aboutsummaryrefslogtreecommitdiffstats
path: root/src/plugins/dpdk/device/dpdk.h
blob: ff2bf6f9c509cd0db60597de1e40c604b7038fa8 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
/*
 * Copyright (c) 2015 Cisco and/or its affiliates.
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at:
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
#ifndef __included_dpdk_h__
#define __included_dpdk_h__

/* $$$$ We should rename always_inline -> clib_always_inline */
#undef always_inline

#define ALLOW_EXPERIMENTAL_API

#include <rte_config.h>

#include <rte_eal.h>
#include <rte_bus_pci.h>
#include <rte_bus_vmbus.h>
#include <rte_ethdev.h>
#include <rte_version.h>
#include <rte_net.h>

#include <vnet/devices/devices.h>

#if CLIB_DEBUG > 0
#define always_inline static inline
#else
#define always_inline static inline __attribute__ ((__always_inline__))
#endif

#include <vlib/pci/pci.h>
#include <vlib/vmbus/vmbus.h>
#include <vnet/flow/flow.h>

extern vnet_device_class_t dpdk_device_class;
extern vlib_node_registration_t dpdk_input_node;
extern vlib_node_registration_t admin_up_down_process_node;

#if RTE_VERSION < RTE_VERSION_NUM(20, 8, 0, 0)
#define DPDK_MLX5_PMD_NAME "net_mlx5"
#else
#define DPDK_MLX5_PMD_NAME "mlx5_pci"
#endif

#define foreach_dpdk_pmd                                                      \
  _ ("net_thunderx", THUNDERX)                                                \
  _ ("net_e1000_em", E1000EM)                                                 \
  _ ("net_e1000_igb", IGB)                                                    \
  _ ("net_e1000_igb_vf", IGBVF)                                               \
  _ ("net_ixgbe", IXGBE)                                                      \
  _ ("net_ixgbe_vf", IXGBEVF)                                                 \
  _ ("net_i40e", I40E)                                                        \
  _ ("net_i40e_vf", I40EVF)                                                   \
  _ ("net_ice", ICE)                                                          \
  _ ("net_iavf", IAVF)                                                        \
  _ ("net_igc", IGC)                                                          \
  _ ("net_virtio", VIRTIO)                                                    \
  _ ("net_enic", ENIC)                                                        \
  _ ("net_vmxnet3", VMXNET3)                                                  \
  _ ("AF_PACKET PMD", AF_PACKET)                                              \
  _ ("net_fm10k", FM10K)                                                      \
  _ ("net_cxgbe", CXGBE)                                                      \
  _ ("net_mlx4", MLX4)                                                        \
  _ (DPDK_MLX5_PMD_NAME, MLX5)                                                \
  _ ("net_dpaa2", DPAA2)                                                      \
  _ ("net_virtio_user", VIRTIO_USER)                                          \
  _ ("net_vhost", VHOST_ETHER)                                                \
  _ ("net_ena", ENA)                                                          \
  _ ("net_failsafe", FAILSAFE)                                                \
  _ ("net_liovf", LIOVF_ETHER)                                                \
  _ ("net_qede", QEDE)                                                        \
  _ ("net_netvsc", NETVSC)                                                    \
  _ ("net_bnxt", BNXT)

typedef enum
{
  VNET_DPDK_PMD_NONE,
#define _(s,f) VNET_DPDK_PMD_##f,
  foreach_dpdk_pmd
#undef _
    VNET_DPDK_PMD_UNKNOWN,	/* must be last */
} dpdk_pmd_t;

typedef enum
{
  VNET_DPDK_PORT_TYPE_ETH_1G,
  VNET_DPDK_PORT_TYPE_ETH_2_5G,
  VNET_DPDK_PORT_TYPE_ETH_5G,
  VNET_DPDK_PORT_TYPE_ETH_10G,
  VNET_DPDK_PORT_TYPE_ETH_20G,
  VNET_DPDK_PORT_TYPE_ETH_25G,
  VNET_DPDK_PORT_TYPE_ETH_40G,
  VNET_DPDK_PORT_TYPE_ETH_50G,
  VNET_DPDK_PORT_TYPE_ETH_56G,
  VNET_DPDK_PORT_TYPE_ETH_100G,
  VNET_DPDK_PORT_TYPE_ETH_SWITCH,
  VNET_DPDK_PORT_TYPE_AF_PACKET,
  VNET_DPDK_PORT_TYPE_ETH_VF,
  VNET_DPDK_PORT_TYPE_VIRTIO_USER,
  VNET_DPDK_PORT_TYPE_VHOST_ETHER,
  VNET_DPDK_PORT_TYPE_FAILSAFE,
  VNET_DPDK_PORT_TYPE_NETVSC,
  VNET_DPDK_PORT_TYPE_UNKNOWN,
} dpdk_port_type_t;

typedef uint16_t dpdk_portid_t;

#define foreach_dpdk_device_flags                                             \
  _ (0, ADMIN_UP, "admin-up")                                                 \
  _ (1, PROMISC, "promisc")                                                   \
  _ (3, PMD_INIT_FAIL, "pmd-init-fail")                                       \
  _ (4, MAYBE_MULTISEG, "maybe-multiseg")                                     \
  _ (5, HAVE_SUBIF, "subif")                                                  \
  _ (9, TX_OFFLOAD, "tx-offload")                                             \
  _ (10, INTEL_PHDR_CKSUM, "intel-phdr-cksum")                                \
  _ (11, RX_FLOW_OFFLOAD, "rx-flow-offload")                                  \
  _ (12, RX_IP4_CKSUM, "rx-ip4-cksum")                                        \
  _ (13, INT_SUPPORTED, "int-supported")                                      \
  _ (14, INT_UNMASKABLE, "int-unmaskable")

enum
{
#define _(a, b, c) DPDK_DEVICE_FLAG_##b = (1 << a),
  foreach_dpdk_device_flags
#undef _
};

typedef struct
{
  u32 flow_index;
  u32 mark;
  struct rte_flow *handle;
} dpdk_flow_entry_t;

typedef struct
{
  u32 flow_id;
  u16 next_index;
  i16 buffer_advance;
} dpdk_flow_lookup_entry_t;

typedef struct
{
  CLIB_CACHE_LINE_ALIGN_MARK (cacheline0);
  u8 buffer_pool_index;
  u32 queue_index;
  int efd;
  uword clib_file_index;
} dpdk_rx_queue_t;

typedef struct
{
  CLIB_CACHE_LINE_ALIGN_MARK (cacheline0);
  clib_spinlock_t lock;
} dpdk_tx_queue_t;

typedef union
{
  struct
  {
    u16 no_multi_seg : 1;
    u16 enable_lro : 1;
    u16 enable_tcp_udp_checksum : 1;
    u16 enable_outer_checksum_offload : 1;
    u16 no_tx_checksum_offload : 1;
    u16 n_rx_queues;
    u16 n_tx_queues;
    u16 n_rx_desc;
    u16 n_tx_desc;
  };
  u64 as_u64[3];
} dpdk_port_conf_t;

STATIC_ASSERT_SIZEOF (dpdk_port_conf_t, 24);

typedef struct
{
  CLIB_CACHE_LINE_ALIGN_MARK (cacheline0);

  dpdk_rx_queue_t *rx_queues;
  dpdk_tx_queue_t *tx_queues;

  /* Instance ID to access internal device array. */
  u32 device_index;

  u32 hw_if_index;
  u32 sw_if_index;
  u32 buffer_flags;

  /* next node index if we decide to steal the rx graph arc */
  u32 per_interface_next_index;

  u16 flags;

  /* DPDK device port number */
  dpdk_portid_t port_id;
  dpdk_pmd_t pmd:8;
  i8 cpu_socket;

    CLIB_CACHE_LINE_ALIGN_MARK (cacheline1);

  u8 *name;
  u8 *interface_name_suffix;

  /* number of sub-interfaces */
  u16 num_subifs;

  /* PMD related */
  struct rte_eth_conf port_conf;

  /* flow related */
  u32 supported_flow_actions;
  dpdk_flow_entry_t *flow_entries;	/* pool */
  dpdk_flow_lookup_entry_t *flow_lookup_entries;	/* pool */
  u32 *parked_lookup_indexes;	/* vector */
  u32 parked_loop_count;
  struct rte_flow_error last_flow_error;

  /* af_packet instance number */
  u16 af_packet_instance_num;

  struct rte_eth_link link;
  f64 time_last_link_update;

  struct rte_eth_stats stats;
  struct rte_eth_stats last_stats;
  struct rte_eth_xstat *xstats;
  f64 time_last_stats_update;
  dpdk_port_type_t port_type;

  /* mac address */
  u8 *default_mac_address;

  /* error string */
  clib_error_t *errors;
  dpdk_port_conf_t conf;
} dpdk_device_t;

#define DPDK_STATS_POLL_INTERVAL      (10.0)
#define DPDK_MIN_STATS_POLL_INTERVAL  (0.001)	/* 1msec */

#define DPDK_LINK_POLL_INTERVAL       (3.0)
#define DPDK_MIN_LINK_POLL_INTERVAL   (0.001)	/* 1msec */

#define foreach_dpdk_device_config_item                                       \
  _ (num_rx_queues)                                                           \
  _ (num_tx_queues)                                                           \
  _ (num_rx_desc)                                                             \
  _ (num_tx_desc)                                                             \
  _ (max_lro_pkt_size)                                                        \
  _ (rss_fn)

typedef enum
{
  VNET_DEV_ADDR_PCI,
  VNET_DEV_ADDR_VMBUS,
  VNET_DEV_ADDR_ANY,
} dpdk_device_addr_type_t;

typedef struct
{
  union
  {
    vlib_pci_addr_t pci_addr;
    vlib_vmbus_addr_t vmbus_addr;
  };
  dpdk_device_addr_type_t dev_addr_type;
  u8 *name;
  u8 is_blacklisted;

#define _(x) uword x;
    foreach_dpdk_device_config_item
#undef _
    clib_bitmap_t * workers;
  u8 tso;
  u8 *devargs;
  clib_bitmap_t *rss_queues;

#define DPDK_DEVICE_TSO_DEFAULT 0
#define DPDK_DEVICE_TSO_OFF 1
#define DPDK_DEVICE_TSO_ON  2
} dpdk_device_config_t;

typedef struct
{

  /* Config stuff */
  u8 **eal_init_args;
  u8 *eal_init_args_str;
  u8 *uio_driver_name;
  u8 enable_telemetry;
  u16 max_simd_bitwidth;

#define DPDK_MAX_SIMD_BITWIDTH_DEFAULT 0
#define DPDK_MAX_SIMD_BITWIDTH_256     256
#define DPDK_MAX_SIMD_BITWIDTH_512     512

  /*
   * format interface names ala xxxEthernet%d/%d/%d instead of
   * xxxEthernet%x/%x/%x.
   */
  u8 interface_name_format_decimal;

  /* per-device config */
  dpdk_device_config_t default_devconf;
  dpdk_device_config_t *dev_confs;
  uword *device_config_index_by_pci_addr;
  mhash_t device_config_index_by_vmbus_addr;

  /* devices blacklist by pci vendor_id, device_id */
  u32 *blacklist_by_pci_vendor_and_device;
  /* devices blacklist by VMBUS address */
  vlib_vmbus_addr_t *blacklist_by_vmbus_addr;

} dpdk_config_main_t;

extern dpdk_config_main_t dpdk_config_main;

#define DPDK_RX_BURST_SZ VLIB_FRAME_SIZE

typedef struct
{
  CLIB_CACHE_LINE_ALIGN_MARK (cacheline0);
  struct rte_mbuf *mbufs[DPDK_RX_BURST_SZ];
  u32 buffers[DPDK_RX_BURST_SZ];
  u16 next[DPDK_RX_BURST_SZ];
  u16 etype[DPDK_RX_BURST_SZ];
  u32 flags[DPDK_RX_BURST_SZ];
  vlib_buffer_t buffer_template;
} dpdk_per_thread_data_t;

typedef struct
{
  /* Devices */
  dpdk_device_t *devices;
  dpdk_per_thread_data_t *per_thread_data;

