background image

Overview

Rev 1.2

5

Mellanox Technologies

1

Overview

This guide describes the network topology, server configuration and process of an IPsec perfor-
mance test set-up intended to test the Innova IPsec performance, in order to achieve the expected 
performance results. 
The document assumes the reader has read the 

Mellanox Innova™

 

IPsec 4 Lx Ethernet Adapter 

Card User Manual

 and is familiar with the Innova IPsec adapter high level architecture and con-

figuration.

1.1

Prerequisites 

1.1.1 Tunnel Mode

Table 2

 lists the hardware, software and firmware that the set up requires:

1.1.2 Transport Mode

Table 3

 lists the hardware, software and firmware that the set up requires:

Table 2 - Set-up Requirements

Requirements 

Description

Hardware

• Four servers
• Four ConnectX-4 adapter cards
• Two Innova IPsec adapter cards
• Three copper cables

FPGA Image Version

• 1161 - 10GbE
• 1160 - 40GbE

Firmware Version

14.18.0354 - 10GbE/40GbE

MFT Version

mft-4.6.0-48 - 10GbE/40GbE

Driver/Kernel Components

• kernel-4.9.0_rc6_37cc319_2017_01_22_16_06_10-

1.x86_64.rpm

• kernel-devel-4.9.0_rc6_37cc319_2017_01_22_16_06_10-

1.x86_64.rpm

• iproute2-4.9.0rc6_ipsec_offload-1.x86_64.

Platforms/Operating Systems

• RHEL7.1
• RHEL7.2

Table 3 - Set-up Requirements

Requirements 

Description

Hardware

• Two  servers
• Two Innova IPsec adapter cards
• One copper cable

FPGA Image Version

• 1161 - 10GbE
• 1160 - 40GbE

Summary of Contents for Innova IPsec 4 Lx

Page 1: ...Mellanox Technologies www mellanox com Mellanox Innova IPsec 4 Lx Ethernet Adapter Quick Start Guide Rev 1 2...

Page 2: ...dated list of Mellanox trademarks visit http www mellanox com page trademarks NOTE THIS HARDWARE SOFTWARE OR TEST SUITE PRODUCT PRODUCT S AND ITS RELATED DOCUMENTATION ARE PROVIDED BY MELLANOX TECHNOL...

Page 3: ...irmware and Tools Update 7 Chapter 3 Test Set up Architecture 9 3 1 Tunnel Mode Set up 9 3 2 Transport Mode Set up 10 Chapter 4 Performance Test Procedure 11 4 1 Tunnel Mode 11 4 1 1 Loading Kernel an...

Page 4: ...ter 2 Fast Installation and Update on page 7 Updated Section 4 1 1 Loading Kernel and Driver on page 11 Updated Section 4 2 1 Loading Kernel and Driver on page 14 Updated Section 4 2 3 Setting up IPse...

Page 5: ...s 1 1 2 Transport Mode Table 3 lists the hardware software and firmware that the set up requires Table 2 Set up Requirements Requirements Description Hardware Four servers Four ConnectX 4 adapter card...

Page 6: ...10GbE 40GbE Driver Kernel Components kernel 4 9 0_rc6_37cc319_2017_01_22_16_06_10 1 x86_64 rpm kernel devel 4 9 0_rc6_37cc319_2017_01_22_16_06_10 1 x86_64 rpm iproute2 4 9 0rc6_ipsec_offload 1 x86_64...

Page 7: ...rnel RPM files Offload scripts xfrm iproute MFT tar file Firmware bin files 2 3 Software Firmware and Tools Update Step 1 To download the package please refer to www mellanox com Products Programma bl...

Page 8: ...rt with_fpga apps 13 mst status MST modules MST PCI module is not loaded MST PCI configuration module is not loaded MST devices No MST devices were found nor MST modules were loaded You may need to ru...

Page 9: ...both server A and B The other two servers Gateway C and Gateway D are used for IP forwarding encryption and decryption Each gateway server should have one ConnectX 4 and one Innova IPsec adapter card...

Page 10: ...ova IPsec adapter card should be installed in both Server A and Server B The IPsec configuration is set to the fol lowing Encryption algorithm AES GCM 128 256 bit key and 128 bit ICV IPsec operation m...

Page 11: ...1 Configure IP addresses for the six interfaces on the four servers root gateway c uname r kernel 4 9 0_rc6_3602b52_2016_12_06_16_08_22 root gateway c modprobe mlx_ipsec root gateway c lsmod grep mlx...

Page 12: ...4 24 dev ens1 root gateway c ifconfig ens1 192 168 8 1 24 up root gateway c ifconfig ens2 192 168 7 2 24 up root gateway d ifconfig ens2 192 168 7 9 24 up root gateway d ifconfig ens1 192 168 9 1 24...

Page 13: ...ets 0 ipsec_dec_out_packets 0 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 0 ipsec_enc_out_packets 0 ipsec_enc_bypass_packets 6 ipsec_dec_drop_packets 0 ipsec_dec_auth_fail_packets 0 ipsec_enc_drop...

Page 14: ...ect kernel version is running root gateway c ethtool S ens2 grep ipsec ipsec_dec_in_packets 8 ipsec_dec_out_packets 8 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 8 ipsec_enc_out_packets 8 ipsec_en...

Page 15: ...2768 0 mlx_accel_core 32768 1 mlx_ipsec mlx5_ib 159744 1 mlx_accel_core mlx5_core 319488 2 mlx5_ib mlx_accel_core root server a dmesg tail 5983 745124 mlx_accel_hw_dev_add_one called for 0000 00 08 0...

Page 16: ...2 root server a ethtool S ens1 grep ipsec ipsec_dec_in_packets 8 ipsec_dec_out_packets 8 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 8 ipsec_enc_out_packets 8 ipsec_enc_bypass_packets 6 ipsec_dec_...

Reviews: