Hi Laszlo,
As Stanislav said, probably not enough RAM on your box to handle the build
parallelism. On subsequent runs, once some files are compiled, the parallelism
drops and the build will pass.
/neale
From: vpp-dev@lists.fd.io on behalf of Stanislav Zaikin
via lists.fd.io
Date: Monday,
I’d suggest a pipe, each end can be in a different VRF. See
src/scripts/vnet/ipsec for a config example.
/neale
From: vpp-dev@lists.fd.io on behalf of Benoit Ganne
(bganne) via lists.fd.io
Date: Thursday, 5 January 2023 at 00:18
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] veth
Hi Alok,
There are a few examples of these sort of “want” APIs. For example, from
src/vnet/interface.api:
service {
rpc want_interface_events returns want_interface_events_reply
events sw_interface_event;
};
/neale
From: vpp-dev@lists.fd.io on behalf of Alok Tiwari via
lists.fd.io
A SA is in-use if it is referred to by a policy. Remove it from the policy and
no more traffic will use it. If you’re doing that with the workers running,
then wait one worker loop before deleting the SA.
/neale
From: vpp-dev@lists.fd.io on behalf of jiangxiaoming via
lists.fd.io
Date:
Deleting an SA that is in-use, should return an error and be prevented.
/neale
From: vpp-dev@lists.fd.io on behalf of Guangming via
lists.fd.io
Date: Saturday, 19 November 2022 at 00:27
To: vpp-dev
Subject: Re: [vpp-dev] There is bug in esp decrypt
I got the same issue when use cli
...@baicells.com
From: Neale Ranns<mailto:ne...@graphiant.com>
Date: 2022-11-18 09:32
To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>
Subject: Re: [vpp-dev] There is bug in esp decrypt
Hi,
I’ll push a patch with UT shortly.
Many thanks,
neale
From: vpp-dev@lists.fd.io on behalf of jiang
Hi,
I’ll push a patch with UT shortly.
Many thanks,
neale
From: vpp-dev@lists.fd.io on behalf of jiangxiaoming via
lists.fd.io
Date: Friday, 18 November 2022 at 11:58
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] There is bug in esp decrypt
Hi Guangming,
You are right, you can push a
Hi Dave,
I fully support pluginification
Is it fair though to say that if the remaining functions of vnet have a
dependency on one of the modules below then that module is not a good candidate
to move to a plugin?
I thinking about the dependency between IPIP and TEIB. Some of the IPIP
Hi Huawei,
The fib-ID should be removed from the cmd’s help.
/neale
From: lihuawei
Date: Friday, 14 October 2022 at 16:01
To: Neale Ranns , vpp-dev@lists.fd.io
Subject: A question about fib-id with ip neighbor
Hi Neale,
As the following picture shows:
I have not see any support for the fib
Hi Huawei,
Patch merged. Thank you.
/neale
From: vpp-dev@lists.fd.io on behalf of lihuawei via
lists.fd.io
Date: Tuesday, 11 October 2022 at 13:17
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] Gerrit Review Id 37303
Hi community,
I have added a fix as gerrit review id 37303.
gerrit link:
From: vpp-dev@lists.fd.io On Behalf Of Neale Ranns
Sent: Friday, October 7, 2022 2:43 AM
To: vpp-dev@lists.fd.io
Subject: [**EXTERNAL**] Re: [vpp-dev] Combined statistics for all traffic
mapped to a MPLS LSP path
Hi Mohit,
VPP doesn’t have a single object with stats that represents an LSP in its
Hi Mohit,
VPP doesn’t have a single object with stats that represents an LSP in its broad
sense. You’ll have to combine the states from the objects that use/point-to the
LSP (or rather use the out-going label value of the LSP) – for example IP or
MPLS FIB entries, or MPLS tunnel interfaces,
Hi Padraig,
From: vpp-dev@lists.fd.io on behalf of Pádraig Connolly
via lists.fd.io
Date: Saturday, 1 October 2022 at 09:52
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] Insert Custom Node Into ip4-unicast Feature Arc
Hi,
For purely my own learning, I am trying to insert my custom node into
e Andre Courchesne.
The information contained in this document is confidential and property of
Andre Courchesne. It shall not be used, disclosed to others or reproduced
without the express written consent of Andre Courchesne.
On Tue, Sep 27, 2022 at 8:43 PM Neale Ranns
mailto:ne...@graphian
Hi Andre,
For L3 forwarding you can use the per-adjacency counters. This are not enabled
by default, because, like all stats, they come with a performance cost.
DBGvpp# adjacency counters ?
adjacency counters adjacency counters [enable|disable]
you’ll then find then
VPP accepts the frame based on the MAC, but there is no handler for the ISIS
MAC type, so it is dropped. You’ll need to add support for this.
/neale
From: vpp-dev@lists.fd.io on behalf of Mohamed Naiem via
lists.fd.io
Date: Thursday, 15 September 2022 at 21:08
To: vpp-dev@lists.fd.io
From: vpp-dev@lists.fd.io on behalf of sreejith n via
lists.fd.io
Date: Thursday, 25 August 2022 at 13:10
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] Query regarding neos mpls fib entry for tunnel interface
Hi All,
I have a query regarding neos mpls fib entry for tunnel interface. I have
Hi Pargya,
That’s a multicast destination address.
/neale
From: vpp-dev@lists.fd.io on behalf of Pragya Nand Bhagat
via lists.fd.io
Date: Tuesday, 2 August 2022 at 12:25
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] Bridge-domain function and usage.
Hi Steven,
I'm sending unknown unicast
From: vpp-dev@lists.fd.io on behalf of Vijay Kumar via
lists.fd.io
Date: Wednesday, 27 July 2022 at 11:27
To: vpp-dev
Subject: [vpp-dev] Crash in vlib_buffer_enqueue_next
Hi experts,
I am seeing this callstack where the enque next crashes due to sig abort. Pls
let me know possible reasons
00163e002e8f0800
From: Neale Ranns<mailto:ne...@graphiant.com>
Date: 2022-07-26 06:02
To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>
Subject: Re: [vpp-dev] questions about fib
Hi,
Before I answer can you please elaborate on what you mean by ‘stacked on’. Can
you please give t
Hi,
Before I answer can you please elaborate on what you mean by ‘stacked on’. Can
you please give the config example.
/neale
From: vpp-dev@lists.fd.io on behalf of
haiyan...@ilinkall.cn via lists.fd.io
Date: Monday, 25 July 2022 at 11:12
To: vpp-dev
Subject: [vpp-dev] questions about fib
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via
lists.fd.io
Date: Wednesday, 22 June 2022 at 05:06
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] #mpls enabling mpls at interface
Hi,
My question is more on clarity. It was enabled and working fine.
But, some times I see
Hi Martin,
QoS marking takes the buffer’s pre-classified QoS source:value and translate it
through the egress map into the value at the layer the marking is specified. If
we take your map id=0 as an example you are mapping a classification of IP:0 to
a value 30 and since the marking is an IP
Hi Sreejith,
No good reason. Please provide a patch to add that capability.
/neale
From: vpp-dev@lists.fd.io on behalf of sreejith n via
lists.fd.io
Date: Friday, 27 May 2022 at 00:34
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] Query regarding MPLS Tunnel
Hi All,
I have a query regarding
Hi Vijay,
It sounds like the SA you programme did not install. As you say, DES is
insecure, so we don’t even test it anymore. I would suggest you start with a UT
in VPP and go from there. Maybe extend the algos in MyParameters in
test/test_ipsec_esp.py
/neale
From: vpp-dev@lists.fd.io on
p4-chain
[@0]: dpo-drop ip4
DBGvpp#
/neale
From: arunmitta...@gmail.com
Date: Wednesday, 20 April 2022 at 05:47
To: Neale Ranns
Subject: Private: Re: [vpp-dev] Queries regarding mfib and multicast support in
VPP
Thanks Neale,
I think this information will help me a lot to understand multi
Hi Sonia,
How are you routing into the tunnels, and what changes to that routing do you
make when removing and adding tunnels.
/neale
From: vpp-dev@lists.fd.io on behalf of Sonia Rovner via
lists.fd.io
Date: Tuesday, 12 April 2022 at 22:57
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] User
Hi Arun,
From: vpp-dev@lists.fd.io on behalf of arunmittal88 via
lists.fd.io
Date: Tuesday, 12 April 2022 at 15:24
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] Queries regarding mfib and multicast support in VPP
Hi,
Just want to know if the mfib-lookup node is attached to the default packet
Hi,
You need to choose an appropriate priority for:
lcp_rt_fib_src =
fib_source_allocate ("lcp-rt", FIB_SOURCE_PRIORITY_HI, FIB_SOURCE_BH_API);
in plugins/linux-cp/lcp_router.c
from vnet/fb/fib_source.h
/**
* The fixed source to priority mappings.
