LayerscapeのトピックRe: DPDK IPsec-GW Transport mode Issue

DPDK IPsec-GW Transport mode Issue

sheikfaaruk — Wed, 29 Mar 2023 06:02:32 GMT

I am working with LS1046ARDB Evaluation Board to develop a network based application. I have started my project with Flex-builder(flexbuild_lsdk2108), Flex-installer(version: 1.13.2108) and Codewarrior IDE.

I have download the images from https://lsdk.github.io/components.html
boot_LS -> wget https://www.nxp.com/lgfiles/sdk/lsdk2108/boot_LS_arm64_lts_5.10.tgz
firmware image -> wget https://www.nxp.com/lgfiles/sdk/lsdk2108/firmware_ls1046ardb_sdboot.img
Rootfs -> wget https://www.nxp.com/lgfiles/sdk/lsdk2108/rootfs_lsdk2108_ubuntu_main_arm64.tgz

I have followed the steps in this URL -> https://doc.dpdk.org/guides/sample_app_ug/ipsec_secgw.html and tested dpdk-ipsec-secgw

setup:
PC1 <--> NXP-1-P0 <--> IPSEC[ENC/DEC] <--> NXP-1-P1 <--> NXP-2-P1 <--> IPSEC[ENC/DEC] <--> NXP-2-P0 <--> PC2

command which i run it on NXP-1 board [LS1046ARDB]
user@localhost:~$ sudo dpdk-ipsec-secgw -c 0x3 -n 2 -- -p 0x3 -P -u 0x2 --config="(0,0,0),(1,0,1)" -f ep0_gcm.cfg --mtu 3600 -j 5000

command which i run it on NXP-2 board [LS1046ARDB]
user@localhost:~$ sudo dpdk-ipsec-secgw -c 0x3 -n 2 -- -p 0x3 -P -u 0x2 --config="(0,0,0),(1,0,1)" -f ep1_gcm.cfg --mtu 3600 -j 5000

Output:
Tunnel mode:
Ping is working
SSH connection is working
SFTP also working

Transport mode:
Ping is working
But SSH and SFTP is not working

I attached Configuration file for Transport/Tunnel mode and wireshare log

My question is for Transport mode any other parse arguments which i have to enable or what to do?

Re: DPDK IPsec-GW Transport mode Issue

yipingwang — Mon, 03 Apr 2023 09:11:40 GMT

I just confirmed with the AE team.

DPDK IPsec-GW Transport mode is not supported in LSDK 21.08.

Re: DPDK IPsec-GW Transport mode Issue

sheikfaaruk — Tue, 04 Apr 2023 09:17:01 GMT

Thank you for your reply.
In which version i can able to achieve full working DPDK IPsec-GW Transport mode ?
@yipingwang

Re: DPDK IPsec-GW Transport mode Issue

yipingwang — Thu, 06 Apr 2023 09:38:07 GMT

I just confirmed with DPDK development team.

We never officially supported Transport mode. As tunnel mode is mostly used in most usecase.

Hardware is capable of supporting the transport mode and in the past we have few PoCs to support transport mode. So it is doable, but currently we are not planning to work on it.

Why do you need Transport Mode?

Re: DPDK IPsec-GW Transport mode Issue

sheikfaaruk — Fri, 07 Apr 2023 07:43:16 GMT

In our requirement we need deveIop IPsec-GW with Tunnel and Transport mode in LS1046ARDB Evaluation Board
while testing Tunnel Mode with default code : SSH / SFTP / ICMP is working
but Transport Mode : ICMP only working . SSH and SFTP is not working
@yipingwang

Re: DPDK IPsec-GW Transport mode Issue

yipingwang — Tue, 11 Apr 2023 03:00:18 GMT

You many consider paid service from NXP if the feature is not supported or tested in our official release.