FD.io VPP
v19.01.2-3-gf61a1a8
Vector Packet Processing
|
This document is meant to contain all related information about implementation and usability.
DPDK Cryptodev is an asynchronous crypto API that supports both Hardware and Software implementations (for more details refer to DPDK Cryptography Device Library documentation).
When there are enough Cryptodev resources for all workers, the node graph is reconfigured by adding and changing the default next nodes.
The following nodes are added:
Set new default next nodes:
When building DPDK with VPP, Cryptodev support is always enabled.
Additionally, on x86_64 platforms, DPDK is built with SW crypto support.
VPP allocates crypto resources based on a best effort approach:
0: dpdk_ipsec_init: not enough Cryptodevs, default to OpenSSL IPsec
To enable DPDK Cryptodev the user just need to provide cryptodevs in the startup.conf.
Below is an example startup.conf, it is not meant to be a default configuration:
In the above configuration:
For further details refer to DPDK Crypto Device Driver documentation
The following CLI command displays the Cryptodev/Worker mapping:
show crypto device mapping [verbose]
Building the DPDK Crypto Libraries requires the open source project nasm (The Netwide Assembler) to be installed. Recommended version of nasm is 2.12.02. Minimum supported version of nasm is 2.11.06. Use the following command to determine the current nasm version:
nasm -v
CentOS 7.3 and earlier and Fedora 21 and earlier use unsupported versions of nasm. Use the following set of commands to build a supported version:
wget http://www.nasm.us/pub/nasm/releasebuilds/2.12.02/nasm-2.12.02.tar.bz2 tar -xjvf nasm-2.12.02.tar.bz2 cd nasm-2.12.02/ ./configure make sudo make install