* Declared here so those adding new
From: vpp-dev@lists.fd.io on behalf of Chinmaya Aggarwal
via lists.fd.io
Date: Monday, 4 April 2022 at 09:08
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] Prevent blackhole routes being leaked into VPP
Hi,
We have integrated linux-cp and linux-nl plugin in VPP. We create table 1203 on
VPP and
From: vpp-dev@lists.fd.io on behalf of Pim van Pelt via
lists.fd.io
Date: Sunday, 27 March 2022 at 14:01
To: Stanislav Zaikin
Cc: vpp-dev
Subject: Re: [vpp-dev] Crash in BVI and Loopback interaction
Hoi Stanislav,
Thanks for the response. As I noted in my original email, I am aware that
Hi Sastry,
There are lots of examples of MPLS routes and VRF creation in test/test_mpls.py
and BFD session creation in test/test_bfd.py.
Or if you’d prefer there’s src/plugins/unittest/fib_test.c with fib_test_bfd.
/neale
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via
lists.fd.io
Hi Sastry,
If you can reproduce it with a unit test, I’ll look into it.
/neale
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via
lists.fd.io
Date: Thursday, 17 March 2022 at 10:07
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] vpp hangs with bfd configuration along with mpls (inner
Hi,
You decrement/increment n_left_to_next/to_next twice in one iteration of the
loop, so you are writing out of bounds. Have a look at other nodes that do
packet copying like l2_flood.
/neale
From: vpp-dev@lists.fd.io on behalf of Smith Beirvin via
lists.fd.io
Date: Monday, 7 March 2022
From: vpp-dev@lists.fd.io on behalf of suresh vuppala via
lists.fd.io
Date: Friday, 4 March 2022 at 22:40
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] Ping to loopback behind Vxlan tunnel is failing #vpp-dev
HI VPP-DEV team,
ubuntu 20.04
vpp v22.06-rc0~79-g48bdf24ad
I have my ubuntu 20.04
Hi Sreejith,
There is no CLI for that. Contributions welcome.
/neale
From: vpp-dev@lists.fd.io on behalf of
sreejithsurendrannair2 via lists.fd.io
Date: Friday, 11 February 2022 at 14:37
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] MPLS Tunnel Interface on Provider Router
Hi All,
I have
Hi Sagar,
You protection needs to be for the peer on the tunnel (44.44.44.44) not the
peer on the Ethernet.
/neale
From: vpp-dev@lists.fd.io on behalf of sagar g via
lists.fd.io
Date: Friday, 11 February 2022 at 12:44
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] multipoint ipsec!!
Hi All,
L3 mode means there is no L2 header. Both ends need to agree to that.
/neale
From: vpp-dev@lists.fd.io on behalf of David Gohberg via
lists.fd.io
Date: Sunday, 6 February 2022 at 15:57
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] VXLAN overlay routing
Hi,
I'm not interested in bridging so
Hi David,
If you want to combine L2 and L3 forwarding on a VXLAN interface, use a BVI as
Petr suggests. If you want the VXLAN tunnels to only act like an L3 interface,
then you can use create the tunnels in L3 mode.
/neale
From: vpp-dev@lists.fd.io on behalf of Petr Boltík via
lists.fd.io
From: vpp-dev@lists.fd.io on behalf of Amit Mehra via
lists.fd.io
Date: Monday, 17 January 2022 at 09:30
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] MPLS Tunnel Interface on Provider Router
Thanks Neale for the response.
We are trying to simulate L3VPN usecase and want to maintain
Hi Amit,
From: vpp-dev@lists.fd.io on behalf of Amit Mehra via
lists.fd.io
Date: Friday, 14 January 2022 at 12:50
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] MPLS Tunnel Interface on Provider Router
Hi,
I was doing a PoC to simulate label swap operation on Service Provider
Router(non PE
at 11:28
To: Neale Ranns
Cc: vpp-dev
Subject: Re: [vpp-dev] VXLAN and RSS
Hoi,
Neale, thank you for pointing that out! I verified the intent, and I can
confirm that VXLAN uses random source ports [1], and so does GENEVE [2], so
this is WAI. I mirrored traffic between the two VPP hosts, while
Hi Pim,
For VXLAN the intention is to use random source ports. The code you sight
builds the ‘static’ portion of the imposed header. The source ports are
overwritten with the hash of the encapped packet in encap.c:246
/neale
From: vpp-dev@lists.fd.io on behalf of Pim van Pelt via
You are configuring it incorrectly. Please re-read the emails I have already
sent you.
