route because there is a neighbour for that address, VPP does this always for all neighbours, this happens irrespective of SRv6. Is the presence of the route causing you problems? /neale From:

Re: [vpp-dev] FIB entry being created on peer VPP node for the localsid

2021-08-03 Thread Neale Ranns
Hi, VPP adds FIB entries for all IP neighbours. These are used to forward traffic to those neighbours. if you do: show ip6 fib 2001:7a0:10::111/128 you’ll see more detailed output that describes the sources’of the FIB entry, A source is the entity that added the route. The adjacency source is

Re: [vpp-dev] VLAN+IP based forwarding #acl, #abf #vlan #memif #forwarding #vpp

2021-08-03 Thread Neale Ranns
Hi Ravi. as I said in another thread, VLANs are represented by interfaces in VPP, so to achieve VALN differentiated forwarding you need to bind different tables/polices/etc with the different routes/rules/etc to the different VLAN interfaces. For example, create different ip tables: Ip

Re: [vpp-dev] MAC Learning in vpp

2021-08-03 Thread Neale Ranns
be learnt in each BD. /neale From: Mohsen Meamarian Date: Tuesday, 3 August 2021 at 06:37 To: Neale Ranns Cc: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] MAC Learning in vpp Thanks neale, What is the easiest way to enable learning on an interface while other functionality , including passing

Re: [vpp-dev] MAC Learning in vpp

2021-08-02 Thread Neale Ranns
HI Moshen, From: vpp-dev@lists.fd.io on behalf of Mohsen Meamarian via lists.fd.io Date: Monday, 2 August 2021 at 18:45 To: vpp-dev@lists.fd.io Subject: [vpp-dev] MAC Learning in vpp Hi friends, I want to implement port security in vpp. I assume that the l2learn_process function in

Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported payload"

2021-08-02 Thread Neale Ranns
From: Vijay Kumar Date: Monday, 2 August 2021 at 11:33 To: Neale Ranns Cc: vpp-dev Subject: Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported payload" Hi Neale, My IPSEC rekey is set to high (2 hr). So the issue is not during rekey. I don’t under

Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported payload"

2021-08-02 Thread Neale Ranns
Hi Vijay, No I don’t see random failures. Do they occur during a rekeying event? /neale From: vpp-dev@lists.fd.io on behalf of Vijay Kumar via lists.fd.io Date: Monday, 2 August 2021 at 08:43 To: vpp-dev Subject: Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and "Unsupported

Re: [vpp-dev] #ipsec #vnet #vpp #vpp-dev

2021-07-31 Thread Neale Ranns
There’s not enough information here to diagnose what the problem is. Let’s start with a packet trace. #regards /neale From: vpp-dev@lists.fd.io on behalf of nikhil subhedar via lists.fd.io Date: Saturday, 31 July 2021 at 19:49 To: vpp-dev@lists.fd.io Subject: [vpp-dev] #ipsec #vnet #vpp

Re: [vpp-dev] VLAN based Forwarding to My application #vlan #memif #forwarding #acl

2021-07-30 Thread Neale Ranns
Hi Ravi, So many options  let’s start with the easiest. VLANs in VPP are a sub-interface. So if you want ALL traffic from Eth0.100 to go to memif0.100, and vice-versa, without a MAC rewrite, use an l2-xconnect. /neale From: vpp-dev@lists.fd.io on behalf of RaviKiran Veldanda via

Re: [vpp-dev] MPLS protection

2021-07-26 Thread Neale Ranns
/missing.rst /neale From: Gudimetla, Leela Sankar Date: Monday, 26 July 2021 at 19:42 To: Neale Ranns , vpp-dev@lists.fd.io Subject: Re: MPLS protection Could someone please respond to the specific question that I have described below? Thanks, Leela sankar From: vpp-dev@lists.fd.io on behalf

Re: [vpp-dev] ACL-->ABF--> Memif, Seeing arp request for the packets #acl #abf #policy #routing

2021-07-17 Thread Neale Ranns
Hi Ravi, If you want the packet to egress with a VLAN, then you can create a VLAN sub-interface on the memif and point the policy via that. /neale From: vpp-dev@lists.fd.io on behalf of RaviKiran Veldanda via lists.fd.io Date: Friday, 16 July 2021 at 19:06 To: vpp-dev@lists.fd.io Subject:

Re: [vpp-dev] ACL-->ABF--> Memif, Seeing arp request for the packets #acl #abf #policy #routing

2021-07-16 Thread Neale Ranns
Hi Ravi, A memif interface is not p2p, so your ABF policy path needs a next-hop: abf policy add id 0 acl 0 via 192.168.1.X memif1/0 where .X is the host on the other end. /neale From: vpp-dev@lists.fd.io on behalf of RaviKiran Veldanda via lists.fd.io Date: Friday, 16 July 2021 at 17:15

  1   2   3   4   5   6   7   >