dpdk-ipsec-secgw 【dpdk20.11】

最新推荐文章于 2024-09-02 14:58:28 发布

kuaileXG

最新推荐文章于 2024-09-02 14:58:28 发布

阅读量677

点赞数 7

文章标签：前端服务器 javascript

本文链接：https://blog.youkuaiyun.com/zhangyikuaile/article/details/135171043

版权

本文详细描述了如何在DPDK环境中配置IPsecSecGW，涉及vdev、加密算法（如AES-128-GCM）、SPIPv4和SA路由规则，以及网络接口的配置情况。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

sudo ./dpdk-ipsec-secgw -l 0,1 -n 2 --socket-mem 0,1024 -a d8:00.0 -a d8:00.1 --vdev "crypto_aesni_mb" --vdev "crypto_null" -- -p 0xf -P -u 0x1 --config="(0,0,0),(1,0,1)" -f test.cfg

#SP IPv4 rules
sp ipv4 out esp protect 1005 pri 1 dst 192.168.105.0/24 sport 0:65535 dport 0:65535
sp ipv4 in esp protect 5 pri 1 dst 192.168.105.0/24 sport 0:65535 dport 0:65535
#SA rules
sa out 1005 aead_algo aes-128-gcm aead_key 2b:7e:15:16:28:ae:d2:a6:ab:f7:15:88:09:cf:4f:3d:de:ad:be:ef \
mode ipv4-tunnel src 172.16.1.5 dst 172.16.2.5 \
port_id 1 \
type no-offload \
sa in 5 aead_algo aes-128-gcm aead_key 2b:7e:15:16:28:ae:d2:a6:ab:f7:15:88:09:cf:4f:3d:de:ad:be:ef \
mode ipv4-tunnel src 172.16.1.5 dst 172.16.2.5 \
port_id 1 \
type no-offload \
#Routing rules
rt ipv4 dst 172.16.2.5/32 port 1
rt ipv4 dst 192.168.105.10/32 port 0

enp216s16: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500

inet 192.168.1.35 netmask 255.255.255.0 broadcast 192.168.1.255

ether 8e:83:3d:dd:0c:e4 txqueuelen 1000 (Ethernet)

RX packets 11812 bytes 740018 (740.0 KB)

RX errors 0 dropped 0 overruns 0 frame 0

TX packets 55 bytes 7357 (7.3 KB)

TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

enp216s16f2: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500

inet 192.168.1.36 netmask 255.255.255.0 broadcast 192.168.1.255

inet6 fe80::97e9:fbe2:d9b3:cef0 prefixlen 64 scopeid 0x20<link>

ether 66:10:1f:f0:87:94 txqueuelen 1000 (Ethernet)

RX packets 11869 bytes 744482 (744.4 KB)