[vpp-dev] how to increase maximum number of sessions which are supported in ACL session hash table (default value is 1, 000, 000))

2017-09-01 Thread khers
Hi Andrew I increased the value of "ACL_FA_CONN_TABLE_DEFAULT_MAX_ENTRIES" parameter in fa_node.h, because I want to improve the performance of statefull acl when there are sessions more than 10,000,000 . After doing this change , I compiled the source code and run vpp binary, but it seems that v

[vpp-dev] Can I use VPP as a P / PE router in large MPLS networks.

2017-09-01 Thread Алексей Болдырев
I interisuet sluduyuschie: 1. Can VPP be used as a P / PE router in large MPLS networks, and what can be the limitations? 2. How many MPLS labels can be put on one MPLS package? 3. Whether it is possible to use ldpd protocol from frrouting for exchange of labels through tap-eject 4. How does the

Re: [vpp-dev] Packet loss on use of API & cmdline

2017-09-01 Thread Dave Barach (dbarach)
Dear Colin, That makes total sense... Tunnels are modelled as "magic interfaces" [especially] in the encap direction. Each tunnel has an output node, which means that the [first] FIB entry will need to add a graph arc. A bit of "show vlib graph" action will confirm that... Thanks… Dave -

Re: [vpp-dev] [EXT] Re: compiling error natively on an am64 box for fd.io_vpp

2017-09-01 Thread Burt Silverman
Eric, Have you updated your Ubuntu after the initial upgrade to 17.04? You have libc version 2.17. I imagine it should be closer to 2.24, although I am looking at the x86_64 architecture. There was a glibc bug, and we saw what looks like the same problem back in April, see *Build failure with late

Re: [vpp-dev] Packet loss on use of API & cmdline

2017-09-01 Thread Colin Tregenza Dancer via vpp-dev
I think there is something special in this case related to the fact that we're adding of a new tunnel / subnet, before we issue our 63 ip_neighbor_add_del calls, because it is only the first call ip_neighbor_add_del which updates the nodes, with all of the other just doing a rewrite. I'll mail

Re: [vpp-dev] Packet loss on use of API & cmdline

2017-09-01 Thread Dave Barach (dbarach)
Dear Colin, Of all of these, ip_neighbor_add_del seems like the one to tune right away. The API message handler itself can be marked mp-safe right away. Both the ip4 and the ip6 underlying routines are thread-aware (mumble RPC mumble). We should figure out why the FIB thinks it needs to pull t

Re: [vpp-dev] Не удаётся просматреть код

2017-09-01 Thread Damjan Marion (damarion)
Если вы отправляете электронную почту на английском, кто-то может помочь вам …. > On 1 Sep 2017, at 15:11, Алексей Болдырев > wrote: > > При попытке открыть: https://gerrit.fd.io/r/ > Пишет Working... > Потом: > Code Review - Error > Server Unavailable > 504 Gateway Time-out > > В чём причин

Re: [vpp-dev] Query for IPSec support on VPP

2017-09-01 Thread Mukesh Yadav (mukyadav)
HI Sergio, Do I have to fetch fresh clone using git clone https://gerrit.fd.io/r/vpp or take some explicit release? Which document page shall I refer, https://docs.fd.io/vpp/17.10/dpdk_crypto_ipsec_doc.html or some other Thanks Mukesh ___

[vpp-dev] Не удаётся просматреть код

2017-09-01 Thread Алексей Болдырев
При попытке открыть: https://gerrit.fd.io/r/ Пишет Working... Потом: Code Review - Error Server Unavailable 504 Gateway Time-out В чём причина? ___ vpp-dev mailing list vpp-dev@lists.fd.io https://lists.fd.io/mailman/listinfo/vpp-dev

Re: [vpp-dev] Packet loss on use of API & cmdline

2017-09-01 Thread Colin Tregenza Dancer via vpp-dev
Hi Dave, Thanks for looking at this. I get repeated vlib_node_runtime_update() calls when I use the API functions: ip_neighbor_add_del, gre_add_del_tunnel, create_loopback, sw_interface_set_l2_bridge & sw_interface_add_del_address (thought there may be others which I’m not currently calling).

Re: [vpp-dev] Packet loss on use of API & cmdline

2017-09-01 Thread Dave Barach (dbarach)
Dear Colin, Please describe the scenario which leads to vlib_node_runtime_update(). I wouldn't mind having a good long stare at the situation. I do like the parallel data structure update approach that you've described, tempered with the realization that it amounts to "collective brain surgery

Re: [vpp-dev] Packet loss on use of API & cmdline

2017-09-01 Thread Colin Tregenza Dancer via vpp-dev
Hi Ole, Thanks for the quick reply. I did think about making all the commands we use is_mp_safe, but was both concerned about the extent of the work, and the potential for introducing subtle bugs. I also didn't think it would help my key problem, which is the multi-ms commands which make mult

Re: [vpp-dev] why passive time must be greater than active timer in ipfix plugin?

2017-09-01 Thread Ole Troan
H Chu, > I found ipfix plugin declares that passive time must be greater than > active timer. At Cisco router, we configure cache active timeout or inactive > timeout for ipfix or netflow. I think that active timer in vpp compares to > active timeout in Cisco router and passive timer in v

Re: [vpp-dev] [EXT] Re: compiling error natively on an am64 box for fd.io_vpp

2017-09-01 Thread Damjan Marion
Hi Eric, We are building DPDK statically for several reasons: - to keep control on dpdk version used (i.e. on ubuntu 17.04 dpdk version packaged is 16.11.1.) - to allow us to quickly apply custom patches Are you planning to use dpdk version which includes marvell drivers[1] ? [1] https://githu

Re: [vpp-dev] Packet loss on use of API & cmdline

2017-09-01 Thread Ole Troan
Colin, Good investigation! A good first step would be to make all APIs and CLIs thread safe. When an API/CLI is thread safe, that must be flagged through the is_mp_safe flag. It is quite likely that many already are, but haven't been flagged as such. Best regards, Ole > On 31 Aug 2017, at 19:

Re: [vpp-dev] [EXT] Re: compiling error natively on an am64 box for fd.io_vpp

2017-09-01 Thread Eric Chen
External DPDK, I checked by default, DPDK built as static library. (def_xxx) So how to set in Fdio to not use shared, any easy configuration? Thanks Eric From: Sergio Gonzalez Monroy [mailto:sergio.gonzalez.mon...@intel.com] Sent: 2017年9月1日 16:19 To: Eric Chen ; Damjan Marion Cc: Dave Barach

Re: [vpp-dev] Query for IPSec support on VPP

2017-09-01 Thread Sergio Gonzalez Monroy
FYI I updated the doc, hopefully everything is correct and up to date now. https://gerrit.fd.io/r/#/c/8273/ Thanks, Sergio On 31/08/2017 10:00, Sergio Gonzalez Monroy wrote: On 31/08/2017 09:37, Mukesh Yadav (mukyadav) wrote: Thanks a lot Sergio for lot of patience and help, No problem at

Re: [vpp-dev] [EXT] Re: compiling error natively on an am64 box for fd.io_vpp

2017-09-01 Thread Sergio Gonzalez Monroy
Hi Eric, Are you building against an external DPDK or using the one built by VPP? VPP does add -fPIC to DPDK CPU_CFLAGS when it builds it from source. Thanks, Sergio On 01/09/2017 05:36, Eric Chen wrote: Hi Damjan, Following your suggestion, I upgrade my Ubuntu to Zesty (17.04), gcc version