Re: Enabling Talitos kills all IPsec traffic

2008-11-12 Thread Barry G
>>> # grep talitos /proc/interrupts >>> 24: 0 IPIC Level talitos >>> >>> What could cause this? >>> Doh! After playing around for a few days, I figured it out: >From the DTS File: [EMAIL PROTECTED] { ... interrupts = <0x11 0x8>; ... }; Turns out SEC is Interrupt ID 11, which is

Re: Enabling Talitos kills all IPsec traffic

2008-10-30 Thread Barry G
> Are you using ikev1 or ikev2 with strongswan ? > I am trying IKEv2 right now (charon). I will try it when I get back to my main computer with IKEv1. >> # grep talitos /proc/interrupts >> 24: 0 IPIC Level talitos >> >> What could cause this? >> > > My feeble attempt to use ike

Re: Enabling Talitos kills all IPsec traffic

2008-10-30 Thread Barry G
> I am cloning cryptodev-2.6 right now and will report on what it does. I cloned cryptdev-2.6 and have it running with talitos enabled on my devices. I still have no ESP traffic, and dmesg shows no errors. Something I did find that looks suspicious is talitos doesn't appear to be firing interrupt

Re: Enabling Talitos kills all IPsec traffic

2008-10-30 Thread Barry G
> Selecting talitos also selects CRYPTO_AUTHENC. Can you try sending > traffic with CRYPTO_DEV_TALITOS unset and CRYPTO_AUTHENC set if you > haven't already? Certainly. I compiled a kernel with CRYPTO_AUTHENC set and CRYPTO_DEV_TALITOS unset. This kernel works fine. Both encrypted and unencryp

Re: Enabling Talitos kills all IPsec traffic

2008-10-29 Thread Barry G
>> CONFIG_CRYPTO_DEV_TALITOS set to y, strongswan still successfully negotiates >> an IPsec SA, but no traffic flows. > > does no traffic flow at all or is it all getting dropped? Unencrypted traffic still flows fine. Sniffing traffic on the encrypted link, I see the ISAKMP SA init, but no ESP tr

Enabling Talitos kills all IPsec traffic

2008-10-23 Thread Barry G
Hello, I am working on setting up an IPsec network with two PowerQuicc 8349E devices. I am using Strongswan for key negotiation. I have a test connection between two devices running the 2.6.27.3 kernel. Everything works fine with CONFIG_CRYPTO_DEV_TALITOS unset. Strongswan configures the XFRM t

Re: Debugging Talitos

2008-07-22 Thread Barry G
Hello, I have tracked down a problem with the talitos driver and the way it interacts with the device tree on the 8349. In the platform specific drivers (/arch/powerpc/platforms/83xx/ mpc834x_itx.c in our case), we setup the bus as .compatible with "fsl,pq2pro-localbus". This causes the of_platf

Debugging Talitos

2008-07-21 Thread Barry G
Hello, I am working on getting HW acceleration working via the talitos driver for the 8347E. We are running 2.6.25.4 with the realtime patchset and ubifs. I have a testbed setup of machines like: A<->B<->C<->D I am running a talitos aware kernel on B and C. (I cloned linux-2.6 and copied talito

Hardware Acceleration on Freescale MPC8349

2008-05-20 Thread Barry G
Hello, I am trying to get HW accelerated IPsec connections working on the SEC 2.4 engine in the MPC8349. I am hoping to use StrongSwan which uses the native XFRM kernel components. Unfortunately it looks like the only working option available to me is the OCF stuff (using the Talitos driver) whi