/neale
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via
lists.fd.io
Date: Thursday, 30 December 2021 at 04:49
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] MPLS: fib table 1 display issue #mpls
Hi David,
Here’s some back ground on FIB graph walks:
https://s3-docs.fd.io/vpp/21.10/gettingstarted/developers/fib20/graphwalks.html
I can’t think of any examples similar to what you are attempting, but you could
conceivably achieve it with:
1 – a pub/sub API. Similar to
Hi David,
Are you hoping to get these routes from queries via the CLI/API or are you
prepared to write a plugin in VPP to extract and publish this information to
your control plane via new events? For the former, Stanislav’s advice is your
best option. So I would suggest you consider the
Hi Sastry,
For the last time… you bind a label to a prefix first by defining the
forwarding for the prefix:
Ip route table X 1.2.3.4/32 via 10.10.10.10 eth0
And then you bind a label to it:
Mpls local-label 44 1.2.3.4/32 table X
That’s all.
If you’re building a product, then you are
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via
lists.fd.io
Date: Thursday, 9 December 2021 at 02:17
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] MPLS: fib table 1 display issue #mpls
Hi Neale,
Thank you for detailed explanation. Its working fine by
providing
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via
lists.fd.io
Date: Wednesday, 8 December 2021 at 03:35
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] MPLS: fib table 1 display issue #mpls
Hi Neale,
Thank you for the help. We are trying to exercise vpp mpls
vpn and
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via
lists.fd.io
Date: Thursday, 2 December 2021 at 13:25
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] MPLS: fib table 1 display issue #mpls
Thank you Neale. We may need to develop something like show mpls bind for our
purpose.
My test
Cc: Neale Ranns
Subject: Use ABF to route UDP traffic to different paths
On my VPP setup, I have two IPSec tunnels can reach 192.168.200.0/24, the
interfaces for those two IPSec tunnels are ipip0 and ipip1.
I try to set up abf to direct UDP packets to 192.168.200.20 based on
destination port
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via
lists.fd.io
Date: Tuesday, 30 November 2021 at 02:35
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] MPLS: fib table 1 display issue #mpls
Hi Neale,
Then, mpls table ID we give for mpls commands always
represents ip
Hi Sastry,
For IP unicast MPLS VPNs there is only mpls table 0.
Label to vrf mapping is done based on the label allocation scheme (see the doc).
/neale
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via
lists.fd.io
Date: Monday, 29 November 2021 at 13:00
To: vpp-dev@lists.fd.io
Hi Sastry,
I’d suggest you start with the docs here:
https://wiki.fd.io/view/VPP/MPLS_FIB
/neale
From: vpp-dev@lists.fd.io on behalf of Sastry Sista via
lists.fd.io
Date: Monday, 29 November 2021 at 08:17
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] MPLS: fib table 1 display issue #mpls
[Adding the public mailer so we all benefit]
Hi Wei,
You need to add the multicast routes to VPP too.
/neale
From: Wei Huang
Date: Wednesday, 17 November 2021 at 03:57
To: nra...@cisco.com , Neale Ranns
Subject: VPP Linux-cp plugin with multicast packets
Hi Neale
I am using the linux-cp
Hi Stanislav,
IMHO the ASSERT is a false negative, even though the load-balance has been put
in the pool, its memory is still valid and can still be safely retrieved from a
worker. If the load-balance was re-used before all workers were done with it,
then we’d have problems, but that doesn’t
have a reliable reproduction environment, could you
cook your own pool_put_would_expand macro to test this theory?
/neale
From: Stanislav Zaikin
Date: Friday, 22 October 2021 at 15:06
To: Neale Ranns
Cc: vpp-dev
Subject: Re: [vpp-dev] assert in pool_elt_at_index
Hi Neale,
Sure, here
Hi Stanislav,
Can you do:
thread apply all bt
I’d like to see what the other threads are doing.