  /*
   * flag indicating that a posted admin up/down
   * (via post_sw_interface_set_flags) is in progress
   */
  u8 admin_up_down_in_progress;

  /* control interval of dpdk link state and stat polling */
  f64 link_state_poll_interval;
  f64 stat_poll_interval;

  dpdk_config_main_t *conf;
  dpdk_port_conf_t default_port_conf;

  /* API message ID base */
  u16 msg_id_base;

  /* logging */
  vlib_log_class_t log_default;
  vlib_log_class_t log_cryptodev;
} dpdk_main_t;

extern dpdk_main_t dpdk_main;

typedef struct
{
  u32 buffer_index;
  u16 device_index;
  u8 queue_index;
  struct rte_mbuf mb;
  u8 data[256];			/* First 256 data bytes, used for hexdump */
  /* Copy of VLIB buffer; packet data stored in pre_data. */
  vlib_buffer_t buffer;
} dpdk_tx_trace_t;

typedef struct
{
  u32 buffer_index;
  u16 device_index;
  u16 queue_index;
  struct rte_mbuf mb;
  u8 data[256];			/* First 256 data bytes, used for hexdump */
  vlib_buffer_t buffer;		/* Copy of VLIB buffer; pkt data stored in pre_data. */
} dpdk_rx_trace_t;

void dpdk_device_setup (dpdk_device_t * xd);
void dpdk_device_start (dpdk_device_t * xd);
void dpdk_device_stop (dpdk_device_t * xd);
int dpdk_port_state_callback (dpdk_portid_t port_id,
			      enum rte_eth_event_type type,
			      void *param, void *ret_param);

#define foreach_dpdk_error						\
  _(NONE, "no error")							\
  _(RX_PACKET_ERROR, "Rx packet errors")				\
  _(RX_BAD_FCS, "Rx bad fcs")						\
  _(IP_CHECKSUM_ERROR, "Rx ip checksum errors")				\
  _(RX_ALLOC_FAIL, "rx buf alloc from free list failed")		\
  _(RX_ALLOC_NO_PHYSMEM, "rx buf alloc failed no physmem")		\
  _(RX_ALLOC_DROP_PKTS, "rx packets dropped due to alloc error")

typedef enum
{
#define _(f,s) DPDK_ERROR_##f,
  foreach_dpdk_error
#undef _
    DPDK_N_ERROR,
} dpdk_error_t;

#define dpdk_log_err(...) \
  vlib_log(VLIB_LOG_LEVEL_ERR, dpdk_main.log_default, __VA_ARGS__)
#define dpdk_log_warn(...) \
  vlib_log(VLIB_LOG_LEVEL_WARNING, dpdk_main.log_default, __VA_ARGS__)
#define dpdk_log_notice(...) \
  vlib_log(VLIB_LOG_LEVEL_NOTICE, dpdk_main.log_default, __VA_ARGS__)
#define dpdk_log_info(...) \
  vlib_log(VLIB_LOG_LEVEL_INFO, dpdk_main.log_default, __VA_ARGS__)
#define dpdk_log_debug(...)                                                   \
  vlib_log (VLIB_LOG_LEVEL_DEBUG, dpdk_main.log_default, __VA_ARGS__)

void dpdk_update_link_state (dpdk_device_t * xd, f64 now);

#define foreach_dpdk_rss_hf                                                   \
  _ (0, ETH_RSS_FRAG_IPV4, "ipv4-frag")                                       \
  _ (1, ETH_RSS_NONFRAG_IPV4_TCP, "ipv4-tcp")                                 \
  _ (2, ETH_RSS_NONFRAG_IPV4_UDP, "ipv4-udp")                                 \
  _ (3, ETH_RSS_NONFRAG_IPV4_SCTP, "ipv4-sctp")                               \
  _ (4, ETH_RSS_NONFRAG_IPV4_OTHER, "ipv4-other")                             \
  _ (5, ETH_RSS_IPV4, "ipv4")                                                 \
  _ (6, ETH_RSS_IPV6_TCP_EX, "ipv6-tcp-ex")                                   \
  _ (7, ETH_RSS_IPV6_UDP_EX, "ipv6-udp-ex")                                   \
  _ (8, ETH_RSS_FRAG_IPV6, "ipv6-frag")                                       \
  _ (9, ETH_RSS_NONFRAG_IPV6_TCP, "ipv6-tcp")                                 \
  _ (10, ETH_RSS_NONFRAG_IPV6_UDP, "ipv6-udp")                                \
  _ (11, ETH_RSS_NONFRAG_IPV6_SCTP, "ipv6-sctp")                              \
  _ (12, ETH_RSS_NONFRAG_IPV6_OTHER, "ipv6-other")                            \
  _ (13, ETH_RSS_IPV6_EX, "ipv6-ex")                                          \
  _ (14, ETH_RSS_IPV6, "ipv6")                                                \
  _ (15, ETH_RSS_L2_PAYLOAD, "l2-payload")                                    \
  _ (16, ETH_RSS_PORT, "port")                                                \
  _ (17, ETH_RSS_VXLAN, "vxlan")                                              \
  _ (18, ETH_RSS_GENEVE, "geneve")                                            \
  _ (19, ETH_RSS_NVGRE, "nvgre")                                              \
  _ (20, ETH_RSS_GTPU, "gtpu")                                                \
  _ (21, ETH_RSS_ESP, "esp")                                                  \
  _ (60, ETH_RSS_L4_DST_ONLY, "l4-dst-only")                                  \
  _ (61, ETH_RSS_L4_SRC_ONLY, "l4-src-only")                                  \
  _ (62, ETH_RSS_L3_DST_ONLY, "l3-dst-only")                                  \
  _ (63, ETH_RSS_L3_SRC_ONLY, "l3-src-only")

format_function_t format_dpdk_device_name;
format_function_t format_dpdk_device;
format_function_t format_dpdk_device_errors;
format_function_t format_dpdk_tx_trace;
format_function_t format_dpdk_rx_trace;
format_function_t format_dpdk_rte_mbuf;
format_function_t format_dpdk_rx_rte_mbuf;
format_function_t format_dpdk_flow;
format_function_t format_dpdk_rss_hf_name;
format_function_t format_dpdk_rx_offload_caps;
format_function_t format_dpdk_tx_offload_caps;
vnet_flow_dev_ops_function_t dpdk_flow_ops_fn;

clib_error_t *unformat_rss_fn (unformat_input_t * input, uword * rss_fn);

struct rte_pci_device *dpdk_get_pci_device (const struct rte_eth_dev_info
					    *info);
struct rte_vmbus_device *
dpdk_get_vmbus_device (const struct rte_eth_dev_info *info);
void dpdk_cli_reference (void);

#if CLI_DEBUG
int dpdk_buffer_validate_trajectory_all (u32 * uninitialized);
void dpdk_buffer_poison_trajectory_all (void);
#endif

#endif /* __included_dpdk_h__ */

/*
 * fd.io coding-style-patch-verification: ON
 *
 * Local Variables:
 * eval: (c-set-style "gnu")
 * End:
 */
="mi">12; a = &dcm->auth_algs[IPSEC_INTEG_ALG_SHA1_96]; a->type = RTE_CRYPTO_SYM_XFORM_AUTH; a->alg = RTE_CRYPTO_AUTH_SHA1_HMAC; a->key_len = 20; a->trunc_size = 12; a = &dcm->auth_algs[IPSEC_INTEG_ALG_SHA_256_96]; a->type = RTE_CRYPTO_SYM_XFORM_AUTH; a->alg = RTE_CRYPTO_AUTH_SHA256_HMAC; a->key_len = 32; a->trunc_size = 12; a = &dcm->auth_algs[IPSEC_INTEG_ALG_SHA_256_128]; a->type = RTE_CRYPTO_SYM_XFORM_AUTH; a->alg = RTE_CRYPTO_AUTH_SHA256_HMAC; a->key_len = 32; a->trunc_size = 16; a = &dcm->auth_algs[IPSEC_INTEG_ALG_SHA_384_192]; a->type = RTE_CRYPTO_SYM_XFORM_AUTH; a->alg = RTE_CRYPTO_AUTH_SHA384_HMAC; a->key_len = 48; a->trunc_size = 24; a = &dcm->auth_algs[IPSEC_INTEG_ALG_SHA_512_256]; a->type = RTE_CRYPTO_SYM_XFORM_AUTH; a->alg = RTE_CRYPTO_AUTH_SHA512_HMAC; a->key_len = 64; a->trunc_size = 32; } static u8 cipher_alg_index (const crypto_alg_t * alg) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; return (alg - dcm->cipher_algs); } static u8 auth_alg_index (const crypto_alg_t * alg) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; return (alg - dcm->auth_algs); } static crypto_alg_t * cipher_cap_to_alg (const struct rte_cryptodev_capabilities *cap, u8 key_len) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; crypto_alg_t *alg; if (cap->op != RTE_CRYPTO_OP_TYPE_SYMMETRIC) return NULL; /* *INDENT-OFF* */ vec_foreach (alg, dcm->cipher_algs) { if ((cap->sym.xform_type == RTE_CRYPTO_SYM_XFORM_CIPHER) && (alg->type == RTE_CRYPTO_SYM_XFORM_CIPHER) && (cap->sym.cipher.algo == alg->alg) && (alg->key_len == key_len)) return alg; #if ! DPDK_NO_AEAD if ((cap->sym.xform_type == RTE_CRYPTO_SYM_XFORM_AEAD) && (alg->type == RTE_CRYPTO_SYM_XFORM_AEAD) && (cap->sym.aead.algo == alg->alg) && (alg->key_len == key_len)) return alg; #endif } /* *INDENT-ON* */ return NULL; } static crypto_alg_t * auth_cap_to_alg (const struct rte_cryptodev_capabilities *cap, u8 trunc_size) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; crypto_alg_t *alg; if ((cap->op != RTE_CRYPTO_OP_TYPE_SYMMETRIC) || (cap->sym.xform_type != RTE_CRYPTO_SYM_XFORM_AUTH)) return NULL; /* *INDENT-OFF* */ vec_foreach (alg, dcm->auth_algs) { if ((cap->sym.auth.algo == alg->alg) && (alg->trunc_size == trunc_size)) return alg; } /* *INDENT-ON* */ return NULL; } #if ! DPDK_NO_AEAD static void crypto_set_aead_xform (struct rte_crypto_sym_xform *xform, ipsec_sa_t * sa, u8 is_outbound) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; crypto_alg_t *c; c = vec_elt_at_index (dcm->cipher_algs, sa->crypto_alg); ASSERT (c->type == RTE_CRYPTO_SYM_XFORM_AEAD); xform->type = RTE_CRYPTO_SYM_XFORM_AEAD; xform->aead.algo = c->alg; xform->aead.key.data = sa->crypto_key; xform->aead.key.length = c->key_len; xform->aead.iv.offset = crypto_op_get_priv_offset () + offsetof (dpdk_op_priv_t, cb); xform->aead.iv.length = 12; xform->aead.digest_length = c->trunc_size; xform->aead.aad_length = sa->use_esn ? 12 : 8; xform->next = NULL; if (is_outbound) xform->aead.op = RTE_CRYPTO_AEAD_OP_ENCRYPT; else xform->aead.op = RTE_CRYPTO_AEAD_OP_DECRYPT; } #endif static void crypto_set_cipher_xform (struct rte_crypto_sym_xform *xform, ipsec_sa_t * sa, u8 is_outbound) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; crypto_alg_t *c; c = vec_elt_at_index (dcm->cipher_algs, sa->crypto_alg); ASSERT (c->type == RTE_CRYPTO_SYM_XFORM_CIPHER); xform->type = RTE_CRYPTO_SYM_XFORM_CIPHER; xform->cipher.algo = c->alg; xform->cipher.key.data = sa->crypto_key; xform->cipher.key.length = c->key_len; #if ! DPDK_NO_AEAD xform->cipher.iv.offset = crypto_op_get_priv_offset () + offsetof (dpdk_op_priv_t, cb); xform->cipher.iv.length = c->iv_len; #endif xform->next = NULL; if (is_outbound) xform->cipher.op = RTE_CRYPTO_CIPHER_OP_ENCRYPT; else xform->cipher.op = RTE_CRYPTO_CIPHER_OP_DECRYPT; } static void crypto_set_auth_xform (struct rte_crypto_sym_xform *xform, ipsec_sa_t * sa, u8 is_outbound) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; crypto_alg_t *a; a = vec_elt_at_index (dcm->auth_algs, sa->integ_alg); ASSERT (a->type == RTE_CRYPTO_SYM_XFORM_AUTH); xform->type = RTE_CRYPTO_SYM_XFORM_AUTH; xform->auth.algo = a->alg; xform->auth.key.data = sa->integ_key; xform->auth.key.length = a->key_len; xform->auth.digest_length = a->trunc_size; #if DPDK_NO_AEAD if (sa->crypto_alg == IPSEC_CRYPTO_ALG_AES_GCM_128 || sa->crypto_alg == IPSEC_CRYPTO_ALG_AES_GCM_192 || sa->crypto_alg == IPSEC_CRYPTO_ALG_AES_GCM_256) xform->auth.algo = RTE_CRYPTO_AUTH_AES_GCM; xform->auth.add_auth_data_length = sa->use_esn ? 12 : 8; #else #if 0 xform->auth.iv.offset = sizeof (struct rte_crypto_op) + sizeof (struct rte_crypto_sym_op) + offsetof (dpdk_op_priv_t, cb); xform->auth.iv.length = a->iv_len; #endif #endif xform->next = NULL; if (is_outbound) xform->auth.op = RTE_CRYPTO_AUTH_OP_GENERATE; else xform->auth.op = RTE_CRYPTO_AUTH_OP_VERIFY; } clib_error_t * create_sym_session (struct rte_cryptodev_sym_session **session, u32 sa_idx, crypto_resource_t * res, crypto_worker_main_t * cwm, u8 is_outbound) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; ipsec_main_t *im = &ipsec_main; crypto_data_t *data; ipsec_sa_t *sa; struct rte_crypto_sym_xform cipher_xform = { 0 }; struct rte_crypto_sym_xform auth_xform = { 0 }; struct rte_crypto_sym_xform *xfs; crypto_session_key_t key = { 0 }; key.drv_id = res->drv_id; key.sa_idx = sa_idx; sa = pool_elt_at_index (im->sad, sa_idx); #if ! DPDK_NO_AEAD if ((sa->crypto_alg == IPSEC_CRYPTO_ALG_AES_GCM_128) | (sa->crypto_alg == IPSEC_CRYPTO_ALG_AES_GCM_192) | (sa->crypto_alg == IPSEC_CRYPTO_ALG_AES_GCM_256)) { crypto_set_aead_xform (&cipher_xform, sa, is_outbound); xfs = &cipher_xform; } else #endif /* ! DPDK_NO_AEAD */ { crypto_set_cipher_xform (&cipher_xform, sa, is_outbound); crypto_set_auth_xform (&auth_xform, sa, is_outbound); if (is_outbound) { cipher_xform.next = &auth_xform; xfs = &cipher_xform; } else { auth_xform.next = &cipher_xform; xfs = &auth_xform; } } data = vec_elt_at_index (dcm->data, res->numa); #if DPDK_NO_AEAD /* * DPDK_VER <= 1705: * Each worker/thread has its own session per device driver */ session[0] = rte_cryptodev_sym_session_create (res->dev_id, xfs); if (!session[0]) { data->session_drv_failed[res->drv_id] += 1; return clib_error_return (0, "failed to create session for dev %u", res->dev_id); } #else /* * DPDK_VER >= 1708: * Multiple worker/threads share the session for an SA * Single session per SA, initialized for each device driver */ session[0] = (void *) hash_get (data->session_by_sa_index, sa_idx); if (!session[0]) { session[0] = rte_cryptodev_sym_session_create (data->session_h); if (!session[0]) { data->session_h_failed += 1; return clib_error_return (0, "failed to create session header"); } hash_set (data->session_by_sa_index, sa_idx, session[0]); } struct rte_mempool **mp; mp = vec_elt_at_index (data->session_drv, res->drv_id); ASSERT (mp[0] != NULL); i32 ret = rte_cryptodev_sym_session_init (res->dev_id, session[0], xfs, mp[0]); if (ret) { data->session_drv_failed[res->drv_id] += 1; return clib_error_return (0, "failed to init session for drv %u", res->drv_id); } #endif /* DPDK_NO_AEAD */ hash_set (cwm->session_by_drv_id_and_sa_index, key.val, session[0]); return 0; } static void __attribute__ ((unused)) clear_and_free_obj (void *obj) { struct rte_mempool *mp = rte_mempool_from_obj (obj); memset (obj, 0, mp->elt_size); rte_mempool_put (mp, obj); } #if ! DPDK_NO_AEAD /* This is from rte_cryptodev_pmd.h */ static inline void * get_session_private_data (const struct rte_cryptodev_sym_session *sess, uint8_t driver_id) { return sess->sess_private_data[driver_id]; } /* This is from rte_cryptodev_pmd.h */ static inline void set_session_private_data (struct rte_cryptodev_sym_session *sess, uint8_t driver_id, void *private_data) { sess->sess_private_data[driver_id] = private_data; } #endif static clib_error_t * add_del_sa_session (u32 sa_index, u8 is_add) { ipsec_main_t *im = &ipsec_main; dpdk_crypto_main_t *dcm = &dpdk_crypto_main; crypto_worker_main_t *cwm; struct rte_cryptodev_sym_session *s; crypto_session_key_t key = { 0 }; uword *val; u32 drv_id; i32 ret; key.sa_idx = sa_index; if (is_add) { #if 1 ipsec_sa_t *sa = pool_elt_at_index (im->sad, sa_index); u32 seed; switch (sa->crypto_alg) { case IPSEC_CRYPTO_ALG_AES_GCM_128: case IPSEC_CRYPTO_ALG_AES_GCM_192: case IPSEC_CRYPTO_ALG_AES_GCM_256: clib_memcpy (&sa->salt, &sa->crypto_key[sa->crypto_key_len - 4], 4); break; default: seed = (u32) clib_cpu_time_now (); sa->salt = random_u32 (&seed); } #endif return 0; } /* XXX Wait N cycles to be sure session is not in use OR * keep refcnt at SA level per worker/thread ? */ unix_sleep (0.2); /* *INDENT-OFF* */ vec_foreach (cwm, dcm->workers_main) { for (drv_id = 0; drv_id < dcm->max_drv_id; drv_id++) { key.drv_id = drv_id; val = hash_get (cwm->session_by_drv_id_and_sa_index, key.val); s = (struct rte_cryptodev_sym_session *) val; if (!s) continue; #if