Re: [vpp-dev] Building RPM's for VPP and include router and netlink plugins

[Jan Hugo Prins | BetterBe]

Hello,

after some pointers from Burt Silverman I was able to build the router
and netlink plugin.
The process is as follows:

$ git clone https://gerrit.fd.io/r/vpp
$ cd vpp/build-root/vagrant/
$ export VPP_VAGRANT_DISTRO=centos7
$ vagrant up
$ vagrant ssh
$ sudo yum -y install
https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
$ exit
$ vagrant provision
$ vagrant ssh
$ cd ~
$ git clone https://gerrit.fd.io/r/vppsb
$ sudo yum install -y python-cffi python-pycparser
$ cd /vpp
$ ln -sf /home/vagrant/vppsb/netlink
$ ln -sf /home/vagrant/vppsb/router
$ ln -sf ../../netlink/netlink.mk build-data/packages/
$ ln -sf ../../router/router.mk build-data/packages/
$ cd build-root/
$ make V=0 PLATFORM=vpp TAG=vpp_debug netlink-install router-install

The rpm files are in the directory: /vpp/build-root/
The plugins are now in the directory:
/vpp/build-root/install-vpp_debug-native/

librtnl.so  -> /usr/lib64
testrtnl_plugin.so  ->  /usr/lib/vpp_plugins
router.so   -> /usr/lib/vpp_plugins

I have not yet found how to make sure that the Fedora-Epel repository is
in the image before I start building, so 'vagrant up' fails initially
because it misses some packages.
After putting the plugins on the target server in the correct
directories, vpp is able to load the plugins and I'm able to do a
'enable tap-inject'.

One side note, after doing 'enable tap-inject' I have the tap interfaces
but:

- Doing 'show tap TenGigabitEthernet5/0/0' crashes vpp. Have not found
any stacktraces.

More testing will be done in the coming week.

Some quick questions:
- Is it possible to give the tap interfaces created by the router plugin
specific names? Can I name them like the interfaces in vpp itself?
- How do I save my configuration I put in vppctl? Do I need to create a
script or config file somewhere?


Thanks,
Jan Hugo Prins



On 04/06/2018 09:10 PM, Jan Hugo Prins | BetterBe wrote:
> Hello,
>
> I'm currently trying ot build a BGP router based on frrouter and VPP.
> To do this I have tried to follow the following URL:
> https://github.com/FRRouting/frr/wiki/Alternate-forwarding-planes:-VPP
>
> The first part works fine.
> I set VPP_VAGRANT_DISTRO to centos7.
> I build the vpp packages and this results in a whole lot of rpm files.
> After that I have to checkout the vppsb project and create some symlinks.
> But after that I have to run ./bootstrap.sh in the build-root
> directory, but it ain't there.
> Skipping the ./bootstrap.sh doesn't work either because the make after
> that does not work at that location.
>
> Could someone give me some pointers on how to get the vpp rpm set
> including the plugins from the vppsb project?
>
> I want to base the router on centos 7.4.
>
> -- 
> Kind regards
>
> Jan Hugo Prins
> /DevOps Engineer/
> 
> Auke Vleerstraat 140 E
> 7547 AN Enschede
> CC no. 08097527
> 
>   *T* +31 (0) 53 48 00 694 
> *E* jpr...@betterbe.com 
> *M* +31 (0)6 263 58 951 
> www.betterbe.com 
> BetterBe accepts no liability for the content of this email, or for
> the consequences of any actions taken on the basis
> of the information provided, unless that information is subsequently
> confirmed in writing. If you are not the intended
> recipient you are notified that disclosing, copying, distributing or
> taking any action in reliance on the contents of this
> information is strictly prohibited.
>
> 

-- 
Kind regards

Jan Hugo Prins
/DevOps Engineer/

Auke Vleerstraat 140 E
7547 AN Enschede
CC no. 08097527

*T* +31 (0) 53 48 00 694 
*E* jpr...@betterbe.com 
*M* +31 (0)6 263 58 951 
www.betterbe.com 
BetterBe accepts no liability for the content of this email, or for the
consequences of any actions taken on the basis
of the information provided, unless that information is subsequently
confirmed in writing. If you are not the intended
recipient you are notified that disclosing, copying, distributing or
taking any action in reliance on the contents of this
information is strictly prohibited.

Re: [vpp-dev] Patches for 18.04

[Thomas F Herbert]

Chris and John

Thanks. will do.

--Tom


On 04/06/2018 03:53 PM, Chris Luke wrote:


You can cherry pick them to the stable branch, though preferably with 
a Jira ID in the first line (you can amend the commit message after 
you cherry pick it).


Chris.

*From:*vpp-dev@lists.fd.io  *On Behalf Of *Thomas 
F Herbert

*Sent:* Friday, April 6, 2018 14:38
*To:* vpp-dev@lists.fd.io
*Cc:* vpp-dev ; Billy McFall 
*Subject:* [vpp-dev] Patches for 18.04

Chris,

I submitted two patches to master that should be in stable/18.04.

11556: Merged in Master: https://gerrit.fd.io/r/11556

11551: Submitted but not merged yet in master: 
https://gerrit.fd.io/r/11551 


What should I do?

Should I resubmit both patches direct to stable/18.04?

--Tom

--
*Thomas F Herbert*
NFV and Fast Data Planes
Networking Group Office of the CTO
*Red Hat*




--
*Thomas F Herbert*
NFV and Fast Data Planes
Networking Group Office of the CTO
*Red Hat*

Re: [vpp-dev] What RPM contains vpp debug symbols?

[Thomas F Herbert]

Yichen,

Sorry it took me a long time to respond. debuginfo rpms were not 
produced for 17.10 and 18.01 because of a side affect of a "fix" to work 
around a problem with rpmbuild.


The plan is to restore the building of debuginfo rpms in 18.04 and 
subsequent releases.


This is documented in

https://jira.fd.io/browse/VPP-1227

--Tom


On 04/02/2018 02:21 PM, Yichen Wang wrote:


Hi, Thomas,

Just want to revive this thread… Do we know when can we have this 
fixed? We are testing and will likely to ship with VPP 18.04 once the 
final release comes out. Having the debuginfo RPM is **very** 
important in our product, as it will give clues when VPP crashes. 
Given it has been broken for 6months+, we would really need your helps 
so that we have the debuginfo RPM before we finalize our code.


Thanks very much!

Regards,

Yichen

*From: *Dave Wallace 
*Date: *Thursday, January 25, 2018 at 8:20 PM
*To: *Billy McFall 
*Cc: *"vpp-dev@lists.fd.io" , "Yichen Wang 
(yicwang)" 

*Subject: *Re: [vpp-dev] What RPM contains vpp debug symbols?

Thanks for the info Billy!
-daw-

On 1/25/18 8:26 PM, Billy McFall wrote:

'make pkg-rpm' is currently not generating an RPM with debug
symbols. There is a bug in  rpmbuild for packages with short names
(i.e. - vpp) that was not allowing RPMs to be built upstream in
CentOS and RHEL. The work around is to add a -0 to the package
name to make it long enough. Much later after this change was
merged, it was discovered that the debug RPM was not being built.

Thomas Herbert is tracking the issue. rpmbuild has been fixed in
Fedora but that fix has not been pulled into CentOS or RHEL. Not
sure when it will make it. Thomas can give more details, I am just
regurgitating what he previously reported to me.

