Thanks, I'll wait for your fix. I think using NAT with VPP will be mo' better than iptables/nftables.
Best regards, Yurii ________________________________ От: Filip Varga -X (fivarga - PANTHEON TECH SRO at Cisco) <fiva...@cisco.com> Отправлено: 27 ноября 2019 г. 12:39 Кому: format_...@outlook.com <format_...@outlook.com>; vpp-dev@lists.fd.io <vpp-dev@lists.fd.io> Копия: Ole Troan (otroan) <otr...@cisco.com> Тема: RE: [vpp-dev] NAT stops processing for big amount of users Hi, The issue is related to a bug that affects fast session creation on NAT startup. Basically if network eats all NAT sessions translation_buckets (defaults to 1024) * 10 nat session recyclation stops working. I am about to finish path that should solve this issue. https://jira.fd.io/browse/VPP-1795 Best regards, Filip [https://www.cisco.com/c/dam/m/en_us/signaturetool/images/logo/Cisco_Logo_no_TM_Cisco_Blue-RGB_43px.png] Filip Varga Engineer - Software fiva...@cisco.com<mailto:fiva...@cisco.com> Tel: Cisco Systems, Inc. Slovakia cisco.com [http://www.cisco.com/assets/swa/img/thinkbeforeyouprint.gif] Think before you print. This email may contain confidential and privileged material for the sole use of the intended recipient. Any review, use, distribution or disclosure by others is strictly prohibited. If you are not the intended recipient (or authorized to receive for the recipient), please contact the sender by reply email and delete all copies of this message. Please click here<http://www.cisco.com/c/en/us/about/legal/terms-sale-software-license-agreement/company-registration-information.html> for Company Registration Information. From: Ole Troan <otr...@cisco.com> Sent: Tuesday, November 26, 2019 9:42 AM To: Filip Varga -X (fivarga - PANTHEON TECH SRO at Cisco) <fiva...@cisco.com> Subject: Fwd: [vpp-dev] NAT stops processing for big amount of users Hi Filip, Mind answering this one? Cheers, Ole Begin forwarded message: From: Юрий Иванов <format_...@outlook.com<mailto:format_...@outlook.com>> Subject: [vpp-dev] NAT stops processing for big amount of users Date: 26 November 2019 at 09:17:52 CET To: "vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>" <vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>> Hi I'm try to use VPP NAT feature. For several users it works fine but when I try to NAT more (about 5 000 users and more) it simply stops processing about several seconds. Strange thing than such load is processed with iptables without problems. VPP Process is on and default log file shown nothing. When I remove load from VPP server and restart VPP service it starts working again for very small amount of users (about 10 users). How can I somehow troubleshoot this issue i.e. enabling debug config? My setup use default vpp.conf parameters because it looks reasonable and NAT config build with the help of official wiki. -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#14692): https://lists.fd.io/g/vpp-dev/message/14692 Mute This Topic: https://lists.fd.io/mt/61956101/675193 Group Owner: vpp-dev+ow...@lists.fd.io<mailto:vpp-dev+ow...@lists.fd.io> Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [otr...@employees.org<mailto:otr...@employees.org>] -=-=-=-=-=-=-=-=-=-=-=-
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#14715): https://lists.fd.io/g/vpp-dev/message/14715 Mute This Topic: https://lists.fd.io/mt/61956101/21656 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
