Skip to content
  • Raed Salem's avatar
    b2ac7541
    net/mlx5e: IPsec: Add Connect-X IPsec Rx data path offload · b2ac7541
    Raed Salem authored
    
    
    On receive flow inspect received packets for IPsec offload indication
    using the cqe, for IPsec offloaded packets propagate offload status
    and stack handle to stack for further processing.
    
    Supported statuses:
    - Offload ok.
    - Authentication failure.
    - Bad trailer indication.
    
    Connect-X IPsec does not use mlx5e_ipsec_handle_rx_cqe.
    
    For RX only offload, we see the BW gain. Below is the iperf3
    performance report on two server of 24 cores Intel(R) Xeon(R)
    CPU E5-2620 v3 @ 2.40GHz with ConnectX6-DX.
    We use one thread per IPsec tunnel.
    
    ---------------------------------------------------------------------
    Mode          |  Num tunnel | BW     | Send CPU util | Recv CPU util
                  |             | (Gbps) | (Average %)   | (Average %)
    ---------------------------------------------------------------------
    Cryto offload | 1           | 4.6    | 4.2           | 14.5
    ---------------------------------------------------------------------
    Cryto offload | 24          | 38     | 73            | 63
    ---------------------------------------------------------------------
    Non-offload   | 1           | 4      | 4             | 13
    ---------------------------------------------------------------------
    Non-offload   | 24          | 23     | 52            | 67
    
    Signed-off-by: default avatarRaed Salem <raeds@mellanox.com>
    Reviewed-by: default avatarBoris Pismenny <borisp@mellanox.com>
    Reviewed-by: default avatarTariq Toukan <tariqt@mellanox.com>
    Signed-off-by: default avatarSaeed Mahameed <saeedm@mellanox.com>
    b2ac7541
    net/mlx5e: IPsec: Add Connect-X IPsec Rx data path offload
    Raed Salem authored
    
    
    On receive flow inspect received packets for IPsec offload indication
    using the cqe, for IPsec offloaded packets propagate offload status
    and stack handle to stack for further processing.
    
    Supported statuses:
    - Offload ok.
    - Authentication failure.
    - Bad trailer indication.
    
    Connect-X IPsec does not use mlx5e_ipsec_handle_rx_cqe.
    
    For RX only offload, we see the BW gain. Below is the iperf3
    performance report on two server of 24 cores Intel(R) Xeon(R)
    CPU E5-2620 v3 @ 2.40GHz with ConnectX6-DX.
    We use one thread per IPsec tunnel.
    
    ---------------------------------------------------------------------
    Mode          |  Num tunnel | BW     | Send CPU util | Recv CPU util
                  |             | (Gbps) | (Average %)   | (Average %)
    ---------------------------------------------------------------------
    Cryto offload | 1           | 4.6    | 4.2           | 14.5
    ---------------------------------------------------------------------
    Cryto offload | 24          | 38     | 73            | 63
    ---------------------------------------------------------------------
    Non-offload   | 1           | 4      | 4             | 13
    ---------------------------------------------------------------------
    Non-offload   | 24          | 23     | 52            | 67
    
    Signed-off-by: default avatarRaed Salem <raeds@mellanox.com>
    Reviewed-by: default avatarBoris Pismenny <borisp@mellanox.com>
    Reviewed-by: default avatarTariq Toukan <tariqt@mellanox.com>
    Signed-off-by: default avatarSaeed Mahameed <saeedm@mellanox.com>
Loading