Re: [vpp-dev] Config NAT plugin for with dynamic translations

2018-12-17 Thread Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES@Cisco) via Lists.Fd.Io
And no tx packets form the beginning? Matus From: vpp-dev@lists.fd.io On Behalf Of david.leitch@gmail.com Sent: Tuesday, December 18, 2018 8:57 AM To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Config NAT plugin for with dynamic translations yes, When ipfix disabled i have rx-miss

Re: [vpp-dev] Sanity check re: NAT for same-service mapping

2018-12-17 Thread Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES@Cisco) via Lists.Fd.Io
Hi, Endpoint-dependent NAT is not default behaviour, when you want to use endpoint-dependent NAT you need to adjust startup config https://wiki.fd.io/view/VPP/NAT#NAT44 Matus -Original Message- From: vpp-dev@lists.fd.io On Behalf Of JB Sent: Tuesday, December 18, 2018 12:02 AM To:

Re: [vpp-dev] Config NAT plugin for with dynamic translations

2018-12-17 Thread Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES@Cisco) via Lists.Fd.Io
even without ipfix enabled? Matus From: vpp-dev@lists.fd.io On Behalf Of david.leitch@gmail.com Sent: Tuesday, December 18, 2018 8:47 AM To: vpp-dev@lists.fd.io Subject: Re: [vpp-dev] Config NAT plugin for with dynamic translations if I config vpp without NAT (just routing) it works ,

Re: [vpp-dev] Build/rebuild problems (adding dpdk support)

2018-12-17 Thread Marco Varlese
Hi Brian, On Mon, 2018-12-17 at 20:19 -0800, Brian Dickson wrote: > Hi, VPP folks, > I am trying to add in support for a new card/driver. > > The info on the DPDK website says the drivers I have should work fine. > > Thus, the only issue is adding in the correct manufacturer/device IDs into the

Re: [vpp-dev] Config NAT plugin for with dynamic translations

2018-12-17 Thread david . leitch . vpp
if I config vpp without NAT (just routing) it works , but When Config for NAT I have rx-miss on all interfaces. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11647): https://lists.fd.io/g/vpp-dev/message/11647 Mute This Topic:

Re: [vpp-dev] Config NAT plugin for with dynamic translations

2018-12-17 Thread Matus Fabian -X (matfabia - PANTHEON TECHNOLOGIES@Cisco) via Lists.Fd.Io
Hi, NAT plugin configuration look good for me. Matus From: vpp-dev@lists.fd.io On Behalf Of david.leitch@gmail.com Sent: Tuesday, December 18, 2018 8:27 AM To: vpp-dev@lists.fd.io Subject: [vpp-dev] Config NAT plugin for with dynamic translations [Edited Message Follows] Hi, I want to

[vpp-dev] Config NAT plugin for with dynamic translations

2018-12-17 Thread david . leitch . vpp
[Edited Message Follows] Hi, I want to test VPP NAT plugin performance in NAT44 dynamic translations mode while supporting ipfix logging. (with 4 10gb ethernet interface , 40 CPU core and 40gbps throughput) based on VPP/NAT wiki page I used following configuration :   unix {   nodaemon   log

[vpp-dev] Config NAT plugin for with dynamic translations

2018-12-17 Thread david . leitch . vpp
Hi, I want to test VPP NAT plugin performance in NAT44 dynamic translations mode while supporting ipfix logging. (with 4 10gb ethernet interface , 40 CPU core and 40gbps throughput) based on VPP/NAT wiki page I used following configuration :   unix {   nodaemon   log /var/log/vpp/vpp.log  

Re: [vpp-dev] VPP Review: https://gerrit.fd.io/r/#/c/15084/:

2018-12-17 Thread Damjan Marion via Lists.Fd.Io
Dear Kingwei, I don't think VPP handoff is right solution for this problem. It can be solved in much simpler way. We can simply have simple ring by worker tthread where new packets pending encryption/decryption are enqueued. Then we can have input node which runs on all threads and polls