Billy McFall

On Thu, Jan 25, 2018 at 6:57 PM, Dave Wallace
mailto:dwallac...@gmail.com>> wrote:

Does anyone know what RPM contains debug symbols?

Back in VPP 17.07 there used to be an RPM package called
vpp-debuginfo-*.x86_64.rpm, but that package is no longer
installed on nexus.fd.iostarting with
release 17.10


https://nexus.fd.io/content/repositories/fd.io.stable.1707.centos7/io/fd/vpp/vpp-debuginfo/17.07.01-release.x86_64/vpp-debuginfo-17.07.01-release.x86_64.rpm

Thanks,
-daw-


___
vpp-dev mailing list
vpp-dev@lists.fd.io
https://lists.fd.io/mailman/listinfo/vpp-dev



-- 


*Billy McFall*
Networking Group
CTO Office
*Red Hat*






--
*Thomas F Herbert*
NFV and Fast Data Planes
Networking Group Office of the CTO
*Red Hat*

Re: [vpp-dev] Patches for 18.04

[Chris Luke]

You can cherry pick them to the stable branch, though preferably with a Jira ID 
in the first line (you can amend the commit message after you cherry pick it).

Chris.

From: vpp-dev@lists.fd.io  On Behalf Of Thomas F Herbert
Sent: Friday, April 6, 2018 14:38
To: vpp-dev@lists.fd.io
Cc: vpp-dev ; Billy McFall 
Subject: [vpp-dev] Patches for 18.04


Chris,

I submitted two patches to master that should be in stable/18.04.

11556: Merged in Master: https://gerrit.fd.io/r/11556

11551: Submitted but not merged yet in master: https://gerrit.fd.io/r/11551

What should I do?

Should I resubmit both patches direct to stable/18.04?

--Tom
--
Thomas F Herbert
NFV and Fast Data Planes
Networking Group Office of the CTO
Red Hat

[vpp-dev] Building RPM's for VPP and include router and netlink plugins

[Jan Hugo Prins | BetterBe]

Hello,

I'm currently trying ot build a BGP router based on frrouter and VPP.
To do this I have tried to follow the following URL:
https://github.com/FRRouting/frr/wiki/Alternate-forwarding-planes:-VPP

The first part works fine.
I set VPP_VAGRANT_DISTRO to centos7.
I build the vpp packages and this results in a whole lot of rpm files.
After that I have to checkout the vppsb project and create some symlinks.
But after that I have to run ./bootstrap.sh in the build-root directory,
but it ain't there.
Skipping the ./bootstrap.sh doesn't work either because the make after
that does not work at that location.

Could someone give me some pointers on how to get the vpp rpm set
including the plugins from the vppsb project?

I want to base the router on centos 7.4.

-- 
Kind regards

Jan Hugo Prins
/DevOps Engineer/

Auke Vleerstraat 140 E
7547 AN Enschede
CC no. 08097527

*T* +31 (0) 53 48 00 694 
*E* jpr...@betterbe.com 
*M* +31 (0)6 263 58 951 
www.betterbe.com 
BetterBe accepts no liability for the content of this email, or for the
consequences of any actions taken on the basis
of the information provided, unless that information is subsequently
confirmed in writing. If you are not the intended
recipient you are notified that disclosing, copying, distributing or
taking any action in reliance on the contents of this
information is strictly prohibited.

Re: [vpp-dev] Patches for 18.04

[John Lo (loj)]

Hi Tom,

On your gerrit page for these patches, you can just click the "Cherry Pick" 
bottom and choose stable/1804 branch.

Regards,
John

From: vpp-dev@lists.fd.io  On Behalf Of Thomas F Herbert
Sent: Friday, April 06, 2018 2:38 PM
To: vpp-dev@lists.fd.io
Cc: vpp-dev ; Billy McFall 
Subject: [vpp-dev] Patches for 18.04


Chris,

I submitted two patches to master that should be in stable/18.04.

11556: Merged in Master: https://gerrit.fd.io/r/11556

11551: Submitted but not merged yet in master: https://gerrit.fd.io/r/11551

What should I do?

Should I resubmit both patches direct to stable/18.04?

--Tom
--
Thomas F Herbert
NFV and Fast Data Planes
Networking Group Office of the CTO
Red Hat

[vpp-dev] Patches for 18.04

[Thomas F Herbert]

Chris,

I submitted two patches to master that should be in stable/18.04.

11556: Merged in Master: https://gerrit.fd.io/r/11556

11551: Submitted but not merged yet in master: https://gerrit.fd.io/r/11551

What should I do?

Should I resubmit both patches direct to stable/18.04?

--Tom

--
*Thomas F Herbert*
NFV and Fast Data Planes
Networking Group Office of the CTO
*Red Hat*

Re: [**EXTERNAL**] Re: [vpp-dev] VPP client: test_client vs VAT

[Gudimetla, Leela Sankar]

Thanks Daw for the response.
I think I understood now. The test_client is a good reference point to start 
implementing the client in my application.

Thanks,
Leela sankar

From: Dave Wallace 
Date: Friday, April 6, 2018 at 7:10 AM
To: Leela Gudimetla , "vpp-dev@lists.fd.io" 

Subject: [**EXTERNAL**] Re: [vpp-dev] VPP client: test_client vs VAT

Leela,

VAT is an integral part of the Continuous Integration testing infrastructure so 
that is NOT appropriate to extend for your application.  However, it does offer 
a good set of example code on how to implement a VPP client using the binary 
API.

Depending on what your application does, you can either choose to integrate VPP 
binary api calls directly in it or create a separate app that uses test_client 
as the starting point.

Thanks,
-daw-
On 4/6/18 2:03 AM, Gudimetla, Leela Sankar wrote:
Hello,

I am trying to implement a client to VPP in my application that configures VPP 
by calling its APIs.
I see that VAT (VPP API TEST?) already has a client implemented as part of its 
testing infrastructure.
And I also see that there is a test_client which is a straight-forward and 
organic client to configure VPP.

I have the following questions on which one to be used in my application.

  1.  Can I make changes to the existing VAT code to make it work like VPP 
client in my application?

Or

  1.  Should I implement a VPP client in my application similar to test_client?

Could you please let me know which approach would be best wrt functionality, 
future releases etc?

Thanks,
Leela sankar

Re: [vpp-dev] Sad News from Intel - Venky Venkatesan

[Thomas F Herbert]

Jim,

Thanks for letting us know.

I am very sorry to hear about Venky's passing.

--Tom



On 04/05/2018 02:36 PM, St Leger, Jim wrote:


Several of you have already heard the very sad news of the passing of 
our dear friend and colleague Venky.  He was “Mr. DPDK” to many, a nod 
to his invention and creation of DPDK about ten years ago (before it 
was called DPDK.)  Of course his footprints across the industry and 
literally across the globe are everywhere. If you know what ATCA is, 
well, Venky had his hands and inventions deeply into the creation of 
that PICMG spec and many of the first revision products. He touched on 
and gave guidance to projects spanning Linux/netdev, DPDK, Intel 
QuickAssist Technology, BSD stacks, OVS, OPNFV, FD.io, 
all-things-virtualization (KVM, Xen, VMware, Hyper-V, etc.), ETSI, 
IETF, containers, and so many other arenas that my brain can’t 
remember at this dark moment.


