topic Re: Does DPDK support IPSEC with Ikev2 and storongswan on DPAA2 platform? in Layerscape

Does DPDK support IPSEC with Ikev2 and storongswan on DPAA2 platform?

jackho — Thu, 07 Sep 2023 15:28:32 GMT

Hi,

As I know, LS1046 platform has ASK SDK(as below link) to combine DPDK and strongswan to support complete Ikev2 feature

https://www.nxp.com/support/support/nxp-engineering-services/gateway-ask/layerscape-1046a-processor-broadband-home-router-application-solutions-kit:QORIQ-LS1046A-BHR-ASK

May I know on DPAA2 platform (LX2160 or LX2080) also has the same solutoin?

Thank you.

Jack Ho

Re: Does DPDK support IPSEC with Ikev2 and storongswan on DPAA2 platform?

IanHailey — Fri, 08 Sep 2023 10:42:02 GMT

Hi Jackho, I am also trying to get StrongSwan to work with DPDK but on the LS1046A. It is not obvious if a special StongSwan plugin is needed for this. I could not find mention of StrongSwan in the ASK SDK docs only than it supports IKEv2. Note I am not using the ASK rather the LayerScape SDK. If I find out anything further I will note it here.

Re: Does DPDK support IPSEC with Ikev2 and storongswan on DPAA2 platform?

SebastianG — Fri, 08 Sep 2023 16:07:33 GMT

Hi @jackho,

In the following link you will find information related to StrongSwan and Ikev2 on the LX2160

https://www.nxp.com/webapp/Download?colCode=LX2160ASFSIBPB

Due to is not available an ASK for LX2160 instead of that you can use the ASF (Application Specific Fastpath)

Regards,

Sebastian

Re: Does DPDK support IPSEC with Ikev2 and storongswan on DPAA2 platform?

jackho — Mon, 11 Sep 2023 01:25:00 GMT

Hi @SebastianG,

Thank you for your detail information.

Does this solution also work with DPDK? it seems that mentions this in this document.

Regards,

Jack Ho

Re: Does DPDK support IPSEC with Ikev2 and storongswan on DPAA2 platform?

jackho — Mon, 11 Sep 2023 01:44:46 GMT

HI @SebastianG

Sorry, I saw it mentions about DPDK.

It seems a good solution.

Also, I saw that NXP maintains VPP package, It seems the Network protocol layer is VPP(supports IKEv2) and Network I/O is DPDK, Do you think this may also be a solution?

Do you

Thanks

Jack Ho

Re: Does DPDK support IPSEC with Ikev2 and storongswan on DPAA2 platform?

SebastianG — Tue, 12 Sep 2023 17:22:48 GMT

Hi @jackho,

Yes, this solution work with DPDK

Regards,

Sebastian

Re: Does DPDK support IPSEC with Ikev2 and storongswan on DPAA2 platform?

SebastianG — Tue, 12 Sep 2023 17:37:02 GMT

Hi @jackho,

Yes is a good solution due to the fact that the VPP supports IKEv2

Regards,

Sebastian

Re: Does DPDK support IPSEC with Ikev2 and storongswan on DPAA2 platform?

hemantagrawal — Thu, 19 Oct 2023 09:18:35 GMT

Check out https://github.com/NXP/dpdk/blob/19.11-qoriq/nxp/README_IPSEC_IKE