Peter Mikus
Engineer - Software
Cisco Systems Limited
From: Nicolau, Radu <radu.nico...@intel.com>
Sent: Tuesday, September 25, 2018 8:38 PM
To: Peter Mikus -X (pmikus - PANTHEON TECHNOLOGIES at Cisco) <pmi...@cisco.com>
Cc: Kinsella, Ray <ray.kinse...@intel.com>
Subject: RE: CSIT IPsec AES-GCM 128 tests failing
Hi Peter,
I'm traveling this week so I won't be able to have a look, but, can you help
with some more info?
- Is it happening consistently?
Yes
- What is the output of show crypto device mapping [verbose]
$ sudo vppctl show int
Name Idx State MTU (L3/IP4/IP6/MPLS)
Counter Count
FortyGigabitEthernet88/0/0 1 up 9200/0/0/0
FortyGigabitEthernet88/0/1 2 up 9200/0/0/0 rx packets
173678340
rx bytes
10420700400
drops
173678340
ip4
173678340
rx-miss
737
ipsec0 3 up 0/0/0/0 tx-error
173678340
local0 0 down 0/0/0/0
$ sudo vppctl show err
Count Node Reason
167158808 ipsec0-output interface is down
It is not clear to me as why ipsec0 is up but error says interface down.
$ sudo vppctl show crypto
show: unknown input `crypto'
$ sudo vppctl show ipsec
tunnel interfaces
ipsec0 seq
seq 0 seq-hi 0 esn 0 anti-replay 0 udp-encap 0
local-spi 10000 local-ip 172.168.1.1
local-crypto aes-gcm-128 70394d61596b657635793046705443744c45786c
local-integrity none
last-seq 0 last-seq-hi 0 esn 0 anti-replay 0 window
0000000000000000000000000000000000000000000000000000000000000000
remote-spi 20000 remote-ip 172.168.1.2
remote-crypto aes-gcm-128 70394d61596b657635793046705443744c45786c
remote-integrity none
- What is the vpp version/commit id causing the issue?
Currently using vpp v18.10-rc0~465-gb7020d6~b5194 but I did not bisect, For
sure it is broken for several weeks now.
Regards,
Radu
From: Peter Mikus -X (pmikus - PANTHEON TECHNOLOGIES at Cisco)
[mailto:pmi...@cisco.com]
Sent: Tuesday, September 25, 2018 3:32 PM
To: vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>; Nicolau, Radu
<radu.nico...@intel.com<mailto:radu.nico...@intel.com>>
Cc: csit-...@lists.fd.io<mailto:csit-...@lists.fd.io>
Subject: CSIT IPsec AES-GCM 128 tests failing
Hello devs,
We are observing IPSec failing tests in CSIT-perf, specially and only
combination with aes-gcm (both interface AND tunnel mode, Integ Alg AES GCM
128).
Note: Integ Alg SHA1 96, is working.
Can you please help decrypt the error message below?
Thank you.
VAT error message (on both DUTs)
-----------------
sw_interface_set_flags error: Unspecified Error
- Note: This error is happening when trying to get interface UP.