If you knew him and engaged him, especially on deep technical 
discussions, you knew you were talking to someone with the rare 
combination of skills that went incredibly deep both on the hardware, 
silicon side of platforms but also on the software, networking side of 
the platforms.  Rarely did I find a topic that Venky wasn’t well 
versed on. And by “topic” I mean everything from football to 
photography to history to politics and many other subjects well beyond 
the technical realm our day jobs find us in. Conversations with Venky 
were a treat. Traveling with him was an adventure. Debating with him 
was a lesson. I will so miss all of him.


Below are some details on a memorial service this Sunday in Oregon and 
also a GoFundMe page. If you’re in Oregon or close by please join the 
service. Venky left behind a wife, Priya, and two young girls, Adhiti 
and Namrata. While I’m sure they are overwhelmed with sadness and 
grief at the moment they can use our support. Please consider 
supporting the GoFundMe memorial fund for his family.


Lastly, my network extends through this distribution list.  But 
Venky’s network was one hundred times broader. Please share this sad 
news through your own networks.


Thanks,

Jim

*From:* A message from Sandra Rivera
*Sent:* Thursday, April 5, 2018 10:58 AM
*Subject:* Follow-up: A loss for our NPG organization

All,

We have an update on the memorial service plans in celebration of 
Venky Venkatesan’s life.


The service will be held on Sunday, April 8^th at our Jones Farm 
Conference Center (JFCC) in Hillsboro, OR from 2-4PM, and is open to 
all who would like to join.


Venky’s family will plan to attend, as well as friends and others who 
have worked closely with him over the years.Please note that this is 
not an Intel-sponsored event and therefore any travel or expenses 
related to attending need to be managed personally.


Many of you have asked about donations, and we have helped setup a 
GoFundMe account for his family which will be used to fund 
scholarships for his children.


https://www.gofundme.com/venky-venkatesan-memorial-fund

If you have any questions about the service, please contact *Udayan 
Mukherjee*.


Thank you all very much for your support during this difficult time.

Sandra

**

*From:* A message from Sandra Rivera
*Sent:* Tuesday, April 3, 2018 9:34 PM
*Subject:* A loss for our NPG organization

To All,

Today is a very sad day for our NPG team and Intel.  Our dear friend 
and colleague, Venky Venkatesan, passed away early morning today after 
a tough battle with cancer.


Aside from his deep contributions to the organization, Venky provided 
technical mentorship to many employees and greatly impacted our 
technical leadership pipeline.


On a personal level, Venky was very dedicated to his family and also 
cared deeply about mentoring the next generation of engineers and 
scientists through efforts like coaching robotics teams and providing 
guidance to many interns and Intel employees. His passion, dedication 
and commitment to this organization, Intel, and the external community 
will be greatly missed.


We will let you know as soon as more information is available for 
Venky’s memorial/celebration service.


Sandra




--
*Thomas F Herbert*
NFV and Fast Data Planes
Networking Group Office of the CTO
*Red Hat*

Re: [vpp-dev] #vpp CGNAT implementation in VPP

[Hamid via Lists.Fd.Io]

Thanks Matus for the rapid response. The del command did the trick and I
will try to repeat the setup for 18.04-rc1 build. I also got some more info
through the command 'show nat44 detail' which did not show up by ? in the
CLI by default.

About IPFIX logging, can you suggest an example template to perform the
logging:
e.g.
nat {
NAT44 Addresses exhausted
NAT44 Session create
NAT44 Session delete
}

Also, any pointers to access these IPFIX logs for nat session details
without using deterministic NAT once the logging has been enable would also
be very helpful.

Regards,
Hamid

On Fri, Apr 6, 2018 at 3:42 PM, Matus Fabian -X (matfabia - PANTHEON
TECHNOLOGIES at Cisco)  wrote:

> “show nat44 deterministic mappings” probably doesn’t work because you use
> older version of the VPP (this was changed in 1804)
>
> To delete NAT deterministic mapping use “nat44 deterministic add in
> / out / del”
>
> Currently you can’t alocate specific number of ports of the external
> address to the internal clients. It is possible to implenet this, patches
> are welcome.
>
> NAT plugin use IPfix for logging events https://wiki.fd.io/view/VPP/
> NAT#IPFIX_templates. Deterministic NAT doesn’t log session since
> internall address is statically mapped to set of external ports of the
> address (purpose of deterministic NAT is to reduce logging
> https://tools.ietf.org/html/rfc7422).
>
>
>
> Matus
>
>
>
> *From:* Hamid Rasool <14mseesras...@seecs.edu.pk>
> *Sent:* Friday, April 6, 2018 12:16 PM
> *To:* Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) <
> matfa...@cisco.com>
> *Cc:* vpp-dev@lists.fd.io
> *Subject:* Re: [vpp-dev] #vpp CGNAT implementation in VPP
>
>
>
> Thanks Fabian.
>
>
>
> I have configured these steps and it seems to work (although some
> variations of nat deterministic add command caused vpp to crash and reset
> configurations though). However, there is another command in the VPP/NAT
> wiki: "show nat44 deterministic mappings" which does not seem to work.
>
> The "show nat44" command only seem to work however:
>
>
>
> vpp# nat44 deterministic add in 10.10.3.0/25 out 192.168.100.64/28
>
> vpp# show nat44
>
> NAT plugin mode: deterministic mapping
>
> udp timeout: 300sec
>
> tcp-established timeout: 7440sec
>
> tcp-transitory timeout: 240sec
>
> icmp timeout: 60sec
>
> 1 deterministic mappings
>
>
>
>
>
> I want to ask how can we delete a pool mapping once we have set it or even
> change it because there seems to be no options to do that. Another query is
> about how can we allocate a specific number of ports of the external
> address to the internal clients. Lets say I want to map 8 internal
> addresses to 1 external for a pool of external addresses, which makes about
> 8000 ports (out of 65000) for each internal address. Is there any way to
> implement.
>
> Last question for now, where are the session logs stored for NAT for each
> flow of packet. Does VPP provide syslog stats or any flow records for nat
> sessions?
>
>
>
> Thanks again!
>
>
>
>
>
>
>
> [image:
> https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-orange-animated-no-repeat-v1.gif]
> 
>
> Virus-free. www.avast.com
> 
>
>
>
> On Mon, Mar 19, 2018 at 5:19 PM, Matus Fabian -X (matfabia - PANTHEON
> TECHNOLOGIES at Cisco)  wrote:
>
> Hi,
>
>
>
> There is example of CGNAT configuration for currently supported feature
> set https://wiki.fd.io/view/VPP/NAT#Example_configuration
>
>
>
> Basically you need do following 3 steps:
>
> To enable CGNAT mode of NAT plugin add following to startup config: “nat {
> deterministic }”
>
> Set inside and outside interfaces: set interface nat44 in  out
> 
>
> Set pool address range for inside network range: nat44 deterministic add
> in / out /
>
>
>
> That is all you can currently configure.
>
>
>
> Matus
>
>
>
>
>
> *From:* vpp-dev@lists.fd.io  *On Behalf Of *Hamid
> via Lists.Fd.Io
> *Sent:* Monday, March 19, 2018 1:03 PM
> *To:* vpp-dev@lists.fd.io
> *Cc:* vpp-dev@lists.fd.io
> *Subject:* [vpp-dev] #vpp CGNAT implementation in VPP
>
>
>
> Hi,
>
> I have a Ubuntu server machine having 32 cores and four 1 Gigabit NICs
> with KVM hypervisor. I want to test VPP performance for CGNAT in NAT444
> mode while supporting routing protocols like BGP and IS-IS on VM topology
> setup. Kindly direct me somewhere to get me started. The usage of CGNAT
> with a pool of out address ranges and allocating port numbers is not
> directly explained in the NAT plugin Wiki page. Any info regarding how to
> generate packet traffic to check performance in terms of number of
> concurrent sessions handled by CGNAT on my hardware will also be
> appreciated.
>
> I have tried the progressive VPP tutorial but some of the switching
> related exercises are not functioning as expected and 

Re: [vpp-dev] VPP client: test_client vs VAT

[Dave Wallace]

Leela,

VAT is an integral part of the Continuous Integration testing 
infrastructure so that is NOT appropriate to extend for your 
application.  However, it does offer a good set of example code on how 
to implement a VPP client using the binary API.


