background image

Doc#: MLNX-15-5270

2

Mellanox Technologies

Mellanox Technologies
350 Oakmead Parkway Suite 100
Sunnyvale , CA 94085
U.S.A.
www.mellanox.com
Tel: (408) 970-3400
Fax: (408) 970-3403

© Copyright 2017. Mellanox Technologies Ltd . All Rights Reserved .

Mellanox®, Mellanox logo, Accelio®, BridgeX®, CloudX logo, CompustorX® , Connect -IB®, ConnectX® , 
CoolBox® , CORE-Direct® , EZchip®, EZchip logo, EZappliance® , EZdesign®, EZdriver® , EZsystem®, 
GPUDirect®, InfiniHost®, InfiniBridge®, InfiniScale®,  Kotura®, Kotura logo, Mellanox CloudRack® , Mellanox 
CloudXMellanox® , Mellanox Federal Systems® , Mellanox HostDirect® , Mellanox Multi-Host®, Mellanox Open 
Ethernet®, Mellanox OpenCloud® , Mellanox OpenCloud Logo® ,  Mellanox PeerDirect® , Mellanox ScalableHPC® , 
Mellanox StorageX® , Mellanox TuneX® , Mellanox Connect Accelerate Outperform logo , Mellanox Virtual Modular 
Switch®, MetroDX®, MetroX®, MLNX-OS®, NP-1c®, NP-2®, NP-3®, Open Ethernet logo , PhyX®, PlatformX®, 
PSIPHY®, SiPhy®, StoreX®, SwitchX®, Tilera®, Tilera logo , TestX®, TuneX®, The Generation of Open Ethernet 
logo, UFM®, Unbreakable Link® , Virtual Protocol Interconnect®, Voltaire® and Voltaire logo are registered 
trademarks of Mellanox Technologies , Ltd.

All other trademarks are property of their respective owners .

For the most updated list of Mellanox trademarks, visit http://www.mellanox.com /page/trademarks

NOTE:
THIS HARDWARE, SOFTWARE OR TEST SUITE PRODUCT (“PRODUCT(S)”)  AND ITS RELATED 
DOCUMENTATION ARE PROVIDED BY MELLANOX TECHNOLOGIES “AS-IS” WITH ALL FAULTS OF ANY 
KIND AND SOLELY FOR THE PURPOSE OF AIDING THE CUSTOMER IN TESTING APPLICATIONS THAT 
USE THE PRODUCTS IN DESIGNATED SOLUTIONS. THE CUSTOMER'S MANUFACTURING TEST 
ENVIRONMENT HAS NOT MET THE STANDARDS SET BY MELLANOX TECHNOLOGIES TO FULLY 
QUALIFY THE PRODUCT(S)  AND/OR THE SYSTEM USING IT. THEREFORE, MELLANOX TECHNOLOGIES 
CANNOT AND DOES NOT GUARANTEE OR WARRANT THAT THE PRODUCTS WILL OPERATE WITH THE 
HIGHEST QUALITY. ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 
IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 
NONINFRINGEMENT ARE DISCLAIMED. IN NO EVENT SHALL MELLANOX BE LIABLE TO CUSTOMER OR 
ANY THIRD PARTIES FOR ANY DIRECT, INDIRECT, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 
DAMAGES OF ANY KIND (INCLUDING, BUT NOT LIMITED TO, PAYMENT FOR PROCUREMENT OF 
SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, 
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY FROM THE USE OF THE 
PRODUCT (S)  AND RELATED DOCUMENTATION EVEN IF ADVISED OF THE POSSIBILITY OF SUCH 
DAMAGE.

Summary of Contents for Innova IPsec 4 Lx

Page 1: ...Mellanox Technologies www mellanox com Mellanox Innova IPsec 4 Lx Ethernet Adapter Quick Start Guide Rev 1 2...

Page 2: ...dated list of Mellanox trademarks visit http www mellanox com page trademarks NOTE THIS HARDWARE SOFTWARE OR TEST SUITE PRODUCT PRODUCT S AND ITS RELATED DOCUMENTATION ARE PROVIDED BY MELLANOX TECHNOL...

Page 3: ...irmware and Tools Update 7 Chapter 3 Test Set up Architecture 9 3 1 Tunnel Mode Set up 9 3 2 Transport Mode Set up 10 Chapter 4 Performance Test Procedure 11 4 1 Tunnel Mode 11 4 1 1 Loading Kernel an...

Page 4: ...ter 2 Fast Installation and Update on page 7 Updated Section 4 1 1 Loading Kernel and Driver on page 11 Updated Section 4 2 1 Loading Kernel and Driver on page 14 Updated Section 4 2 3 Setting up IPse...

Page 5: ...s 1 1 2 Transport Mode Table 3 lists the hardware software and firmware that the set up requires Table 2 Set up Requirements Requirements Description Hardware Four servers Four ConnectX 4 adapter card...

Page 6: ...10GbE 40GbE Driver Kernel Components kernel 4 9 0_rc6_37cc319_2017_01_22_16_06_10 1 x86_64 rpm kernel devel 4 9 0_rc6_37cc319_2017_01_22_16_06_10 1 x86_64 rpm iproute2 4 9 0rc6_ipsec_offload 1 x86_64...

Page 7: ...rnel RPM files Offload scripts xfrm iproute MFT tar file Firmware bin files 2 3 Software Firmware and Tools Update Step 1 To download the package please refer to www mellanox com Products Programma bl...

Page 8: ...rt with_fpga apps 13 mst status MST modules MST PCI module is not loaded MST PCI configuration module is not loaded MST devices No MST devices were found nor MST modules were loaded You may need to ru...

Page 9: ...both server A and B The other two servers Gateway C and Gateway D are used for IP forwarding encryption and decryption Each gateway server should have one ConnectX 4 and one Innova IPsec adapter card...

Page 10: ...ova IPsec adapter card should be installed in both Server A and Server B The IPsec configuration is set to the fol lowing Encryption algorithm AES GCM 128 256 bit key and 128 bit ICV IPsec operation m...

Page 11: ...1 Configure IP addresses for the six interfaces on the four servers root gateway c uname r kernel 4 9 0_rc6_3602b52_2016_12_06_16_08_22 root gateway c modprobe mlx_ipsec root gateway c lsmod grep mlx...

Page 12: ...4 24 dev ens1 root gateway c ifconfig ens1 192 168 8 1 24 up root gateway c ifconfig ens2 192 168 7 2 24 up root gateway d ifconfig ens2 192 168 7 9 24 up root gateway d ifconfig ens1 192 168 9 1 24...

Page 13: ...ets 0 ipsec_dec_out_packets 0 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 0 ipsec_enc_out_packets 0 ipsec_enc_bypass_packets 6 ipsec_dec_drop_packets 0 ipsec_dec_auth_fail_packets 0 ipsec_enc_drop...

Page 14: ...ect kernel version is running root gateway c ethtool S ens2 grep ipsec ipsec_dec_in_packets 8 ipsec_dec_out_packets 8 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 8 ipsec_enc_out_packets 8 ipsec_en...

Page 15: ...2768 0 mlx_accel_core 32768 1 mlx_ipsec mlx5_ib 159744 1 mlx_accel_core mlx5_core 319488 2 mlx5_ib mlx_accel_core root server a dmesg tail 5983 745124 mlx_accel_hw_dev_add_one called for 0000 00 08 0...

Page 16: ...2 root server a ethtool S ens1 grep ipsec ipsec_dec_in_packets 8 ipsec_dec_out_packets 8 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 8 ipsec_enc_out_packets 8 ipsec_enc_bypass_packets 6 ipsec_dec_...

Reviews: