summaryrefslogtreecommitdiffstats
path: root/VNFs
AgeCommit message (Collapse)AuthorFilesLines
2017-12-18Adding Security gateway testingProvoost18-367/+1225
Using now .test files describing the test to be executed. Also desribed in the README file how to deal with SRIOV ports. Change-Id: I3eb1551d7f205fef3fa1914bc6959c2126d63425 Signed-off-by: Provoost <luc.provoost@intel.com>
2017-12-08Merge "Fix command parser"Deepak S1-13/+12
2017-12-08Merge "Fix checks done when changing generator pkt_size"Deepak S1-10/+25
2017-12-06Fix qos statisticsXavier Simonart1-1/+1
Packets dropped by QoS (because queues were full) were erroneously shown as idle cycles. There aee now shown as discarded packets. Change-Id: I01a619de621a3dfbfe11cabef257f9dec311e208 Signed-off-by: Xavier Simonart <xavier.simonart@intel.com>
2017-12-06Fix checks done when changing generator pkt_sizeXavier Simonart1-10/+25
Different checks were done when setting the generator pkt_size. In case of wrong pkt_size (e.g. too big) an error was printed but the pkt_size was still set causing a potential corruption. In addition, in case of a packet size incompatible with some of the packet fields (e.g. latency data) PROX was panicing while this should not happen runtime for such an error. Change-Id: Ifa11475bf295aaac7b0255c1bf9b5feed8ef90c4 Signed-off-by: Xavier Simonart <xavier.simonart@intel.com>
2017-12-06Fix command parserXavier Simonart1-13/+12
Command parser could have been crashing if a wrong core/task was used in pkt_size command. For some other commands both an error and a warning were printed in case of errors. Change-Id: I6648bfca1b5bcde3c6393d49687ed84900326d49 Signed-off-by: Xavier Simonart <xavier.simonart@intel.com>
2017-11-22correct prox ipsec vnfIgor Shaula1-107/+90
reapply the latest changes (47355 and 47521) due to gerrit merge problem * fix crypto init for both encryptor and decryptor * improve performance: preallocate crypto op memory in init * finalize enabling routed ipsec traffic (proper IP/MAC addresses) * correct handling of dropped packets at encryptor * Fix receive packets with size > 1024 bytes Change-Id: I51cccc9bef0b9564ea1a3465ad28fb985eee06d1 Signed-off-by: Igor Shaula <igor.shaula@intel.com>
2017-11-21fix prox crypto buildIgor Shaula1-1/+6
Change-Id: I4ea54763871c18b1bd6cec9dbb926f18f0f5833f Signed-off-by: Igor Shaula <igor.shaula@intel.com>
2017-11-21Merge "Add support for nop mode with l3 submode"Deepak S7-23/+52
2017-11-17* fix encryption: ESP packet formatIgor Shaula1-45/+129
* fix traffic routing * enqueue packets in a bulk (improve crypto performance: TBD) * improve code clarity * fix crypto dequeuing * complete decryption path implementation * NOTE: the code works in a chain mode; crypto init to be fixed next Change-Id: I058a906f4f4f5691ebf25d2cdf5b5faded88e11d Signed-off-by: Igor Shaula <igor.shaula@intel.com>
2017-11-15Add support for nop mode with l3 submodeXavier Simonart7-23/+52
The l3 submode was not supported in nop mode, as the nop mode uses some specific nop thread (and not generic). When L3 is specified, the nop mode must use the generic thread. In addition the l3 submode is implemented differently than other submodes. It is not supported through task_init structures (i.e. each task does not have to explicitely tell that it supports l3 submode). But this prevented to run both a nop with no submode and a nop with a l3 submode. Note that nop with l3 is usually not very useful - it