Depending on what your application does, you can either choose to 
integrate VPP binary api calls directly in it or create a separate app 
that uses test_client as the starting point.


Thanks,
-daw-

On 4/6/18 2:03 AM, Gudimetla, Leela Sankar wrote:


Hello,

I am trying to implement a client to VPP in my application that 
configures VPP by calling its APIs.


I see that VAT (VPP API TEST?) already has a client implemented as 
part of its testing infrastructure.


And I also see that there is a test_client which is a straight-forward 
and organic client to configure VPP.


I have the following questions on which one to be used in my application.

 1. Can I make changes to the existing VAT code to make it work like
VPP client in my application?

Or

 2. Should I implement a VPP client in my application similar to
test_client?

Could you please let me know which approach would be best wrt 
functionality, future releases etc?


Thanks,

Leela sankar

Re: [vpp-dev] Sad News from Intel - Venky Venkatesan

[Dave Wallace]

+1000

On 4/6/18 7:24 AM, Marco Varlese wrote:

It is a very sad and shocking news.

Venky was a visioner, a scientist whilst being a humble and kind person.
He has been a mentor to me and it has been a true privilige to get to 
know him and work with him.
I am sure he'll be missed and remembered by so many people in our 
industry.


May he rest in peace.

On Thu, 2018-04-05 at 18:36 +, St Leger, Jim wrote:


Several of you have already heard the very sad news of the passing of 
our dear friend and colleague Venky.  He was “Mr. DPDK” to many, a 
nod to his invention and creation of DPDK about ten years ago (before 
it was called DPDK.)  Of course his footprints across the industry 
and literally across the globe are everywhere. If you know what ATCA 
is, well, Venky had his hands and inventions deeply into the creation 
of that PICMG spec and many of the first revision products. He 
touched on and gave guidance to projects spanning Linux/netdev, DPDK, 
Intel QuickAssist Technology, BSD stacks, OVS, OPNFV, FD.io, 
all-things-virtualization (KVM, Xen, VMware, Hyper-V, etc.), ETSI, 
IETF, containers, and so many other arenas that my brain can’t 
remember at this dark moment.


If you knew him and engaged him, especially on deep technical 
discussions, you knew you were talking to someone with the rare 
combination of skills that went incredibly deep both on the hardware, 
silicon side of platforms but also on the software, networking side 
of the platforms.  Rarely did I find a topic that Venky wasn’t well 
versed on. And by “topic” I mean everything from football to 
photography to history to politics and many other subjects well 
beyond the technical realm our day jobs find us in. Conversations 
with Venky were a treat. Traveling with him was an adventure. 
Debating with him was a lesson. I will so miss all of him.


Below are some details on a memorial service this Sunday in Oregon 
and also a GoFundMe page. If you’re in Oregon or close by please join 
the service. Venky left behind a wife, Priya, and two young girls, 
Adhiti and Namrata. While I’m sure they are overwhelmed with sadness 
and grief at the moment they can use our support. Please consider 
supporting the GoFundMe memorial fund for his family.


Lastly, my network extends through this distribution list.  But 
Venky’s network was one hundred times broader. Please share this sad 
news through your own networks.


Thanks,

Jim

*From:* A message from Sandra Rivera
*Sent:* Thursday, April 5, 2018 10:58 AM
*Subject:* Follow-up: A loss for our NPG organization

All,

We have an update on the memorial service plans in celebration of 
Venky Venkatesan’s life.


The service will be held on Sunday, April 8^th at our Jones Farm 
Conference Center (JFCC) in Hillsboro, OR from 2-4PM, and is open to 
all who would like to join.


Venky’s family will plan to attend, as well as friends and others who 
have worked closely with him over the years.Please note that this is 
not an Intel-sponsored event and therefore any travel or expenses 
related to attending need to be managed personally.


Many of you have asked about donations, and we have helped setup a 
GoFundMe account for his family which will be used to fund 
scholarships for his children.


https://www.gofundme.com/venky-venkatesan-memorial-fund

If you have any questions about the service, please contact *Udayan 
Mukherjee*.


Thank you all very much for your support during this difficult time.

Sandra

**

*From:* A message from Sandra Rivera
*Sent:* Tuesday, April 3, 2018 9:34 PM
*Subject:* A loss for our NPG organization

To All,

Today is a very sad day for our NPG team and Intel.  Our dear friend 
and colleague, Venky Venkatesan, passed away early morning today 
after a tough battle with cancer.


Aside from his deep contributions to the organization, Venky provided 
technical mentorship to many employees and greatly impacted our 
technical leadership pipeline.


On a personal level, Venky was very dedicated to his family and also 
cared deeply about mentoring the next generation of engineers and 
scientists through efforts like coaching robotics teams and providing 
guidance to many interns and Intel employees. His passion, dedication 
and commitment to this organization, Intel, and the external 
community will be greatly missed.


We will let you know as soon as more information is available for 
Venky’s memorial/celebration service.


Sandra


--
Marco V

SUSE LINUX GmbH | GF: Felix Imendörffer, Jane Smithard, Graham Norton
HRB 21284 (AG Nürnberg) Maxfeldstr. 5, D-90409, Nürnberg

Re: [vpp-dev] My patch kept failing Ubuntu 16.04 verification

[John Lo (loj)]

Thanks for your help, Marek. That worked.   -John

From: Marek Gradzki -X (mgradzki - PANTHEON TECHNOLOGIES at Cisco)
Sent: Friday, April 06, 2018 1:58 AM
To: John Lo (loj) ; vpp-dev@lists.fd.io
Subject: RE: My patch kept failing Ubuntu 16.04 verification

Hi,

You need to rebase your patch on top of
https://gerrit.fd.io/r/#/c/11526/

At least it helped on my local machine.

Regards,
Marek

From: vpp-dev@lists.fd.io 
[mailto:vpp-dev@lists.fd.io] On Behalf Of John Lo (loj)
Sent: 6 kwietnia 2018 06:23
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] My patch kept failing Ubuntu 16.04 verification

Hi all,

I submitted a patch https://gerrit.fd.io/r/#/c/11553/ which failed the verify 
job on Ubuntu 16.04 in 5 consecutive tries. 4 of the 5 failures all started 
similarly - not able to run "JVPP Core Test Case" where console output showed 
failure with temp dir in use and tracebacks.  These failed tests were attempted 
3 more times before final failure declared.  Does anyone know what may be the 
problem with the JVPP Core Test Case in Ubuntu 16.04 verify job and how to 
resolve it?

Appreciate any help,
John

Following is one such failure with JVPP:
22:35:31 
==
22:35:31 JVPP Core Test Case
22:35:31 
==
22:35:31 JVPP Acl Callback Api Test Case
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]
22:35:31 22:35:31,536 [Errno 17] File exists
22:35:31 JVPP Acl Future Api Test Case  
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]
22:35:31 22:35:31,792 [Errno 17] File exists
22:35:32 JVPP Core Callback Api Test Case   
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]
22:35:32 22:35:32,022 [Errno 17] File exists
22:35:32 JVPP Core Future Api Test Case 
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]
22:35:32 22:35:32,255 [Errno 17] File exists
22:35:32 JVPP Ioamexport Callback Api Test Case 
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]
22:35:32 22:35:32,494 [Errno 17] File exists
22:35:32 JVPP Ioamexport Future Api Test Case   
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]
22:35:32 22:35:32,712 [Errno 17] File exists
22:35:32 JVPP Ioampot Callback Api Test Case
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]
22:35:32 22:35:32,940 [Errno 17] File exists
22:35:33 JVPP Ioampot Future Api Test Case  
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]
22:35:33 22:35:33,207 [Errno 17] File exists
22:35:33 JVPP Ioamtrace Callback Api Test Case  
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]
22:35:33 22:35:33,461 [Errno 17] File exists
22:35:33 JVPP Ioamtrace Future Api Test Case
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]
22:35:33 22:35:33,688 [Errno 17] File exists
22:35:33 JVPP Snat Callback Api Test Case   
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]
22:35:33 22:35:33,960 [Errno 17] File exists
22:36:39 JVPP Snat Future Api Test Case 
  FAIL [ temp dir used by test case: /tmp/vpp-unittest-TestJVpp-hqaV42 ]

Re: [vpp-dev] 18.04 RC1 is cut, master and stable/1804 are open

[Chris Luke]

All,

I'm going to open up stable for patches now. I've tested the Ubuntu packages  
from Nexus (https://wiki.fd.io/view/VPP/Installing_VPP_binaries_from_packages) 
and they seem to install and run fine on a freshly installed VM. Packagecloud 
is still devoid of packages and LF admins are looking into why; it seems the 
push script stopped a while ago independently of RC1 branch.

Summary:

  *   VPP master branch is open for all patches slated for VPP 18.07 (and 
beyond) as normal.
  *   VPP branch stable/1804 is open for bug fix patches only.
Per the standard process, all bug fixes to the stable branch should follow the 
best practices:

  *   All bug fixes must be double-committed to the release throttle as well as 
to the master branch
 *   Commit first to the release throttle branch, then "git cherry-pick" 
into master
 *   Manual merges may be required, depending on the degree of divergence 
between throttle and master
  *   All bug fixes need to have a Jira ticket
 *   Please put Jira IDs into the commit messages.
 *   Please use the same Jira ID for both the stable branch and master.
Thanks go to Dave Barach for providing entertainment, Dave Wallace for his 
excellent rework of the guide, Vanessa and Ed Warnicke for their infrastructure 
support.

Cheers,
Chris

From: vpp-dev@lists.fd.io  On Behalf Of Chris Luke
Sent: Wednesday, April 4, 2018 22:40
To: vpp-dev@lists.fd.io
Subject: [vpp-dev] 18.04 RC1 is cut, master is open again

All,

The stable/1804 branch was created earlier; master is now open again for 
general patches.

I'm not ready to accept fixes on the new stable branch. This is pending 
determining why packagecloud hasn't received any packages yet and giving the 
artifacts a test, but should have news on this tomorrow.

Chris.

Re: [vpp-dev] Sad News from Intel - Venky Venkatesan

[Bob Monkman]

Shocking and very sad...Venky's contributions, and his persona,  as you 
outlined are significant and will be remembered.

Robert (Bob) Monkman
Director, Networking Software Strategy & Ecosystem Programs
Arm
150 Rose Orchard Way
San Jose, Ca 95134
M: +1.510.676.5490
Skype: robert.monkman

From: govboard  On Behalf Of St Leger, Jim
Sent: Thursday, April 5, 2018 11:37 AM
To: techbo...@dpdk.org; Jill Lovato ; Trishan de 
Lanerolle (tdelanero...@linuxfoundation.org) 
; govbo...@dpdk.org; Ed Warnicke 
; t...@fd.io; d...@dpdk.org; annou...@dpdk.org; 
vpp-dev@lists.fd.io
Cc: Gadiyar, Rajesh ; Mukherjee, Udayan 

Subject: [dpdk-govboard] Sad News from Intel - Venky Venkatesan

Several of you have already heard the very sad news of the passing of our dear 
friend and colleague Venky.  He was "Mr. DPDK" to many, a nod to his invention 
and creation of DPDK about ten years ago (before it was called DPDK.)  Of 
course his footprints across the industry and literally across the globe are 
everywhere. If you know what ATCA is, well, Venky had his hands and inventions 
deeply into the creation of that PICMG spec and many of the first revision 
products. He touched on and gave guidance to projects spanning Linux/netdev, 
DPDK, Intel QuickAssist Technology, BSD stacks, OVS, OPNFV, FD.io, 
all-things-virtualization (KVM, Xen, VMware, Hyper-V, etc.), ETSI, IETF, 
containers, and so many other arenas that my brain can't remember at this dark 
moment.

If you knew him and engaged him, especially on deep technical discussions, you 
knew you were talking to someone with the rare combination of skills that went 
incredibly deep both on the hardware, silicon side of platforms but also on the 
software, networking side of the platforms.  Rarely did I find a topic that 
Venky wasn't well versed on. And by "topic" I mean everything from football to 
photography to history to politics and many other subjects well beyond the 
technical realm our day jobs find us in. Conversations with Venky were a treat. 
Traveling with him was an adventure. Debating with him was a lesson. I will so 
miss all of him.

Below are some details on a memorial service this Sunday in Oregon and also a 
GoFundMe page. If you're in Oregon or close by please join the service. Venky 
left behind a wife, Priya, and two young girls, Adhiti and Namrata. While I'm 
sure they are overwhelmed with sadness and grief at the moment they can use our 
support. Please consider supporting the GoFundMe memorial fund for his family.

Lastly, my network extends through this distribution list.  But Venky's network 
was one hundred times broader. Please share this sad news through your own 
networks.

Thanks,
Jim

From: A message from Sandra Rivera
Sent: Thursday, April 5, 2018 10:58 AM
Subject: Follow-up: A loss for our NPG organization

All,
We have an update on the memorial service plans in celebration of Venky 
Venkatesan's life.

The service will be held on Sunday, April 8th at our Jones Farm Conference 
Center (JFCC) in Hillsboro, OR from 2-4PM, and is open to all who would like to 
join.

Venky's family will plan to attend, as well as friends and others who have 
worked closely with him over the years. Please note that this is not an 
Intel-sponsored event and therefore any travel or expenses related to attending 
need to be managed personally.

Many of you have asked about donations, and we have helped setup a GoFundMe 
account for his family which will be used to fund scholarships for his children.
https://www.gofundme.com/venky-venkatesan-memorial-fund

If you have any questions about the service, please contact Udayan Mukherjee.

Thank you all very much for your support during this difficult time.
Sandra




From: A message from Sandra Rivera
Sent: Tuesday, April 3, 2018 9:34 PM
Subject: A loss for our NPG organization

To All,
Today is a very sad day for our NPG team and Intel.  Our dear friend and 
colleague, Venky Venkatesan, passed away early morning today after a tough 
battle with cancer.

