Does DPDK support IPSEC with Ikev2 and storongswan on DPAA2 platform?

[jackho]

Hi,

As I know, LS1046 platform has ASK SDK(as below link) to combine DPDK and strongswan to support complete Ikev2 feature

https://www.nxp.com/support/support/nxp-engineering-services/gateway-ask/layerscape-1046a-processor-...

May I know on DPAA2 platform (LX2160 or LX2080) also has the same solutoin?

Thank you.

Jack Ho

[SebastianG]

Hi @jackho,

In the following link you will find information related to StrongSwan and Ikev2 on the LX2160

https://www.nxp.com/webapp/Download?colCode=LX2160ASFSIBPB

Due to is not available an ASK for LX2160 instead of that you can use the ASF (Application Specific Fastpath)

Regards,

Sebastian

[jackho]

Hi @SebastianG,

Thank you for your detail information.

Does this solution also work with DPDK? it seems that mentions this in this document.

Regards,

Jack Ho

[SebastianG]

Hi @jackho,

Yes, this solution work with DPDK

Regards,

Sebastian

[jackho]

HI @SebastianG 

Sorry, I saw it mentions about DPDK.

It seems a good solution.

Also, I saw that NXP maintains VPP package, It seems the Network protocol layer is VPP(supports IKEv2) and Network I/O is DPDK, Do you think this may also be a solution?

Do you  

Thanks

Jack Ho

[SebastianG]

Hi @jackho,

Yes is a good solution due to the fact that the VPP supports IKEv2

Regards,

Sebastian

[IanHailey]

Hi Jackho, I am also trying to get StrongSwan to work with DPDK but on the LS1046A. It is not obvious if a special StongSwan plugin is needed for this. I could not find mention of StrongSwan in the ASK SDK docs only than it supports IKEv2. Note I am not using the ASK rather the LayerScape SDK. If I find out anything further I will note it here.

[hemantagrawal]

Check out https://github.com/NXP/dpdk/blob/19.11-qoriq/nxp/README_IPSEC_IKE