LayerscapeのトピックRe: LS1046A development board DPAA

LS1046A development board DPAA

bijan — Fri, 09 Sep 2022 23:10:58 GMT

Hello,

We are working with a Layerscape FRWY-LS1046A development board, using a Yocto build, and SDK version 2.0-1703.

Currently, we have IPSec set up and working but are seeing poor performance. We are investigating using DPAA and have seen some promising examples with ipsec-secgw in DPDK.

Are there any specific tools that allow for secure tunnels closer to wire speed and that support packet fragmentation? Is ipsec-secgw a path we should investigate?

Thank you.

Re: LS1046A development board DPAA

yipingwang — Fri, 16 Sep 2022 07:36:34 GMT

ipsec-secgw doesn't have fragmentation feature.

It can reach the line speed for 1442 large packets.

Re: LS1046A development board DPAA

bijan — Thu, 22 Sep 2022 18:35:29 GMT

Thank you.

Re: LS1046A development board DPAA

arun_ayachith — Tue, 21 Mar 2023 03:59:44 GMT

In the latest DPDK versions 22+ I see, an option

--reassemble NUM

Is it valid or not?
I see the code also, present for the same. It uses, librte_ipsec does ip fragmentation and reassembly.

we see SEC error 0x20001b1a being received at times on [Tx or Rx path]. So when we try to run SSH from end-2-end it fails.

Normal ping passes.

even pings with higher packet -size like 1800/1900 also pass.

we are stuck with this problem over SSH/SCP not working.

Any direction would be of great help to us in proceeding in the project.

Thanks, Arun Ayachith