Aside from his deep contributions to the organization, Venky provided technical 
mentorship to many employees and greatly impacted our technical leadership 
pipeline.

On a personal level, Venky was very dedicated to his family and also cared 
deeply about mentoring the next generation of engineers and scientists through 
efforts like coaching robotics teams and providing guidance to many interns and 
Intel employees. His passion, dedication and commitment to this organization, 
Intel, and the external community will be greatly missed.

We will let you know as soon as more information is available for Venky's 
memorial/celebration service.
Sandra



IMPORTANT NOTICE: The contents of this email and any attachments are 
confidential and may also be privileged. If you are not the intended recipient, 
please notify the sender immediately and do not disclose the contents to any 
other person, use it for any purpose, or store or copy the information in any 
medium. Thank you.

Re: [vpp-dev] how to compile for Mellanox ConnectX-5 for VPP 18.01 and DPDK 18.02?

[Daniel Bernier]

Hi Ronald,

Try OFED install with the following flags as well

mlnxofedinstall --dpdk --upstream-libs

Cheers,

Daniel Bernier | Bell Canada

From: vpp-dev@lists.fd.io  on behalf of Marco Varlese 

Sent: Friday, April 6, 2018 2:49 AM
To: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] how to compile for Mellanox ConnectX-5 for VPP 18.01 and 
DPDK 18.02?

Hi Ronald,

I think you may need to set "vpp_dpdk_shared_lib = yes", I see that is set to
"no" in your configuration pasted below.

Can you try and see if that works for you?


Cheers,
Marco

On Fri, 2018-03-09 at 21:32 +0100, Ronald van der Pol wrote:
> I am trying to get VPP working with a Mellanox ConnectX-5 NIC. I have
> tried various configs, but I cannot get it working.
>
> This is what I have now:
>
> I am using:
> $ ofed_info -s
> MLNX_OFED_LINUX-4.3-1.0.1.0
>
> In dpdk-18.02/config/common_base:
> CONFIG_RTE_LIBRTE_MLX5_PMD=y
> CONFIG_RTE_LIBRTE_MLX5_DEBUG=n
> CONFIG_RTE_LIBRTE_MLX5_DLOPEN_DEPS=y
> CONFIG_RTE_LIBRTE_MLX5_TX_MP_CACHE=8
>
> $ make config T=x86_64-native-linuxapp-
> gcc
> $ make install T=x86_64-native-linuxapp-gcc DESTDIR=install
>
> For VPP:
> $ git clone https://gerrit.fd.io/r/vpp
>
> $ git checkout origin/stable/1801
>
> In build-data/platforms/vpp.mk:
> ---
> --
> vpp_uses_dpdk_mlx5_pmd =
> yes
> vpp_uses_external_dpdk =
> yes
> vpp_dpdk_inc_dir = /home/rvdp/src/dpdk-
> 18.02/install/include/dpdk
> vpp_dpdk_lib_dir = /home/rvdp/src/dpdk-
> 18.02/install/lib
> vpp_dpdk_shared_lib =
> no
> -
>
> $ make dpdk-install-dev
> DPDK_MLX5_PMD=y
> $ make install-
> dep
> $ make build-release
>
> This fails with:
>
>   CCLD ila_plugin.la
>   CCLD libsixrd_plugin.la
>   CCLD dpdk_plugin.la
> /usr/bin/ld: /home/rvdp/src/dpdk-18.02/install/lib/librte_acl.a(tb_mem.o):
> relocation R_X86_64_32 against `.rodata' can not be used when making a shared
> object; recompile with -fPIC
> /home/rvdp/src/dpdk-18.02/install/lib/librte_acl.a(tb_mem.o): error adding
> symbols: Bad value
> collect2: error: ld returned 1 exit status
> Makefile:1883: recipe for target 'dpdk_plugin.la' failed
>
> Can somebody tell me what the proper config setting are?
>
> Thanks,
>
> rvdp
>
>
>
--
Marco V

SUSE LINUX GmbH | GF: Felix Imendörffer, Jane Smithard, Graham Norton
HRB 21284 (AG Nürnberg) Maxfeldstr. 5, D-90409, Nürnberg



-=-=-=-=-=-=-=-=-=-=-=-
Links:

You receive all messages sent to this group.

View/Reply Online (#8822): https://lists.fd.io/g/vpp-dev/message/8822
View All Messages In Topic (3): https://lists.fd.io/g/vpp-dev/topic/14304652
Mute This Topic: https://lists.fd.io/mt/14304652/21656
New Topic: https://lists.fd.io/g/vpp-dev/post

Change Your Subscription: https://lists.fd.io/g/vpp-dev/editsub/21656
Group Home: https://lists.fd.io/g/vpp-dev
Contact Group Owner: vpp-dev+ow...@lists.fd.io
Terms of Service: https://lists.fd.io/static/tos
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub
-=-=-=-=-=-=-=-=-=-=-=-

Re: [vpp-dev] Sad News from Intel - Venky Venkatesan

[Marco Varlese]

It is a very sad and shocking news. 
Venky was a visioner, a scientist whilst being a humble and kind person. He has
been a mentor to me and it has been a true privilige to get to know him and work
with him. I am sure he'll be missed and remembered by so many people in our
industry.
May he rest in peace.
On Thu, 2018-04-05 at 18:36 +, St Leger, Jim wrote:
> Several of you have already heard the very sad news of the passing of our dear
> friend and colleague Venky.  He was “Mr. DPDK” to many, a nod to his invention
>  and creation of DPDK about ten years ago (before it was called DPDK.)  Of
> course his footprints across the industry and literally across the globe are
> everywhere. If you know what ATCA is, well, Venky had his hands and inventions
> deeply into the creation of
>  that PICMG spec and many of the first revision products. He touched on and
> gave guidance to projects spanning Linux/netdev, DPDK, Intel QuickAssist
> Technology, BSD stacks, OVS, OPNFV, FD.io, all-things-virtualization (KVM,
> Xen, VMware, Hyper-V, etc.), ETSI,
>  IETF, containers, and so many other arenas that my brain can’t remember at
> this dark moment.
>
> If you knew him and engaged him, especially on deep technical discussions, you
> knew you were talking to someone with the rare combination of skills that went
>  incredibly deep both on the hardware, silicon side of platforms but also on
> the software, networking side of the platforms.  Rarely did I find a topic
> that Venky wasn’t well versed on. And by “topic” I mean everything from
> football to photography to history
>  to politics and many other subjects well beyond the technical realm our day
> jobs find us in. Conversations with Venky were a treat. Traveling with him was
> an adventure. Debating with him was a lesson. I will so miss all of him.
>
> Below are some details on a memorial service this Sunday in Oregon and also a
> GoFundMe page. If you’re in Oregon or close by please join the service. Venky
>  left behind a wife, Priya, and two young girls, Adhiti and Namrata. While I’m
> sure they are overwhelmed with sadness and grief at the moment they can use
> our support. Please consider supporting the GoFundMe memorial fund for his
> family.
>
> Lastly, my network extends through this distribution list.  But Venky’s
> network was one hundred times broader. Please share this sad news through your
> own
>  networks. 
>
> Thanks,
> Jim
>
> 
> 
> From: A message from Sandra Rivera
> 
> 
> Sent: Thursday, April 5, 2018 10:58 AM
> 
> Subject: Follow-up: A loss for our NPG organization
> 
> 
>
> All,
> We have an update on the memorial service plans in celebration of Venky
> Venkatesan’s life.
>
> The service will be held on Sunday, April 8th at our Jones Farm Conference
> Center (JFCC) in Hillsboro, OR from 2-4PM, and is open to all
>  who would like to join.
>
> Venky’s family will plan to attend, as well as friends and others who have
> worked closely with him over the years.
> Please note that this is not an Intel-sponsored event and therefore any travel
> or expenses related to attending need to be managed personally.
>
> Many of you have asked about donations, and we have helped setup a GoFundMe
> account for his family which will be used to fund scholarships for his
>  children.
> https://www.gofundme.com/venky-venkatesan-memorial-fund
>
> If you have any questions about the service, please contact
> Udayan Mukherjee.
>
> Thank you all very much for your support during this difficult time.
> Sandra
>
> 
>
> 
>
>
> From: A message from Sandra Rivera 
> 
> Sent: Tuesday, April 3, 2018 9:34 PM
> 
> Subject: A loss for our NPG organization
>
> To All,
> Today is a very sad day for our NPG team and Intel.  Our dear friend and
> colleague, Venky Venkatesan, passed away early morning today after a tough
> battle with cancer.
>
> Aside from his deep contributions to the organization, Venky provided
> technical mentorship to many employees and greatly impacted our technical
> leadership pipeline.
> 
>
> On a personal level, Venky was very dedicated to his family and also cared
> deeply about mentoring the next generation of engineers and scientists through
> efforts like coaching robotics
>  teams and providing guidance to many interns and Intel employees. 
> His passion, dedication and commitment to this organization, Intel, and the
> external community will be greatly missed.
>
> We will let you know as soon as more information is available for Venky’s
> memorial/celebration service.
> Sandra
>
>
>
> 
> 
> 
> 
> 
> 
-- 
Marco V