handles arp (requests and response) but as nop, it does not swap IP addresses. So with a real switch, the packets transmitted will be received back... and l3 mode is usually mainly usefull when using a switch. However, there is at least one nop mode where l3 submode makes sense: when the nop does not transmit. In such cases, for instace used in conjunction with a gen l3, the nop receives all packets and forward the arp requests and responses to the master for handling. Change-Id: I992121db285ba25a11cbb494092a6afc6fe55a58 Signed-off-by: Xavier Simonart <xavier.simonart@intel.com>
2017-11-13Remove unused files in udp replayDeepak S4-247/+0
Change-Id: I8cbad85c607ca5148723ed3689eaed2c4967fb1d Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-11-09Merge "Fix changing impair delay through command line"Deepak S1-1/+3
2017-11-09Fix latency commands in l3 submodeXavier Simonart2-21/+29
Change-Id: I9c46b57f98b566efc8ca3ea5966befe2a150315b Signed-off-by: Xavier Simonart <xavier.simonart@intel.com>
2017-11-08Fix changing impair delay through command lineXavier Simonart1-1/+3
Change-Id: I7797241a1d384fa184bdf4d73b81babb21f7383d Signed-off-by: Xavier Simonart <xavier.simonart@intel.com>
2017-11-07Merge "Rework handle_esp.c (proto, DPDK<17.08, cleanup)"Deepak S2-73/+34
2017-11-07Merge "lw_AFTR: IP Checksum required on generated packet."Deepak S2-0/+15
2017-11-01lw_AFTR: IP Checksum required on generated packet.DanielMartinBuckley2-0/+15
In lwAFTR (ipv6 de-encapsulate) the generated ipv4 packet requires an IP checksum, otherwise this packet is dropped in Openstack. (Openstack is much stricter than baremetal) Some fields in the header need to be initialized. Add flag in Makefile which when enabled will build to include the generate the IP checksum in the build. FLAG = GEN_DECAP_IPV6_TO_IPV4_CKSUM=y Not include in default build. Change-Id: If94e7cff64b03c66362021f05e48fb9265fc8210 Signed-off-by: Daniel Martin Buckley <daniel.m.buckley@intel.com>
2017-10-27Rework handle_esp.c (proto, DPDK<17.08, cleanup)Patrice Buriez2-73/+34
- Adjust handle functions to PROX-v035+ prototype, returning 0 when all packets have been handled. - Because cryptodev API was modified in DPDK 17.08, many changes would be necessary to support it. For the moment, just exclude handle_esp.c from PROX build when using DPDK 17.08+, which will be supported later. - Cleanup: - consistent use of PROX_PANIC to cleanly fail on errors - consistent use of OUT_DISCARD to drop unhandled packets - remove "__attribute__((unused))" when parameter is actually used - remove unused defines, fields and variables Change-Id: I10d84fa184a866b4a5f87272875612aace5dd5b1 Signed-off-by: Patrice Buriez <patrice.buriez@intel.com>
2017-10-25Merge changes from PROX-v041Patrice Buriez39-511/+1630
Change-Id: Ie6d4e7ce22c27967117a446626f5923643397812 Signed-off-by: Patrice Buriez <patrice.buriez@intel.com>
2017-10-19Makefile change and new task structures for IPSec Prox taskAlexander Komarov3-1/+6
Change-Id: I389389e5317d1a9d0d79cc1762d6f15d8287e36a Signed-off-by: Alexander Komarov <alexander.komarov@intel.com> Signed-off-by: Alexander Komarov <izard.ak@gmail.com>
2017-10-18Added IPSec/ESP performance demo building block to DPPD-PROXAlexander Komarov2-0/+621
Change-Id: I25ab50297cd7d2f80a5206ddc3c55ffad36bd8d8 Signed-off-by: Alexander Komarov <alexander.komarov@intel.com> Signed-off-by: Alexander Komarov <izard.ak@gmail.com>
2017-10-17Rest API: Fix all the bugs in the HWLB, mask issue, etcDeepak S1-3/+2
Change-Id: If7cc44f3b57a54aef510f729930e6f79bf83689e Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-10-16Fix udp replay issueDeepak S1-6/+6
Change-Id: I6b78044beb21fdf07ad70d22c81bcca6ca955e63 Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-10-16Adding app version displayDeepak S1-6/+20
Change-Id: I366d915a05f58c5653de89c1c59ebd180904e080 Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-10-12vACL: The ethernet mac address not updated correctlyAnand B Jyoti1-4/+4
JIRA: SAMPLEVNF-85 The ethernet header pointer initialization was wrong due to which the MAC address were not updated. Hence the packets were not reaching the destination. Change-Id: I90a38bba8d26d5f481c6476e6995eed92970b6e3 Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com>
2017-10-05VNFs: Fixing klocwork issue in VNFs codeAnand B Jyoti8-16/+217
JIRA: SAMPLEVNF-83 This patch fixes the klocwork reported issues Change-Id: I190d024777be1bf53cdc97feca1e5934781f3582 Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com>
2017-09-28Fix cgnapt status outputDeepak S1-0/+1
Change-Id: I37ef70ae324e258da16b7bd67baf0e939d88b3ec Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-09-28Fix the cgnapt pipeline stat issuesDeepak S1-0/+19
Change-Id: I58d4a1b6c47fa204a8af67c725b22f797ec19755 Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-09-27REST_API: rest api client implementationVishwesh M Rudramuni20-213/+1409
JIRA: SAMPLEVNF-78 This patch implements rest api's for VNF clients. This comprises of * vnf api's for common functionality * vnf api's for CGNAPT * vnf api's for VFW Change-Id: I56d22c64bf3ee5b0a2e536da8169ac7583499041 Signed-off-by: Vishwesh M Rudramuni <vishwesh.m.rudramuni@intel.com>
2017-09-27UDP_Replay: changes for gateway packet forwardingAnand B Jyoti2-0/+6
JIRA: SAMPLEVNF-70 Integrating gateway packet forwarding to UDP_Replay VNF. Change-Id: I00f2bc498563b81260c2c98275f7a73dbc2cb445 Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com>
2017-09-27vCGNAT: changes for gateway packet forwardingAnand B Jyoti5-251/+166
JIRA: SAMPLEVNF-61 Integrating gateway packet forwarding to CGNAT VNF. Change-Id: Ifd528b40134da2d12644a406b2da05a5f044aa1c Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com>
2017-09-27vACL: changes for gateway packet forwardingAnand B Jyoti6-1941/+1775
JIRA: SAMPLEVNF-60 vACL changes to support gateway packet forwarding. Change-Id: I1435254e4f18bc26bf2b37be2e3ed2df0fb29153 Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com>
2017-09-27vFW: changes for gateway packet forwardingAnand B Jyoti6-233/+296
JIRA: SAMPLEVNF-59 Changes to support gateway packet forwarding to vFW. Change-Id: Ie9164b092f6864cfcdb02e7b325c4e8796a7e422 Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com>
2017-09-25Remove default section in the createrapidDeepak S1-1/+0
Change-Id: Id9c22f92955b64242971ff768a64132451c8350e Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-09-19Splitting the script in 2 parts: createrapid.py and runrapid.pyLuc Provoost11-528/+1098
The split of the scripts is documented in the README file. The VM also runs now devbind.sh with the proper MAC address to bind the dataplane interface with the DPDK poll mode driver. Change-Id: I3e7a6235379dc80530934376c7799ac3396b5325 Luc Provoost <luc.provoost@intel.com> Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-09-12Enabling Prox to be compatible with Titanium CloudDeepak S1-0/+1