Re: [vpp-dev] Build/rebuild problems (adding dpdk support)

2018-12-17 Thread JB
Hey Brian, I believe it fetches it again because the file doesn't match the hash string present in one of the files inside the dpdk directory. At least that was the issue I faced building for Mellanox cards ages ago. You could also specify that it uses an external DPDK source. Sent from ny

[vpp-dev] Build/rebuild problems (adding dpdk support)

2018-12-17 Thread Brian Dickson
Hi, VPP folks, I am trying to add in support for a new card/driver. The info on the DPDK website says the drivers I have should work fine. Thus, the only issue is adding in the correct manufacturer/device IDs into the init.c file: src/plugins/dpdk/device/init.c I edit the file (one-line

Re: [vpp-dev] VPP Review: https://gerrit.fd.io/r/#/c/15084/:

2018-12-17 Thread Kingwel Xie
Hi Damjan, Yes, agree with you. Here I got a thought about handoff mechanism in vPP. If looking into the DPDK crypto scheduler, you will find out that it heavily depends on DPDK rings, for buffer delivery among CPU cores and even for the packet reordering. Therefore, something comes to my

Re: [vpp-dev] Sanity check re: NAT for same-service mapping

2018-12-17 Thread JB
Hi Ole, Absolutely, Endpoint independent mapping is the safest bet, which is why it is recommended. It is unfortunate that we cannot rely on services being IP source agnostic or that STUN will be used. Thus, even though Endpoint independent mapping can be considered non-efficient in its

Re: [vpp-dev] Sanity check re: NAT for same-service mapping

2018-12-17 Thread Ole Troan
> This might be best answered by Matus since it regards NAT, but I'll throw it > out there for the whole group. > > The endpoint-dependent feature of the NAT plugin – Endpoint address AND port > dependent I presume from the 6-tuple description of it – allows us to map the > same internal

[vpp-dev] Sanity check re: NAT for same-service mapping

2018-12-17 Thread JB
Hello group, This might be best answered by Matus since it regards NAT, but I'll throw it out there for the whole group. The endpoint-dependent feature of the NAT plugin – Endpoint address AND port dependent I presume from the 6-tuple description of it – allows us to map the same internal

Re: [vpp-dev] VPP Review: https://gerrit.fd.io/r/#/c/15084/:

2018-12-17 Thread Damjan Marion via Lists.Fd.Io
Hi Kingwei, I agree this is useful feature, that's why i believe it should be implemented as native code instead of relying on external implementation which is from our perspective sub-optimal due to dpdk dependency, time spent on buffer metadata conversion, etc.. -- Damjan > On 17 Dec

Re: [vpp-dev] VPP Review: https://gerrit.fd.io/r/#/c/15084/:

2018-12-17 Thread Kingwel Xie
Hi Avinash, I happened to look at the patch recently. To my understanding, it is valuable, cool stuff, as it allows offloading crypto to other cpu cores. Therefore, more throughput can be archieved. A question, you patched the dpdk ring to mp and mc, why not mp and sc? Hi Damjan, I guess the

Re: [vpp-dev] MAP-E/MAP-T Futures?

2018-12-17 Thread Ole Troan
Hi Jon, > Is it your intention to re-factor the changes in > https://gerrit.fd.io/r/14247 > to remove the FIB DPO and instead use an input feature? Yes, that was the plan. Of course we could keep the DPO code in there, and even make it a configuration knob which one to choose. > If so, it

Re: [vpp-dev] VPP Review: https://gerrit.fd.io/r/#/c/15084/:

2018-12-17 Thread Damjan Marion via Lists.Fd.Io
Dear Avinash, First, please use public mailing list for such requests, instead of unicasting people. Regarding your patch, I don't feel comfortable to code review it, as I'm not familiar with dpdk crypto scheduler. Personally, I believe such things should be implemented as native VPP code