DUT1 config
-----------
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
hw_interface_set_mtu sw_if_index 2 mtu 9200
hw_interface_set_mtu sw_if_index 1 mtu 9200
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 192.168.10.1/24
sw_interface_add_del_address sw_if_index 1 172.168.1.1/24
ip_neighbor_add_del sw_if_index 2 dst 192.168.10.2 mac 68:05:ca:35:79:1c
ip_neighbor_add_del sw_if_index 1 dst 172.168.1.2 mac 68:05:ca:35:76:b1
ip_add_del_route 10.0.0.0/8 via 192.168.10.2 sw_if_index 2 resolve-attempts 10
count 1
ipsec_tunnel_if_add_del local_spi 10000 remote_spi 20000 crypto_alg aes-gcm-128
local_crypto_key 4e4d444178336b4958744a374365356235643545 remote_crypto_key
4e4d444178336b4958744a374365356235643545 local_ip 172.168.1.1 remote_ip
172.168.1.2
ip_add_del_route 20.0.0.0/32 via 172.168.1.2 ipsec0
exec set interface unnumbered ipsec0 use FortyGigabitEthernet88/0/0
sw_interface_set_flags ipsec0 admin-up
DUT2 config
-----------
sw_interface_set_flags sw_if_index 2 admin-up link-up
sw_interface_set_flags sw_if_index 1 admin-up link-up
sw_interface_dump
hw_interface_set_mtu sw_if_index 2 mtu 9200
hw_interface_set_mtu sw_if_index 1 mtu 9200
sw_interface_dump
sw_interface_add_del_address sw_if_index 2 172.168.1.2/24
sw_interface_add_del_address sw_if_index 1 192.168.20.1/24
ip_neighbor_add_del sw_if_index 1 dst 192.168.20.2 mac 68:05:ca:35:79:19
ip_neighbor_add_del sw_if_index 2 dst 172.168.1.1 mac 68:05:ca:37:25:18
ip_add_del_route 20.0.0.0/8 via 192.168.20.2 sw_if_index 1 resolve-attempts 10
count 1
ipsec_tunnel_if_add_del local_spi 20000 remote_spi 10000 crypto_alg aes-gcm-128
local_crypto_key 4e4d444178336b4958744a374365356235643545 remote_crypto_key
4e4d444178336b4958744a374365356235643545 local_ip 172.168.1.2 remote_ip
172.168.1.1
ip_add_del_route 10.0.0.0/32 via 172.168.1.1 ipsec0
exec set interface unnumbered ipsec0 use FortyGigabitEthernet88/0/1
sw_interface_set_flags ipsec0 admin-up
1969/12/31 16:00:00:086 warn dpdk EAL init args: -c 180000 -n 4
--huge-dir /run/vpp/hugepages --file-prefi
x vpp -w 0000:88:00.1 -w 0000:88:00.0 -w 0000:86:01.0 --master-lcore 19
--socket-mem 1024,1024
1969/12/31 16:00:00:967 notice dpdk EAL: Detected 36 lcore(s)
1969/12/31 16:00:00:967 notice dpdk EAL: Detected 2 NUMA nodes
1969/12/31 16:00:00:967 notice dpdk EAL: Multi-process socket
/var/run/dpdk/vpp/mp_socket
1969/12/31 16:00:00:967 notice dpdk EAL: No free hugepages reported
in hugepages-1048576kB
1969/12/31 16:00:00:967 notice dpdk EAL: Probing VFIO support...
1969/12/31 16:00:00:967 notice dpdk EAL: VFIO support initialized
1969/12/31 16:00:00:967 notice dpdk EAL: PCI device 0000:86:01.0 on
NUMA socket 1
1969/12/31 16:00:00:967 notice dpdk EAL: probe driver: 8086:443 qat
1969/12/31 16:00:00:967 notice dpdk qat_comp_dev_create():
Compression PMD not supported on QAT dh895xcc
1969/12/31 16:00:00:967 notice dpdk EAL: PCI device 0000:88:00.0 on
NUMA socket 1
1969/12/31 16:00:00:967 notice dpdk EAL: probe driver: 8086:1583
net_i40e
1969/12/31 16:00:00:967 notice dpdk EAL: PCI device 0000:88:00.1 on
NUMA socket 1
1969/12/31 16:00:00:967 notice dpdk EAL: probe driver: 8086:1583
net_i40e
1969/12/31 16:00:00:967 notice dpdk Invalid port_id=2
Peter Mikus
Engineer - Software
Cisco Systems Limited
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#10671): https://lists.fd.io/g/vpp-dev/message/10671
Mute This Topic: https://lists.fd.io/mt/26218774/21656
Group Owner: vpp-dev+ow...@lists.fd.io
Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
