Re: [E] COMMERCIAL BULK: [vpp-dev] TLS app stuck after burst of traffic #vpp-hoststack

[Florin Coras]

Hi Kevin, 

That’s a really old version of vpp. TLS has seen several improvements since 
then in areas including scheduling after incomplete writes. If you get a chance 
to test vpp latest or a more recent release, do let us know if the issue still 
persists. 

Regards,
Florin

> On Mar 6, 2023, at 5:42 PM, Kevin Yan via lists.fd.io 
>  wrote:
> 
> Hi @Olivia Dunham ,
>Recently I met the exact same issue,  TLS TX svm fifo gets 
> full after burst of traffic and it will never resume, meanwhile, TCP TX svm 
> fifo is empty at that time I’m using VPP20.09,  I believe there is some issue 
> in TLS layer,
> so did you fix the issue later? If yes, can you share the solution.
>  
> BRs,
> Kevin
>  
> From: vpp-dev@lists.fd.io   > On Behalf Of Olivia Dunham
> Sent: Tuesday, September 14, 2021 8:58 PM
> To: vpp-dev@lists.fd.io 
> Subject: [E] COMMERCIAL BULK: [vpp-dev] TLS app stuck after burst of traffic 
> #vpp-hoststack
>  
> Email is from a Free Mail Service (Gmail/Yahoo/Hotmail….) : Beware of 
> Phishing Scams, Report questionable emails tos...@mavenir.com 
> 
> During sudden burst of traffic, the TCP fifo gets full. When this happens the 
> openssl TLS app de-schedules the transport. But once the TCP data is sent 
> out, the TLS is not resuming. VPP ends up in a state where TCP fifo is empty, 
> but the TLS fifo is full and no more Tx happens on TLS fifo.
> 
> VPP version: 21.01
> 
> We came across this commit - session tls: deq notifications for custom tx 
> 
> Not sure what is the issue fixed by this commit, but It doesn't seem to fix 
> the above mentioned issue.
> This e-mail message may contain confidential or proprietary information of 
> Mavenir Systems, Inc. or its affiliates and is intended solely for the use of 
> the intended recipient(s). If you are not the intended recipient of this 
> message, you are hereby notified that any review, use or distribution of this 
> information is absolutely prohibited and we request that you delete all 
> copies in your control and contact us by e-mailing to secur...@mavenir.com 
> . This message contains the views of its author 
> and may not necessarily reflect the views of Mavenir Systems, Inc. or its 
> affiliates, who employ systems to monitor email messages, but make no 
> representation that such messages are authorized, secure, uncompromised, or 
> free from computer viruses, malware, or other defects. Thank You
> 
> 


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22672): https://lists.fd.io/g/vpp-dev/message/22672
Mute This Topic: https://lists.fd.io/mt/97440914/21656
Mute #vpp-hoststack:https://lists.fd.io/g/vpp-dev/mutehashtag/vpp-hoststack
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631435203/xyzzy 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [E] COMMERCIAL BULK: [vpp-dev] TLS app stuck after burst of traffic #vpp-hoststack

[Kevin Yan via lists.fd.io]

Hi @Olivia Dunham,
   Recently I met the exact same issue,  TLS TX svm fifo gets full 
after burst of traffic and it will never resume, meanwhile, TCP TX svm fifo is 
empty at that time I’m using VPP20.09,  I believe there is some issue in TLS 
layer,
so did you fix the issue later? If yes, can you share the solution.

BRs,
Kevin

From: vpp-dev@lists.fd.io  On Behalf Of Olivia Dunham
Sent: Tuesday, September 14, 2021 8:58 PM
To: vpp-dev@lists.fd.io
Subject: [E] COMMERCIAL BULK: [vpp-dev] TLS app stuck after burst of traffic 
#vpp-hoststack


Email is from a Free Mail Service (Gmail/Yahoo/Hotmail….) : Beware of Phishing 
Scams, Report questionable emails to s...@mavenir.com
During sudden burst of traffic, the TCP fifo gets full. When this happens the 
openssl TLS app de-schedules the transport. But once the TCP data is sent out, 
the TLS is not resuming. VPP ends up in a state where TCP fifo is empty, but 
the TLS fifo is full and no more Tx happens on TLS fifo.

VPP version: 21.01

We came across this commit - session tls: deq notifications for custom 
tx
Not sure what is the issue fixed by this commit, but It doesn't seem to fix the 
above mentioned issue.

This e-mail message may contain confidential or proprietary information of 
Mavenir Systems, Inc. or its affiliates and is intended solely for the use of 
the intended recipient(s). If you are not the intended recipient of this 
message, you are hereby notified that any review, use or distribution of this 
information is absolutely prohibited and we request that you delete all copies 
in your control and contact us by e-mailing to secur...@mavenir.com. This 
message contains the views of its author and may not necessarily reflect the 
views of Mavenir Systems, Inc. or its affiliates, who employ systems to monitor 
email messages, but make no representation that such messages are authorized, 
secure, uncompromised, or free from computer viruses, malware, or other 
defects. Thank You

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22671): https://lists.fd.io/g/vpp-dev/message/22671
Mute This Topic: https://lists.fd.io/mt/97440914/21656
Mute #vpp-hoststack:https://lists.fd.io/g/vpp-dev/mutehashtag/vpp-hoststack
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631435203/xyzzy 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

Re: [vpp-dev] vpp+nginx #vpp-hoststack

[Florin Coras]

nginx.conf
Description: Binary data

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22670): https://lists.fd.io/g/vpp-dev/message/22670
Mute This Topic: https://lists.fd.io/mt/96623842/21656
Mute #vpp-hoststack:https://lists.fd.io/g/vpp-dev/mutehashtag/vpp-hoststack
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631435203/xyzzy 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[vpp-dev] RFC: VPP Build Artifact Retention Policy

[Dave Wallace]

Folks,

As discussed in the last 2 VPP Community meetings, I have created a 
draft build artifact policy for the VPP project [0].


Please review and provide comments to this email thread.

Thanks,
-daw-

[0] https://wiki.fd.io/view/VPP/BuildArtifactRetentionPolicy

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22669): https://lists.fd.io/g/vpp-dev/message/22669
Mute This Topic: https://lists.fd.io/mt/97437987/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631435203/xyzzy 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-

[vpp-dev] why does nat44 use handoff in mutiple worker？

[Rain]

I tested using nat44 handoff under multi-workers, the forwarding
performance is not as good as single worker.
for example:
GE1 bound in thread 1
GE2 bound in thread 2
testcenter ->GE1->do_handoff--GE2--->testcenter

Is it a problem with my settings?

Why can't sent envent to per worker to change the configuration like acl

-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#22668): https://lists.fd.io/g/vpp-dev/message/22668
Mute This Topic: https://lists.fd.io/mt/97426151/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631435203/xyzzy 
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-