Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-10-09 Thread Ananyev, Konstantin
Hi Jerin, > > > > > static inline rte_ipsec_add_tunnel_hdr(struct rte_mbuf *mbuf); > > > static inline rte_ipsec_update_sqn(struct rte_mbuf *mbuf, &seq_no); > > > ... > > > > > > For the regular use case, a fat > > > rte_ipsec_(inbound/outbound)_(prepare/process) can be provided. The > > > worker

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-10-03 Thread Jerin Jacob
, "akhil.go...@nxp.com" > , "hemant.agra...@nxp.com" , > "shreyansh.j...@nxp.com" > Subject: RE: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path > processing > > External Email > > Hi Jerin, Hi Konstantin, > > >

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-10-02 Thread Ananyev, Konstantin
Hi Jerin, > > > > > > > > > > > > > > Anyway, let's pretend we found some smart way to distribute > > > > > > > inbound packets for the same SA to multiple HW queues/CPU > > > > > cores. > > > > > > > To make ipsec processing for such case to work correctly just > > > > > > > atomicity on check/

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-10-02 Thread Ananyev, Konstantin
Hi Akhil, > > Hi Konstantin, > > On 10/1/2018 2:30 AM, Ananyev, Konstantin wrote: > > > > Hi Akhil, > > > >> Hi Konstantin, > >> > >> On 9/24/2018 4:21 PM, Ananyev, Konstantin wrote: > >>> Hi Akhil, > >>> > Hi Konstantin, > > On 9/18/2018 6:12 PM, Ananyev, Konstantin wrote: >

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-10-01 Thread Akhil Goyal
Hi Konstantin, On 10/1/2018 2:30 AM, Ananyev, Konstantin wrote: Hi Akhil, Hi Konstantin, On 9/24/2018 4:21 PM, Ananyev, Konstantin wrote: Hi Akhil, Hi Konstantin, On 9/18/2018 6:12 PM, Ananyev, Konstantin wrote: I am not saying this should be the ONLY way to do as it does not work very

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-30 Thread Ananyev, Konstantin
Hi Akhil, > > Hi Konstantin, > > On 9/24/2018 4:21 PM, Ananyev, Konstantin wrote: > > Hi Akhil, > > > >> Hi Konstantin, > >> > >> On 9/18/2018 6:12 PM, Ananyev, Konstantin wrote: > > I am not saying this should be the ONLY way to do as it does not work > > very well with non NPU/FPGA c

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-26 Thread Jerin Jacob
ayana Prasad > , "akhil.go...@nxp.com" > , "hemant.agra...@nxp.com" , > "shreyansh.j...@nxp.com" > Subject: RE: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path > processing > > External Email > > Hi Jerin, Hi Konstantin, > > > >

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-25 Thread Akhil Goyal
Hi Konstantin, On 9/24/2018 4:21 PM, Ananyev, Konstantin wrote: Hi Akhil, Hi Konstantin, On 9/18/2018 6:12 PM, Ananyev, Konstantin wrote: I am not saying this should be the ONLY way to do as it does not work very well with non NPU/FPGA class of SoC. So how about making the proposed IPSec li

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-24 Thread Ananyev, Konstantin
Hi Akhil, > > Hi Konstantin, > > On 9/18/2018 6:12 PM, Ananyev, Konstantin wrote: > >>> I am not saying this should be the ONLY way to do as it does not work > >>> very well with non NPU/FPGA class of SoC. > >>> > >>> So how about making the proposed IPSec library as plugin/driver to > >>> rte_s

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-24 Thread Ananyev, Konstantin
Hi Jerin, > > > > > > > > > > Anyway, let's pretend we found some smart way to distribute inbound > > > > > packets for the same SA to multiple HW queues/CPU > > > cores. > > > > > To make ipsec processing for such case to work correctly just > > > > > atomicity on check/update segn/replay_wind

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-20 Thread Akhil Goyal
Hi Konstantin, On 9/18/2018 6:12 PM, Ananyev, Konstantin wrote: I am not saying this should be the ONLY way to do as it does not work very well with non NPU/FPGA class of SoC. So how about making the proposed IPSec library as plugin/driver to rte_security. As I mentioned above, I don't think t

