Performance Test Procedure
Rev 1.2
15
Mellanox Technologies
The running kernel should be the version you installed from the Innova IPsec software package.
See
Section 1.1, “Prerequisites,” on page 5
.
Step 2.
Load the Innova IPsec driver:
Step 3.
Make sure the drivers are loaded:
The above four drivers should be running.
Step 4.
Verify no error messages in kernel log:
4.2.2 Configuring IP Addresses
Step 1.
Configure IP addresses for the two interfaces on the two servers:
Note: Replace interface names in the commands below as appropriate. See
3,“Test Set-up Architecture” on page 9
Step 2.
Verify connectivity and link speed for both interfaces. You may use ethtool to query the link
state and/or ping to test connectivity. Example:
4.2.3 Setting up IPsec SA
Step 1.
Set up the IPsec tunnels between the two servers using the script provided with the Innova
IPsec software package.
kernel-4.9.0_rc6_3602b52_2016_12_06_16_08_22
[root@server-a ~]# modprobe mlx_ipsec
[root@server-a ~]# lsmod | grep mlx
mlx_ipsec 32768 0
mlx_accel_core 32768 1 mlx_ipsec
mlx5_ib 159744 1 mlx_accel_core
mlx5_core 319488 2 mlx5_ib,mlx_accel_core
[root@server-a ~]# dmesg | tail
[ 5983.745124] mlx_accel_hw_dev_add_one called for 0000:00:08.0
[ 5983.745627] infiniband mlx5_0: mlx_accel_ib_dev_add_one called
[ 5983.746909] mlx5_core 0000:00:08.0: FPGA image is ready
[ 5983.864881] mlx_accel_core_client_register called for mlx_ipsec
[ 5983.866169] mlx_accel_core_conn_create called for mlx5_0-0000:00:08.0
[ 5983.910555] mlx_accel_core_connect called for mlx5_0-0000:00:08.0
[ 5983.959818] net ens8: mlx_ipsec added on device mlx5_0-0000:00:08.0
[root@server-a ~]# ifconfig ens1 192.168.8.12/24 up
[root@server-a ~]# ip addr add 192.168.8.13/24 dev ens1
[root@server-a ~]# ip addr add 192.168.8.14/24 dev ens1
[root@server-b ~]# ifconfig ens1 192.168.8.22/24 up
[root@server-b ~]# ip addr add 192.168.8.23/24 dev ens1
[root@server-b ~]# ip addr add 192.168.8.24/24 dev ens1
[root@server-a ~]# ping 192.168.8.22
[root@server-a ~]#./xfrm-offload-transport.sh -both 192.168.8.12 ens1 192.168.8.22 ens1 server-b
[root@server-a ~]#./xfrm-offload-transport.sh -both -a 192.168.8.13 ens1 192.168.8.23 ens1 server-b
[root@server-a ~]#./xfrm-offload-transport.sh -both -a 192.168.8.14 ens1 192.168.8.24 ens1 server-b