/neale
From: vpp-dev@lists.fd.io on behalf of Stanislav Zaikin
via lists.fd.io
Date: Wednesday, 13 October 2021 at 20:30
To: vpp-dev
Subject: [vpp-dev] assert in pool_elt_at_index
Hello folks,
Hi Rajith,
Can you try this:
https://gerrit.fd.io/r/c/vpp/+/34200
I think Stanislav’s solution would also work, but it would mean a no-op restack
for the tunnel. Not walking the new child is more efficient.
/neale
From: vpp-dev@lists.fd.io on behalf of Stanislav Zaikin
via lists.fd.io
15:29
To: Neale Ranns , kusumanjal...@gmail.com
Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] VPP - GRE tunnel
Hi Neale ,
If that is the case , Server1 (TenGigabitEthernet1/0/1 ) and
server2(TenGigabitEthernet1/0/2) are connected back to back . If I assign the
same ip to GRE , will packet go v
Also the tunnel src,dst addresses should be 43.0.0.x
/neale
From: vpp-dev@lists.fd.io on behalf of Kusuma DS via
lists.fd.io
Date: Thursday, 30 September 2021 at 14:25
To: Archana Sampath
Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] VPP - GRE tunnel
Hi Archana,
Instead of creating
on that link is unreachable.
/neale
From: mark antony
Date: Thursday, 23 September 2021 at 12:12
To: Neale Ranns
Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] getting ip6-glean:address overflow drops
Hi neale,
Thanks for the info, is enabling ipv6 on interface with "enable ip6 interface"
Hi Mark,
If traffic matches a ipv6-glean then it is destined to a host on an attached
subnet that does not yet have an ND entry. Matching the glean will generate an
ND solicitation to that host, but these are rate limited. An address overflow
can happen when:
1. when the rate limiting
Hi,
No. the expectation is that the entity that added the route would inform other
entities in the system. VPP is not the system message bus.
/neale
From: vpp-dev@lists.fd.io on behalf of PRANAB DAS via
lists.fd.io
Date: Tuesday, 21 September 2021 at 13:29
To: vpp-dev@lists.fd.io
Hi Artme,
I’d suggest you replace:
set int unnumbered memif0/0 use loop0
with
enable ip6 interface memif0/0
or add something like this:
https://gerrit.fd.io/r/c/vpp/+/32770/4/src/vnet/interface.c#1701
/neale
From: vpp-dev@lists.fd.io on behalf of Artem Glazychev
via lists.fd.io
Date:
Hi Rajiyh,
Maybe there’s something that still resolves through the tunnel when it’s
deleted?
/neale
From: vpp-dev@lists.fd.io on behalf of Rajith PR via
lists.fd.io
Date: Tuesday, 14 September 2021 at 13:17
To: vpp-dev
Subject: [vpp-dev]: Assert in vnet_mpls_tunnel_del()
Hi All,
We
Hi Zach,
Apologies for the late reply and thank you for the considered analysis.
..snip..
Is there a reason that the input side is setup like this? Unless there is a
good reason for allowing inbound traffic by default, I would propose to patch
the ipsec-input node to align with ipsec-output
Date: Tuesday, 7 September 2021 at 20:11
To: Neale Ranns
Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] Question regarding ip4/ip6 nexthop load balance
flexibility #vnet
Hi Neale,
Thanks for getting back. I thought as much that cloning code (even though I do
a graph node replacement) wouldn't h
Hi Prashant,
From: vpp-dev@lists.fd.io on behalf of Prashant Upadhyaya
via lists.fd.io
Date: Monday, 6 September 2021 at 11:05
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] Regarding VPP IPSec pipeline
Hi,
I am using VPP21.06.
I have successfully created an IPSec tunnel between VPP and a Strong
Hi Venky,
There are several ways you might go about this but I would council that cloning
code is a last resort – it would be a mainanence headache if you replace the
current one or have i’s own set of challenges to use your replace node. if you
could give me some more detail on how you want
Hi Ed,
When creating an adjacency for the first time we send out a probe packet
(ARP/ND) to see if the peer will resolve it.
/neale
From: Ed Warnicke
Date: Friday, 20 August 2021 at 16:54
To: Neale Ranns
Cc: zsta...@gmail.com , Artem Glazychev
, vpp-dev
Subject: Re: [vpp-dev] Adding new
Hi Ed,
It does. But in this case the command is adding a route through an interface,
which is not the same as configuring a prefix on an interface (nor ip6 enabling
it).
/neale
From: Ed Warnicke
Date: Friday, 20 August 2021 at 16:40
To: Neale Ranns
Cc: zsta...@gmail.com , Artem Glazychev
Hi Stanislav,
Excellent, thank you!