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-18 Thread Jerin Jacob
-Original Message- > Date: Mon, 17 Sep 2018 18:12:48 + > From: "Ananyev, Konstantin" > To: Jerin Jacob , "Joseph, Anoob" > > CC: "dev@dpdk.org" , "Awal, Mohammad Abdul" > , "Doherty, Declan" > , Narayana Prasa

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-18 Thread Ananyev, Konstantin
> > I am not saying this should be the ONLY way to do as it does not work > > very well with non NPU/FPGA class of SoC. > > > > So how about making the proposed IPSec library as plugin/driver to > > rte_security. > > As I mentioned above, I don't think that pushing whole IPSec data-path into >

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-17 Thread Ananyev, Konstantin
Hi Jerin, > > > > > > > > Anyway, let's pretend we found some smart way to distribute inbound > > > packets for the same SA to multiple HW queues/CPU > cores. > > > To make ipsec processing for such case to work correctly just atomicity > > > on check/update segn/replay_window is not enough. >

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-17 Thread Joseph, Anoob
Hi Konstantin, On 17-09-2018 16:06, Ananyev, Konstantin wrote: External Email Hi Anoob, Hi Konstantin, Please see inline. This RFC introduces a new library within DPDK: librte_ipsec. The aim is to provide DPDK native high performance library for IPsec data-path processing. The library is s

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-17 Thread Ananyev, Konstantin
Hi Anoob, > > Hi Konstantin, > Please see inline. > > > This RFC introduces a new library within DPDK: librte_ipsec. > The aim is to provide DPDK native high performance library for IPsec > data-path processing. > The library is supposed to utilize existing DPDK crypto-dev and > security API to

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-16 Thread Jerin Jacob
..@caviumnetworks.com)" , > Narayana Prasad > Subject: Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path > processing > User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 > Thunderbird/52.9.1 > > > > > Anyway, let's preten

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-15 Thread Joseph, Anoob
Hi Konstantin See inline. Thanks, Anoob On 12-09-2018 23:39, Ananyev, Konstantin wrote: External Email Hi Anoob, Hi Konstantin, Please see inline. This RFC introduces a new library within DPDK: librte_ipsec. The aim is to provide DPDK native high performance library for IPsec data-path

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-12 Thread Ananyev, Konstantin
Hi Anoob, > > Hi Konstantin, > Please see inline. > > > This RFC introduces a new library within DPDK: librte_ipsec. > The aim is to provide DPDK native high performance library for IPsec > data-path processing. > The library is supposed to utilize existing DPDK crypto-dev and > security API to

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-05 Thread Joseph, Anoob
Hi Konstantin, Please see inline. On 03-09-2018 23:51, Ananyev, Konstantin wrote: External Email Hi Anoob, Hi Konstantin, Few comments. Please see inline. Thanks, Anoob On 24-08-2018 22:23, Konstantin Ananyev wrote: External Email This RFC introduces a new library within DPDK: librte_

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-03 Thread Ananyev, Konstantin
Hi Anoob, > Hi Konstantin, > > Few comments. Please see inline. > > Thanks, > > Anoob > > On 24-08-2018 22:23, Konstantin Ananyev wrote: > > External Email > > > > This RFC introduces a new library within DPDK: librte_ipsec. > > The aim is to provide DPDK native high performance library for IP

Re: [dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-09-03 Thread Joseph, Anoob
Hi Konstantin, Few comments. Please see inline. Thanks, Anoob On 24-08-2018 22:23, Konstantin Ananyev wrote: External Email This RFC introduces a new library within DPDK: librte_ipsec. The aim is to provide DPDK native high performance library for IPsec data-path processing. The library is s

[dpdk-dev] [RFC] ipsec: new library for IPsec data-path processing

2018-08-24 Thread Konstantin Ananyev
This RFC introduces a new library within DPDK: librte_ipsec. The aim is to provide DPDK native high performance library for IPsec data-path processing. The library is supposed to utilize existing DPDK crypto-dev and security API to provide application with transparent IPsec processing API. The libr