Change-Id: I65e8b2d1cea2a1edfa738671e460b6a0170d3363 Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-09-11Support 5 tuple load balancing for IP addresses other than 0.0.0.XDanielMartinBuckley1-5/+5
Currently packets generated with IP addresses 10.1.1.x when handled by 5 Tuple Load Balancer are discarded/dropped. These addresses are outhside the range of the hash algorithm. Change-Id: Idf2cea0ff299a3fa75554f0d103e13391eae02fa Signed-off-by: Daniel Martin Buckley <daniel.m.buckley@intel.com>
2017-08-21Update vACL config filesDeepak S8-56/+90
JIRA: SAMPLEVNF-76 Change-Id: Iab363cc6cd5310e25c15758f02ca68751e81a49c Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-08-20Updated configuration files for cgnapt VNFsDeepak S6-0/+310
JIRA: SAMPLEVNF-75 Change-Id: Iac091ca0f12570d47d36366055ad89737b386c36 Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-08-20Update vCGNAPT configuration fileDeepak S34-2392/+0
JIRA: SAMPLEVNF-75 Change-Id: Icb8e46ee4566cc637b299913b1d0a7d5baafd3ac Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-08-14Enable tpkts_processed counter in aclDeepak S1-0/+12
JIRA: SAMPLEVNF-72 Change-Id: Iadb3173c76306a48860313177f1b86e8410c7df3 Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-08-14Moving printf under cgnapt_dbg_printDeepak S2-14/+23
JIRA: SAMPLEVNF-71 Change-Id: Ibcd70008e1657eaa0b2f95aac319483490c290aa Signed-off-by: Deepak S <deepak.s@linux.intel.com>
2017-08-02vFW: Updating config and script files of vFWAnand B Jyoti26-1708/+474
JIRA: SAMPLEVNF-68 Updating the vFW Config and scripts with following: 1. Remove arp/nd route tbl from cfg files 2. Adding routeadd command to script file as route_tbl is removed from cfg files 3. Remove ports_mac_list as the l2l3 stack will initialize 4. Merge IPv4 and IPv6 cfg/tc files to reduce the number files 5. Remove 1 WT cfg files to reduce too many cfg files. Change-Id: If16ee740cd464f2cf55b8d11f590471aba9c7f30 Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com>
2017-07-21VNFs: Correcting the fdir mode for SWLB and HWLBAnand B Jyoti3-13/+10
JIRA: SAMPLEVNF-64 fdir conf mode was incorrectly set to RTE_FDIR_MODE_PERFECT in SWLB and also RTE_FDIR_MODE_NONE in HWLB. This patches corrects them to enable the Vector PMD. Change-Id: I2097479c948ad482dbb868e315e4a6dfc8355ef2 Signed-off-by: Anand B Jyoti <anand.b.jyoti@intel.com>
2017-07-20Merge "[l2l3 stack] implements new nd state machine & nd buffering"Deepak S4-1524/+494
2017-07-20Merge "[l2l3 stack] implements new arp state machine & arp buffering"Deepak S6-716/+588
2017-07-18[l2l3 stack] implements new nd state machine & nd bufferingVishwesh M Rudramuni4-1524/+494
JIRA: SAMPLEVNF-32 This patch implements ~New nd state machine implementing new states like INCOMPLETE, COMPLETE, PROBE, STALE. ~Implementing nd buffering, when nd is unresolved. ~Integratig the new changes with vCGNAPT ~Integrating the new changes with vACL ~Integrating the new changes with vFW. ~Adding locks to synchronize against multiple VNF threads Change-Id: Iaee4f4599ca3016ebb50ee2d9133fd8c39c5cd04 Signed-off-by: Vishwesh M Rudramuni <vishwesh.m.rudramuni@intel.com>
2017-07-17Merge "[UDP_Replay] fixing of compiler warning"Deepak S1-3/+1
2017-07-17[UDP_Replay] fixing of compiler warningVishwesh M Rudramuni1-3/+1
removes the nb_lcores as its no longer used. Change-Id: I13020585afb6d1e0758f1efc6578740dd3502d72 Signed-off-by: Vishwesh M Rudramuni <vishwesh.m.rudramuni@intel.com>