/neale
From: Stanislav Zaikin
Date: Friday, 20 August 2021 at 16:38
To: Neale Ranns
Cc: Artem Glazychev , vpp-dev
Subject: Re: [vpp-dev] Adding new route via ipv6 link-local
Hi Neale,
If there are no volunteers, there's the patch:
https://gerrit.fd.io/r
Hi Artem, Stanislav,
I agree graceful handling is needed, return false if there is no link local.
If you enabled ip6 on the link first, this wouldn’t be a problem. The link will
need to be ip6 enabled if you want something to reply.
/neale
From: vpp-dev@lists.fd.io on behalf of Stanislav
Hi Venu,
Before adding any IPSec state:
DBGvpp# ipsec select ?
ipsec select backend ipsec select backend
/neale
From: vpp-dev@lists.fd.io on behalf of Venumadhav Josyula
via lists.fd.io
Date: Tuesday, 17 August 2021 at 08:30
To: Sweetu Hubby
Cc: vpp-dev
Subject:
Hi Xiaopeng,
If you disable flooding in a BD then it will not forward broadcast nor
multicast (BM) packets, because there is nothing else to do with such packets
other than flood. The l2fib is not consulted for BM packets, so if you added a
static entry for a BM address it won’t be used. The
Hi,
The packet has a multicast destination MAC so it was flooded, including to the
BVI. The BVI dropped it because it does not have a valid ether type. The trace
says the ethertype value was 0x162. I don’t know what a gns3 simulation is, nor
do I want to
/neale
From: vpp-dev@lists.fd.io
Dear Ivan,
That’s the best bug report I’ve seen in ages, so thank you!
I’ll take your patch as a starting point, but I’ll think I move the
responsibility for walking the incomplete adjacencies into the adj code; it
seems a little unfair for the ip-neighbour module to be responsible for
Hi Vijay,
Use the APIs in ipsec_spd.h
/neale
From: Vijay Kumar
Date: Wednesday, 11 August 2021 at 14:05
To: Neale Ranns
Cc: vpp-dev
Subject: Re: [vpp-dev] Regarding Traffic selectors (IP and port range) usage in
vnet/ipsec encrypt
Hi Neale,
Thanks for the clarification.
We are not using
Hi Vijay,
VPP’s IKE implementation only supports route-based VPNs (where a tunnel
interface is created) and not policy based (where the SPD is used).
/neale
From: vpp-dev@lists.fd.io on behalf of Vijay Kumar via
lists.fd.io
Date: Wednesday, 11 August 2021 at 13:00
To: vpp-dev
Subject:
Hi Ravi,
There’s no CLI to remove them. the CLI is for debug use only.
Feel free to contribute a patch to add a CLI if you need one.
/neale
From: vpp-dev@lists.fd.io on behalf of RaviKiran Veldanda
via lists.fd.io
Date: Monday, 9 August 2021 at 22:42
To: vpp-dev@lists.fd.io
Subject:
The same way you ping the normal interface. Just make sure the forward and
reverse routes are present.
Send a packet trace if it doesn’t work.
/neale
From: vpp-dev@lists.fd.io on behalf of mark antony via
lists.fd.io
Date: Monday, 9 August 2021 at 22:24
To: vpp-dev@lists.fd.io
Subject:
From: Ed Warnicke
Date: Monday, 9 August 2021 at 16:16
To: Neale Ranns
Cc: otr...@employees.org , artem.glazyc...@xored.com
, vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] memif: failed: no source address for egress interface
On Mon, Aug 9, 2021 at 7:40 AM Neale Ranns
mailto:ne
On 09/08/2021 10:15, "otr...@employees.org" wrote:
> I think that is telling you not to use /32 address on interface for which you
> expect there to be connected peers.
> From an IP networking perspective, if you want two peers to be connected on
> an interface, they need to be within the
Hi Artem,
I think that is telling you not to use /32 address on interface for which you
expect there to be connected peers.
>From an IP networking perspective, if you want two peers to be connected on an
>interface, they need to be within the same subnet, so use a /31.
/neale
From:
August 2021 at 11:13
To: Neale Ranns
Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] MAC Learning in vpp
Hi ,
we want to write a port security script. In the first router work normally ,
all interfaces have ip addresses . then the user wants to set port security on
an interface. and here we must
HI Mohsen,
From: Mohsen Meamarian
Date: Thursday, 5 August 2021 at 08:24
To: Neale Ranns
Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] MAC Learning in vpp
Hi Neale,
Thanks , I’m looking for another way because I have a problem with the bridge.