SUSE LINUX GmbH | GF: Felix Imendörffer, Jane Smithard, Graham Norton
HRB 21284 (AG Nürnberg) Maxfeldstr. 5, D-90409, Nürnberg

Re: [vpp-dev] #vpp CGNAT implementation in VPP

[Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES@Cisco)]

“show nat44 deterministic mappings” probably doesn’t work because you use older 
version of the VPP (this was changed in 1804)
To delete NAT deterministic mapping use “nat44 deterministic add in 
/ out / del”
Currently you can’t alocate specific number of ports of the external address to 
the internal clients. It is possible to implenet this, patches are welcome.
NAT plugin use IPfix for logging events 
https://wiki.fd.io/view/VPP/NAT#IPFIX_templates. Deterministic NAT doesn’t log 
session since internall address is statically mapped to set of external ports 
of the address (purpose of deterministic NAT is to reduce logging 
https://tools.ietf.org/html/rfc7422).

Matus

From: Hamid Rasool <14mseesras...@seecs.edu.pk>
Sent: Friday, April 6, 2018 12:16 PM
To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) 

Cc: vpp-dev@lists.fd.io
Subject: Re: [vpp-dev] #vpp CGNAT implementation in VPP

Thanks Fabian.

I have configured these steps and it seems to work (although some variations of 
nat deterministic add command caused vpp to crash and reset configurations 
though). However, there is another command in the VPP/NAT wiki: "show nat44 
deterministic mappings" which does not seem to work.
The "show nat44" command only seem to work however:

vpp# nat44 deterministic add in 10.10.3.0/25 out 
192.168.100.64/28
vpp# show nat44
NAT plugin mode: deterministic mapping
udp timeout: 300sec
tcp-established timeout: 7440sec
tcp-transitory timeout: 240sec
icmp timeout: 60sec
1 deterministic mappings


I want to ask how can we delete a pool mapping once we have set it or even 
change it because there seems to be no options to do that. Another query is 
about how can we allocate a specific number of ports of the external address to 
the internal clients. Lets say I want to map 8 internal addresses to 1 external 
for a pool of external addresses, which makes about 8000 ports (out of 65000) 
for each internal address. Is there any way to implement.
Last question for now, where are the session logs stored for NAT for each flow 
of packet. Does VPP provide syslog stats or any flow records for nat sessions?

Thanks again!



[https://ipmcdn.avast.com/images/icons/icon-envelope-tick-round-orange-animated-no-repeat-v1.gif]

Virus-free. 
www.avast.com


On Mon, Mar 19, 2018 at 5:19 PM, Matus Fabian -X (matfabia - PANTHEON 
TECHNOLOGIES at Cisco) mailto:matfa...@cisco.com>> wrote:
Hi,

There is example of CGNAT configuration for currently supported feature set 
https://wiki.fd.io/view/VPP/NAT#Example_configuration

Basically you need do following 3 steps:
To enable CGNAT mode of NAT plugin add following to startup config: “nat { 
deterministic }”
Set inside and outside interfaces: set interface nat44 in  out 
Set pool address range for inside network range: nat44 deterministic add in 
/ out /

That is all you can currently configure.

Matus


From: vpp-dev@lists.fd.io 
mailto:vpp-dev@lists.fd.io>> On Behalf Of Hamid via 
Lists.Fd.Io
Sent: Monday, March 19, 2018 1:03 PM
To: vpp-dev@lists.fd.io
Cc: vpp-dev@lists.fd.io
Subject: [vpp-dev] #vpp CGNAT implementation in VPP

Hi,

I have a Ubuntu server machine having 32 cores and four 1 Gigabit NICs with KVM 
hypervisor. I want to test VPP performance for CGNAT in NAT444 mode while 
supporting routing protocols like BGP and IS-IS on VM topology setup. Kindly 
direct me somewhere to get me started. The usage of CGNAT with a pool of out 
address ranges and allocating port numbers is not directly explained in the NAT 
plugin Wiki page. Any info regarding how to generate packet traffic to check 
performance in terms of number of concurrent sessions handled by CGNAT on my 
hardware will also be appreciated.

I have tried the progressive VPP tutorial but some of the switching related 
exercises are not functioning as expected and there is no similar tutorial or 
guide to apply CG-NAT along with routing as a PoC software router would do. 
Integration with FRR as per FRR wiki was also outdated and could not be 
achieved on my setup.

Waiting for suggestions. Thanks!

Re: [vpp-dev] #vpp CGNAT implementation in VPP

[Hamid via Lists.Fd.Io]

Thanks Fabian.

I have configured these steps and it seems to work (although some
variations of nat deterministic add command caused vpp to crash and reset
configurations though). However, there is another command in the VPP/NAT
wiki: "show nat44 deterministic mappings" which does not seem to work.
The "show nat44" command only seem to work however:

vpp# nat44 deterministic add in 10.10.3.0/25 out 192.168.100.64/28
vpp# show nat44
NAT plugin mode: deterministic mapping
udp timeout: 300sec
tcp-established timeout: 7440sec
tcp-transitory timeout: 240sec
icmp timeout: 60sec
1 deterministic mappings


I want to ask how can we delete a pool mapping once we have set it or even
change it because there seems to be no options to do that. Another query is
about how can we allocate a specific number of ports of the external
address to the internal clients. Lets say I want to map 8 internal
addresses to 1 external for a pool of external addresses, which makes about
8000 ports (out of 65000) for each internal address. Is there any way to
implement.
Last question for now, where are the session logs stored for NAT for each
flow of packet. Does VPP provide syslog stats or any flow records for nat
sessions?

