[vpp-dev] Threading issue in IKEv2 implementation

2018-07-13 Thread Foucher Berenger
Hi, I am evaluating the robustness of IKEv2 implementation in VPP. I try to simultaneously establish a large number of SA between a VPP initiator and a VPP responder, and it turns out that a thread error occurs on the responder before I can reach a few hundred established SA. This issue occurs

[vpp-dev] Diffie Hellman shared secret calculation fails in IKEv2

2018-07-13 Thread Foucher Berenger
Hi, I am testing IKEv2 implementation in VPP, and I noticed that a problem occurs sometimes when establishing a new IKEv2 association. About 2% of the time on a thousand of IKE exchanges, an assert fails (ASSERT (r == t->key_len) in ikev2_crypto.c:503). After investigating a little, it seems

[vpp-dev] UDP echo server does not work properly with IPsec enabled

2018-07-13 Thread Foucher Berenger
Hi, I recently tried to use the UDP echo server that is included in VPP. It seems to work fine when used by itself, but when I tried to use it on an IPsec interface (and my configuration looks good because ICMP is working with IPSec), an “unknown ip protocol” error occurs when the packet is