Another way to do what? Do you want to do l2
[limit ] [age ] [recycle|norecycle]
there are no other means to control what IP neighbours are or aren’t learned.
/neale
From: Mohsen Meamarian
Date: Wednesday, 4 August 2021 at 07:26
To: Neale Ranns
Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] MAC Learning in vpp
Hi Neal,
Thanks, Is there a way
Hi,
I don’t know how SRv6 works on either platform.
My point is that VPP added the route because there is a neighbour for that
address, VPP does this always for all neighbours, this happens irrespective of
SRv6.
Is the presence of the route causing you problems?
/neale
From:
Hi,
VPP adds FIB entries for all IP neighbours. These are used to forward traffic
to those neighbours.
if you do:
show ip6 fib 2001:7a0:10::111/128
you’ll see more detailed output that describes the sources’of the FIB entry, A
source is the entity that added the route. The adjacency source is
Hi Ravi.
as I said in another thread, VLANs are represented by interfaces in VPP, so to
achieve VALN differentiated forwarding you need to bind different
tables/polices/etc with the different routes/rules/etc to the different VLAN
interfaces.
For example, create different ip tables:
Ip
be learnt in each BD.
/neale
From: Mohsen Meamarian
Date: Tuesday, 3 August 2021 at 06:37
To: Neale Ranns
Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] MAC Learning in vpp
Thanks neale,
What is the easiest way to enable learning on an interface while other
functionality , including passing
HI Moshen,
From: vpp-dev@lists.fd.io on behalf of Mohsen Meamarian
via lists.fd.io
Date: Monday, 2 August 2021 at 18:45
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] MAC Learning in vpp
Hi friends,
I want to implement port security in vpp. I assume that the l2learn_process
function in
From: Vijay Kumar
Date: Monday, 2 August 2021 at 11:33
To: Neale Ranns
Cc: vpp-dev
Subject: Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and
"Unsupported payload"
Hi Neale,
My IPSEC rekey is set to high (2 hr). So the issue is not during rekey.
I don’t under
Hi Vijay,
No I don’t see random failures. Do they occur during a rekeying event?
/neale
From: vpp-dev@lists.fd.io on behalf of Vijay Kumar via
lists.fd.io
Date: Monday, 2 August 2021 at 08:43
To: vpp-dev
Subject: Re: [vpp-dev] Regarding IPsec errors "Integrity failure" and
"Unsupported
There’s not enough information here to diagnose what the problem is. Let’s
start with a packet trace.
#regards
/neale
From: vpp-dev@lists.fd.io on behalf of nikhil subhedar
via lists.fd.io
Date: Saturday, 31 July 2021 at 19:49
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] #ipsec #vnet #vpp
Hi Ravi,
So many options let’s start with the easiest.
VLANs in VPP are a sub-interface. So if you want ALL traffic from Eth0.100 to
go to memif0.100, and vice-versa, without a MAC rewrite, use an l2-xconnect.
/neale
From: vpp-dev@lists.fd.io on behalf of RaviKiran Veldanda
via
/missing.rst
/neale
From: Gudimetla, Leela Sankar
Date: Monday, 26 July 2021 at 19:42
To: Neale Ranns , vpp-dev@lists.fd.io
Subject: Re: MPLS protection
Could someone please respond to the specific question that I have described
below?
Thanks,
Leela sankar
From: vpp-dev@lists.fd.io on behalf
Hi Ravi,
If you want the packet to egress with a VLAN, then you can create a VLAN
sub-interface on the memif and point the policy via that.
/neale
From: vpp-dev@lists.fd.io on behalf of RaviKiran Veldanda
via lists.fd.io
Date: Friday, 16 July 2021 at 19:06
To: vpp-dev@lists.fd.io
Subject:
Hi Ravi,
A memif interface is not p2p, so your ABF policy path needs a next-hop:
abf policy add id 0 acl 0 via 192.168.1.X memif1/0
where .X is the host on the other end.
/neale
From: vpp-dev@lists.fd.io on behalf of RaviKiran Veldanda
via lists.fd.io
Date: Friday, 16 July 2021 at 17:15
1 - 100 of 655 matches
Mail list logo