Re: ipsec on dpdk

[Thomas Monjalon <thomas@monjalon.net>]

Hello,

Adding Cc some experts.

About the IPsec support, we are writing a document, it is in progress.


28/07/2024 14:51, Yaron Illouz:
> Hi
> 
> I am interested to do ipsec encoding and decoding in my dpdk application
> From my readings, i understand ipsec can be done one time in the nic (inline ipsec) or with multiple calls (rte_cryptodev_enqueue_burst, rte_cryptodev_dequeue_burst....)
> 
> 
>   1.  If ipsec is done by nic I only need to call rte_ipsec_pkt_process(...) without other functions?
> 
> I use  rte_eth_rx_burst to read from nic.
> 
>   1.  Where do I see list of nic that support nic inline ipsec? I believe not all dpdk nic support it.
>   2.  How much does it impact performance ? is there a table of performance per nic?
>   3.  My application is multi process, I can see in documentation :
> 
> “Currently, the security library does not support the case of multi-process. It will be updated in the future releases.” From https://doc.dpdk.org/guides/prog_guide/rte_security.html
> 
> So ipsec also is not supported for multi process application?
> 
> Even if done inline by the nic?
> 
> And what about non inline ipsec for multi process applications?
> 
> 
> 
>   1.  Is ip sec also supported in multi queue with rte flow in the inline ipsec ?
>