Thanks again!




Virus-free.
www.avast.com

<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

On Mon, Mar 19, 2018 at 5:19 PM, Matus Fabian -X (matfabia - PANTHEON
TECHNOLOGIES at Cisco)  wrote:

> Hi,
>
>
>
> There is example of CGNAT configuration for currently supported feature
> set https://wiki.fd.io/view/VPP/NAT#Example_configuration
>
>
>
> Basically you need do following 3 steps:
>
> To enable CGNAT mode of NAT plugin add following to startup config: “nat {
> deterministic }”
>
> Set inside and outside interfaces: set interface nat44 in  out
> 
>
> Set pool address range for inside network range: nat44 deterministic add
> in / out /
>
>
>
> That is all you can currently configure.
>
>
>
> Matus
>
>
>
>
>
> *From:* vpp-dev@lists.fd.io  *On Behalf Of *Hamid
> via Lists.Fd.Io
> *Sent:* Monday, March 19, 2018 1:03 PM
> *To:* vpp-dev@lists.fd.io
> *Cc:* vpp-dev@lists.fd.io
> *Subject:* [vpp-dev] #vpp CGNAT implementation in VPP
>
>
>
> Hi,
>
> I have a Ubuntu server machine having 32 cores and four 1 Gigabit NICs
> with KVM hypervisor. I want to test VPP performance for CGNAT in NAT444
> mode while supporting routing protocols like BGP and IS-IS on VM topology
> setup. Kindly direct me somewhere to get me started. The usage of CGNAT
> with a pool of out address ranges and allocating port numbers is not
> directly explained in the NAT plugin Wiki page. Any info regarding how to
> generate packet traffic to check performance in terms of number of
> concurrent sessions handled by CGNAT on my hardware will also be
> appreciated.
>
> I have tried the progressive VPP tutorial but some of the switching
> related exercises are not functioning as expected and there is no similar
> tutorial or guide to apply CG-NAT along with routing as a PoC software
> router would do. Integration with FRR as per FRR wiki was also outdated and
> could not be achieved on my setup.
>
> Waiting for suggestions. Thanks!
>
> 
>

Re: [vpp-dev] Multiple Static Mappings

[Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES@Cisco)]

Fixed https://gerrit.fd.io/r/#/c/11560/

DBGvpp# set int ip address GigabitEthernet0/8/0 172.16.2.1/24
DBGvpp# show nat44 static mappings
NAT44 static mappings:
DBGvpp# nat44 add static mapping tcp local 10.0.0.3 1234 external 
GigabitEthernet0/8/0 2345
nat44 add static mapping: External addres must be allocated.
DBGvpp# show nat44 static mappings
NAT44 static mappings:
DBGvpp#

DBGvpp# nat44 add static mapping tcp local 10.0.0.3 1234 external 
GigabitEthernet0/8/0 2345
DBGvpp# show nat44 static mappings
NAT44 static mappings:
tcp local 10.0.0.3:1234 external GigabitEthernet0/8/0:2345 vrf -1
DBGvpp# set int ip address GigabitEthernet0/8/0 172.16.2.1/24
DBGvpp# show nat44 static mappings
NAT44 static mappings:
tcp local 10.0.0.3:1234 external GigabitEthernet0/8/0:2345 vrf -1
DBGvpp# nat44 add static mapping tcp local 10.0.0.3 1234 external 
GigabitEthernet0/8/0 2345 del
DBGvpp# show nat44 static mappings
NAT44 static mappings:
DBGvpp#

Matus

From: vpp-dev@lists.fd.io  On Behalf Of Matus Fabian -X 
(matfabia - PANTHEON TECHNOLOGIES at Cisco)
Sent: Friday, April 6, 2018 7:25 AM
To: vpp-dev@lists.fd.io
Cc: vpp-dev 
Subject: Re: [vpp-dev] Multiple Static Mappings

Static mapping using interface address is stored in resolution vector (without 
external IP address) and when resolved it is stored as standard static mapping 
with external address (hash table record, static mapping pool entry). Static 
mappings with port from resolution vector are resolved in callback for NAT pool 
address from interface or immediately when interface has assigned address in 
snat_add_static_mapping.  I guess in your case interface already has assigned 
address and when snat_add_static_mapping try to reserve port for external 
address it is not in NAT pool and operation failed, in this case record from 
static mapping resolution vector should be deleted. Delete operation in 
snat_add_static_mapping doesn’t find resolved static mapping (try do this 
because interface has address). I will fix this issue. In case when interface 
obtain address after static mapping was added it won’t be resolved.

Matus

From: vpp-dev@lists.fd.io 
mailto:vpp-dev@lists.fd.io>> On Behalf Of Jon Loeliger
Sent: Thursday, April 5, 2018 6:13 PM
To: vpp-dev@lists.fd.io
Cc: vpp-dev mailto:vpp-dev@lists.fd.io>>
Subject: Re: [vpp-dev] Multiple Static Mappings

On Wed, Apr 4, 2018 at 11:24 PM, Matus Fabian -X (matfabia - PANTHEON 
TECHNOLOGIES@Cisco) mailto:matfa...@cisco.com>> wrote:
When using static mapping with port number external address/interface must be 
added to NAT pool otherwise static mapping won’t be resolved when interface 
obtain IP address. Run first “nat44 add interface address 
TenGigabitEthernet6/0/0” in your case.

Matus,

Sure, I can do that.  But my point is:  Why did it both "work" and "not work"?
It _does_ add the mapping, and then it _does_ return an error.  My user 
interface
is very confused by this!

If part of the mapping request is not fulfilled (not an interface IP address 
available),
it should fail and NOT add the mapping.

Alternatively, if it is able to fulfill the mapping but just delayed, it should
return a success code.

Thanks,
jdl


Matus

From: Jon Loeliger mailto:j...@netgate.com>>
Sent: Wednesday, April 4, 2018 5:41 PM
To: Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES at Cisco) 
mailto:matfa...@cisco.com>>
Cc: vpp-dev mailto:vpp-dev@lists.fd.io>>
Subject: Re: [vpp-dev] Multiple Static Mappings

On Wed, Apr 4, 2018 at 5:34 AM, Matus Fabian -X (matfabia - PANTHEON 
TECHNOLOGIES@Cisco) mailto:matfa...@cisco.com>> wrote:
Fixed https://gerrit.fd.io/r/#/c/11505/

Matus
Matus,

Thanks for the quick turn-around on the bug fix!

While the original problem (one local address with multiple externals) seems
to have been fixed, there is still some lingering problem here.  It may simply
be an issue with the return codes:


vpp# nat44 add static mapping udp local 10.10.10.100 90 external 
TenGigabitEthernet6/0/0 
nat44 add static mapping: External addres must be allocated.
vpp# show nat44 static mapping
NAT44 static mappings:
udp local 10.10.10.100:90 external 
TenGigabitEthernet6/0/0: vrf -1

vpp# nat44 add static mapping udp local 10.10.10.100 90 external 
TenGigabitEthernet6/0/0  del
nat44 add static mapping: Mapping not exist.
vpp# show nat44 static mapping
NAT44 static mappings:
vpp#
It appears to properly add and delete the mappings, but the return
code indicates that the operations have failed.

Thanks,
jdl._,