LS1046A development board DPAA

[bijan]

Hello,

We are working with a Layerscape FRWY-LS1046A development board, using a Yocto build, and SDK version 2.0-1703.

Currently, we have IPSec set up and working but are seeing poor performance. We are investigating using DPAA and have seen some promising examples with ipsec-secgw in DPDK.

Are there any specific tools that allow for secure tunnels closer to wire speed and that support packet fragmentation? Is ipsec-secgw a path we should investigate?

Thank you.

[yipingwang · Accepted solution]

ipsec-secgw doesn't have fragmentation feature.

It can reach the line speed for 1442 large packets.

[arun_ayachith]

In the latest DPDK versions 22+ I see, an option 

--reassemble NUM

Is it valid or not? 
I see the code also, present for the same. It uses, librte_ipsec does ip fragmentation and reassembly.

we see SEC error 0x20001b1a being received at times on [Tx or Rx path]. So when we try to run SSH from end-2-end it fails.

Normal ping passes.

even pings with higher packet -size like 1800/1900 also pass.

we are stuck with this problem over SSH/SCP not working. 

Any direction would be of great help to us in proceeding in the project.

Thanks, Arun Ayachith

[bijan]

Thank you.