DPDK_NO_AEAD ret = (rte_cryptodev_sym_session_free (s->dev_id, s) == NULL); ASSERT (ret); #endif hash_unset (cwm->session_by_drv_id_and_sa_index, key.val); } } /* *INDENT-ON* */ #if ! DPDK_NO_AEAD crypto_data_t *data; /* *INDENT-OFF* */ vec_foreach (data, dcm->data) { val = hash_get (data->session_by_sa_index, sa_index); s = (struct rte_cryptodev_sym_session *) val; if (!s) continue; hash_unset (data->session_by_sa_index, sa_index); void *drv_session; vec_foreach_index (drv_id, dcm->drv) { drv_session = get_session_private_data (s, drv_id); if (!drv_session) continue; /* * Custom clear to avoid finding a dev_id for drv_id: * ret = rte_cryptodev_sym_session_clear (dev_id, drv_session); * ASSERT (!ret); */ clear_and_free_obj (drv_session); set_session_private_data (s, drv_id, NULL); } ret = rte_cryptodev_sym_session_free(s); ASSERT (!ret); } /* *INDENT-ON* */ #endif return 0; } static clib_error_t * dpdk_ipsec_check_support (ipsec_sa_t * sa) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; if (sa->integ_alg == IPSEC_INTEG_ALG_NONE) switch (sa->crypto_alg) { case IPSEC_CRYPTO_ALG_AES_GCM_128: case IPSEC_CRYPTO_ALG_AES_GCM_192: case IPSEC_CRYPTO_ALG_AES_GCM_256: break; default: return clib_error_return (0, "unsupported integ-alg %U crypto-alg %U", format_ipsec_integ_alg, sa->integ_alg, format_ipsec_crypto_alg, sa->crypto_alg); } /* XXX do we need the NONE check? */ if (sa->crypto_alg != IPSEC_CRYPTO_ALG_NONE && dcm->cipher_algs[sa->crypto_alg].disabled) return clib_error_return (0, "disabled crypto-alg %U", format_ipsec_crypto_alg, sa->crypto_alg); /* XXX do we need the NONE check? */ if (sa->integ_alg != IPSEC_INTEG_ALG_NONE && dcm->auth_algs[sa->integ_alg].disabled) return clib_error_return (0, "disabled integ-alg %U", format_ipsec_integ_alg, sa->integ_alg); return NULL; } static void crypto_parse_capabilities (crypto_dev_t * dev, const struct rte_cryptodev_capabilities *cap, u32 n_mains) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; crypto_alg_t *alg; u8 len, inc; for (; cap->op != RTE_CRYPTO_OP_TYPE_UNDEFINED; cap++) { /* A single capability maps to multiple cipher/auth algorithms */ switch (cap->sym.xform_type) { #if ! DPDK_NO_AEAD case RTE_CRYPTO_SYM_XFORM_AEAD: #endif case RTE_CRYPTO_SYM_XFORM_CIPHER: inc = cap->sym.cipher.key_size.increment; inc = inc ? inc : 1; for (len = cap->sym.cipher.key_size.min; len <= cap->sym.cipher.key_size.max; len += inc) { alg = cipher_cap_to_alg (cap, len); if (!alg) continue; dev->cipher_support[cipher_alg_index (alg)] = 1; alg->resources += vec_len (dev->free_resources); /* At least enough resources to support one algo */ dcm->enabled |= (alg->resources >= n_mains); } break; case RTE_CRYPTO_SYM_XFORM_AUTH: inc = cap->sym.auth.digest_size.increment; inc = inc ? inc : 1; for (len = cap->sym.auth.digest_size.min; len <= cap->sym.auth.digest_size.max; len += inc) { alg = auth_cap_to_alg (cap, len); if (!alg) continue; dev->auth_support[auth_alg_index (alg)] = 1; alg->resources += vec_len (dev->free_resources); /* At least enough resources to support one algo */ dcm->enabled |= (alg->resources >= n_mains); } break; default: ; } } } #define DPDK_CRYPTO_N_QUEUE_DESC 2048 #define DPDK_CRYPTO_NB_SESS_OBJS 20000 static clib_error_t * crypto_dev_conf (u8 dev, u16 n_qp, u8 numa) { struct rte_cryptodev_config dev_conf; struct rte_cryptodev_qp_conf qp_conf; i32 ret; u16 qp; i8 *error_str; dev_conf.socket_id = numa; dev_conf.nb_queue_pairs = n_qp; #if DPDK_NO_AEAD dev_conf.session_mp.nb_objs = DPDK_CRYPTO_NB_SESS_OBJS; dev_conf.session_mp.cache_size = 512; #endif error_str = "failed to configure crypto device %u"; ret = rte_cryptodev_configure (dev, &dev_conf); if (ret < 0) return clib_error_return (0, error_str, dev); error_str = "failed to setup crypto device %u queue pair %u"; qp_conf.nb_descriptors = DPDK_CRYPTO_N_QUEUE_DESC; for (qp = 0; qp < n_qp; qp++) { #if DPDK_NO_AEAD ret = rte_cryptodev_queue_pair_setup (dev, qp, &qp_conf, numa); #else ret = rte_cryptodev_queue_pair_setup (dev, qp, &qp_conf, numa, NULL); #endif if (ret < 0) return clib_error_return (0, error_str, dev, qp); } return 0; } static void crypto_scan_devs (u32 n_mains) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; struct rte_cryptodev *cryptodev; struct rte_cryptodev_info info; crypto_dev_t *dev; crypto_resource_t *res; clib_error_t *error; u32 i; u16 max_res_idx, res_idx, j; u8 drv_id; vec_validate_init_empty (dcm->dev, rte_cryptodev_count () - 1, (crypto_dev_t) EMPTY_STRUCT); for (i = 0; i < rte_cryptodev_count (); i++) { dev = vec_elt_at_index (dcm->dev, i); cryptodev = &rte_cryptodevs[i]; rte_cryptodev_info_get (i, &info); dev->id = i; dev->name = cryptodev->data->name; dev->numa = rte_cryptodev_socket_id (i); dev->features = info.feature_flags; dev->max_qp = info.max_nb_queue_pairs; #if DPDK_NO_AEAD drv_id = cryptodev->dev_type; #else drv_id = info.driver_id; #endif if (drv_id >= vec_len (dcm->drv)) vec_validate_init_empty (dcm->drv, drv_id, (crypto_drv_t) EMPTY_STRUCT); vec_elt_at_index (dcm->drv, drv_id)->name = info.driver_name; dev->drv_id = drv_id; vec_add1 (vec_elt_at_index (dcm->drv, drv_id)->devs, i); if (!