IMX8MP CAAM IPSEC error

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

IMX8MP CAAM IPSEC error

577 Views
kickit
Contributor I

Hi,when I test ipec(strongwan) with caam,some error occur。

Environment:

  • 2 board with ap IMX8MP 、ksz9886(attach fec)、caam
  • ipsec tunnel ip :192.167.0.50 , 192.167.0.60
  • Subnet ip:192.168.9.1 , 192.168.6.1
  • Client/Server ip(pc connect to subnet):192.168.9.100 ,192.168.6.100
  • Kernel version:5.4.70
  • Tools:iperf3、ping、tftp

 

Test 1:

2 board ping each other,ping 192.168.6.1 -I 192.168.9.1,report  “Cannot allocate memory”

kickit_0-1693186305906.png

Test 2:

1、Client ping Server,no errors report,packet captured ok

2、Iperf,tcp connected ok,but no data flow,dump packet,found esp header invalid,capture files in attachment。

kickit_1-1693186880285.png

3、tftp,report timeout,same as iperf test

 

Add printk and skb_dump in kernel code,before go into function crypto_aead_encrypt(net/ipv4/esp4.c/esp_output_tail),esp header is valid,but when dump skb in esp_output_done,esp header is invalid

 

Test3:

Disable caam(unset CONFIG_CRYPTO_HW),redo test1、test2 ,everything is ok,packet captured ok too

0 Kudos
Reply
1 Reply

530 Views
Harvey021
NXP TechSupport
NXP TechSupport

Hi @kickit 

The issue looks like the memory low after network tool running for a while. You might need to have a double check the application that you just applied.

not sure how it related to CAAM.

My suggestion for this issue to have a try for prosupport. 

Professional Engineering Services | NXP Semiconductors

Professional Support for Processors and Microcontrollers | NXP Semiconductors

 

Best regards

Harvey

0 Kudos
Reply