(info.feature_flags & RTE_CRYPTODEV_FF_SYM_OPERATION_CHAINING)) continue; if ((error = crypto_dev_conf (i, dev->max_qp, dev->numa))) { clib_error_report (error); continue; } max_res_idx = (dev->max_qp / 2) - 1; vec_validate (dev->free_resources, max_res_idx); res_idx = vec_len (dcm->resource); vec_validate_init_empty_aligned (dcm->resource, res_idx + max_res_idx, (crypto_resource_t) EMPTY_STRUCT, CLIB_CACHE_LINE_BYTES); for (j = 0; j <= max_res_idx; j++, res_idx++) { vec_elt (dev->free_resources, max_res_idx - j) = res_idx; res = &dcm->resource[res_idx]; res->dev_id = i; res->drv_id = drv_id; res->qp_id = j * 2; res->numa = dev->numa; res->thread_idx = (u16) ~ 0; } crypto_parse_capabilities (dev, info.capabilities, n_mains); } } void crypto_auto_placement (void) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; crypto_resource_t *res; crypto_worker_main_t *cwm; crypto_dev_t *dev; u32 thread_idx, skip_master; u16 res_idx, *idx; u8 used; u16 i; skip_master = vlib_num_workers () > 0; /* *INDENT-OFF* */ vec_foreach (dev, dcm->dev) { vec_foreach_index (thread_idx, dcm->workers_main) { if (vec_len (dev->free_resources) == 0) break; if (thread_idx < skip_master) continue; /* Check thread is not already using the device */ vec_foreach (idx, dev->used_resources) if (dcm->resource[idx[0]].thread_idx == thread_idx) continue; cwm = vec_elt_at_index (dcm->workers_main, thread_idx); used = 0; res_idx = vec_pop (dev->free_resources); /* Set device only for supported algos */ for (i = 0; i < IPSEC_CRYPTO_N_ALG; i++) if (dev->cipher_support[i] && cwm->cipher_resource_idx[i] == (u16) ~0) { dcm->cipher_algs[i].disabled--; cwm->cipher_resource_idx[i] = res_idx; used = 1; } for (i = 0; i < IPSEC_INTEG_N_ALG; i++) if (dev->auth_support[i] && cwm->auth_resource_idx[i] == (u16) ~0) { dcm->auth_algs[i].disabled--; cwm->auth_resource_idx[i] = res_idx; used = 1; } if (!used) { vec_add1 (dev->free_resources, res_idx); continue; } vec_add1 (dev->used_resources, res_idx); res = vec_elt_at_index (dcm->resource, res_idx); ASSERT (res->thread_idx == (u16) ~0); res->thread_idx = thread_idx; /* Add device to vector of polling resources */ vec_add1 (cwm->resource_idx, res_idx); } } /* *INDENT-ON* */ } static void crypto_op_init (struct rte_mempool *mempool, void *_arg __attribute__ ((unused)), void *_obj, unsigned i __attribute__ ((unused))) { struct rte_crypto_op *op = _obj; #if DPDK_NO_AEAD op->sym = (struct rte_crypto_sym_op *) (op + 1); op->sym->sess_type = RTE_CRYPTO_SYM_OP_WITH_SESSION; #else op->sess_type = RTE_CRYPTO_OP_WITH_SESSION; #endif op->type = RTE_CRYPTO_OP_TYPE_SYMMETRIC; op->status = RTE_CRYPTO_OP_STATUS_NOT_PROCESSED; op->phys_addr = rte_mem_virt2phy (_obj); op->mempool = mempool; } static clib_error_t * crypto_create_crypto_op_pool (u8 numa) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; dpdk_config_main_t *conf = &dpdk_config_main; crypto_data_t *data; u8 *pool_name; u32 pool_priv_size = sizeof (struct rte_crypto_op_pool_private); struct rte_crypto_op_pool_private *priv; clib_error_t *error = NULL; data = vec_elt_at_index (dcm->data, numa); if (data->crypto_op) return NULL; pool_name = format (0, "crypto_pool_numa%u%c", numa, 0); data->crypto_op = rte_mempool_create ((i8 *) pool_name, conf->num_mbufs, crypto_op_len (), 512, pool_priv_size, NULL, NULL, crypto_op_init, NULL, numa, 0); if (!data->crypto_op) { error = clib_error_return (0, "failed to allocate %s", pool_name); goto done; } priv = rte_mempool_get_priv (data->crypto_op); priv->priv_size = pool_priv_size; priv->type = RTE_CRYPTO_OP_TYPE_SYMMETRIC; done: vec_free (pool_name); return error; } static clib_error_t * crypto_create_session_h_pool (u8 numa) { #if DPDK_NO_AEAD return NULL; #else dpdk_crypto_main_t *dcm = &dpdk_crypto_main; crypto_data_t *data; u8 *pool_name; u32 elt_size; clib_error_t *error = NULL; data = vec_elt_at_index (dcm->data, numa); if (data->session_h) return NULL; pool_name = format (0, "session_h_pool_numa%u%c", numa, 0); elt_size = rte_cryptodev_get_header_session_size (); data->session_h = rte_mempool_create ((i8 *) pool_name, DPDK_CRYPTO_NB_SESS_OBJS, elt_size, 512, 0, NULL, NULL, NULL, NULL, numa, 0); if (!data->session_h) error = clib_error_return (0, "failed to allocate %s", pool_name); vec_free (pool_name); return error; #endif } static clib_error_t * crypto_create_session_drv_pool (crypto_dev_t * dev) { #if DPDK_NO_AEAD return NULL; #else dpdk_crypto_main_t *dcm = &dpdk_crypto_main; crypto_data_t *data; u8 *pool_name; u32 elt_size; clib_error_t *error = NULL; u8 numa = dev->numa; data = vec_elt_at_index (dcm->data, numa); vec_validate (data->session_drv, dev->drv_id); vec_validate (data->session_drv_failed, dev->drv_id); if (data->session_drv[dev->drv_id]) return NULL; pool_name = format (0, "session_drv%u_pool_numa%u%c", dev->drv_id, numa, 0); elt_size = rte_cryptodev_get_private_session_size (dev->id); data->session_drv[dev->drv_id] = rte_mempool_create ((i8 *) pool_name, DPDK_CRYPTO_NB_SESS_OBJS, elt_size, 512, 0, NULL, NULL, NULL, NULL, numa, 0); if (!data->session_drv[dev->drv_id]) error = clib_error_return (0, "failed to allocate %s", pool_name); vec_free (pool_name); return error; #endif } static clib_error_t * crypto_create_pools (void) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; clib_error_t *error = NULL; crypto_dev_t *dev; /* *INDENT-OFF* */ vec_foreach (dev, dcm->dev) { vec_validate (dcm->data, dev->numa); error = crypto_create_crypto_op_pool (dev->numa); if (error) return error; error = crypto_create_session_h_pool (dev->numa); if (error) return error; error = crypto_create_session_drv_pool (dev); if (error) return error; } /* *INDENT-ON* */ return NULL; } static void crypto_disable (void) { dpdk_crypto_main_t *dcm = &dpdk_crypto_main; crypto_data_t *data; u8 i; dcm->enabled = 0; /* *INDENT-OFF* */ vec_foreach (data, dcm->data) { rte_mempool_free (data->crypto_op); rte_mempool_free (data->session_h); vec_foreach_index (i, data->session_drv) rte_mempool_free (data->session_drv[i]); vec_free (data->session_drv); } /* *INDENT-ON* */ vec_free (dcm->data); vec_free (dcm->workers_main); vec_free (dcm->sa_session); vec_free (dcm->dev); vec_free (dcm->resource); vec_free (dcm->cipher_algs); vec_free (dcm->auth_algs); } static uword dpdk_ipsec_process (vlib_main_t * vm, vlib_node_runtime_t * rt, vlib_frame_t * f) { ipsec_main_t *im = &ipsec_main; dpdk_crypto_main_t *dcm = &dpdk_crypto_main; vlib_thread_main_t *tm = vlib_get_thread_main (); crypto_worker_main_t *cwm; clib_error_t *error = NULL; u32 i, skip_master, n_mains; n_mains = tm->n_vlib_mains; skip_master = vlib_num_workers () > 0; algos_init (n_mains - skip_master); crypto_scan_devs (n_mains - skip_master); if (!(dcm->enabled)) { clib_warning ("not enough DPDK crypto resources, default to OpenSSL"); crypto_disable (); return 0; } vec_validate_init_empty (dcm->workers_main, n_mains - 1, (crypto_worker_main_t) EMPTY_STRUCT); /* *INDENT-OFF* */ vec_foreach (cwm, dcm->workers_main) { memset (cwm->cipher_resource_idx, ~0, IPSEC_CRYPTO_N_ALG * sizeof(*cwm->cipher_resource_idx)); memset (cwm->auth_resource_idx, ~0, IPSEC_INTEG_N_ALG * sizeof(*cwm->auth_resource_idx)); } /* *INDENT-ON* */ crypto_auto_placement (); error = crypto_create_pools (); if (error) { clib_error_report (error); crypto_disable (); return 0; } /* Add new next node and set it as default */ vlib_node_t *node, *next_node; next_node = vlib_get_node_by_name (vm, (u8 *) "dpdk-esp-encrypt"); ASSERT (next_node); node = vlib_get_node_by_name (vm, (u8 *) "ipsec-output-ip4"); ASSERT (node); im->esp_encrypt_node_index = next_node->index; im->esp_encrypt_next_index = vlib_node_add_next (vm, node->index, next_node->index); next_node = vlib_get_node_by_name (vm, (u8 *) "dpdk-esp-decrypt"); ASSERT (next_node); node = vlib_get_node_by_name (vm, (u8 *) "ipsec-input-ip4"); ASSERT (node); im->esp_decrypt_node_index = next_node->index; im->esp_decrypt_next_index = vlib_node_add_next (vm, node->index, next_node->index); im->cb.check_support_cb = dpdk_ipsec_check_support; im->cb.add_del_sa_sess_cb = add_del_sa_session; node = vlib_get_node_by_name (vm, (u8 *) "dpdk-crypto-input"); ASSERT (node); for (i = skip_master; i < n_mains; i++) vlib_node_set_state (vlib_mains[i], node->index, VLIB_NODE_STATE_POLLING); return 0; } /* *INDENT-OFF* */ VLIB_REGISTER_NODE (dpdk_ipsec_process_node,static) = { .function = dpdk_ipsec_process, .type = VLIB_NODE_TYPE_PROCESS, .name = "dpdk-ipsec-process", .process_log2_n_stack_bytes = 17, }; /* *INDENT-ON* */ /* * fd.io coding-style-patch-verification: ON * * Local Variables: * eval: (c-set-style "gnu") * End: */