background image

Test Set-up Architecture

Rev 1.2

9

Mellanox Technologies

3

Test Set-up Architecture 

3.1

Tunnel Mode Set-up

Two of the four servers - Server A and Server B - are used for generating and receiving packets. 
A ConnectX-4 adapter card supporting 10/40GbE should be installed on both server A and B. 
The other two servers - Gateway C and Gateway D - are used for IP forwarding (encryption and 
decryption). Each gateway server should have one ConnectX-4 and one Innova IPsec adapter 
card installed. The IPsec configuration is set to the following:
• Encryption algorithm: AES-GCM 128/256-bit key, and 128-bit ICV

• IPsec operation mode: Tunnel mode

• IPsec protocol: ESP

• IP version: IPv4

For test procedure details, see 

Chapter 4,“Performance Test Procedure” on page 11

.

Summary of Contents for Innova IPsec 4 Lx

Page 1: ...Mellanox Technologies www mellanox com Mellanox Innova IPsec 4 Lx Ethernet Adapter Quick Start Guide Rev 1 2...

Page 2: ...dated list of Mellanox trademarks visit http www mellanox com page trademarks NOTE THIS HARDWARE SOFTWARE OR TEST SUITE PRODUCT PRODUCT S AND ITS RELATED DOCUMENTATION ARE PROVIDED BY MELLANOX TECHNOL...

Page 3: ...irmware and Tools Update 7 Chapter 3 Test Set up Architecture 9 3 1 Tunnel Mode Set up 9 3 2 Transport Mode Set up 10 Chapter 4 Performance Test Procedure 11 4 1 Tunnel Mode 11 4 1 1 Loading Kernel an...

Page 4: ...ter 2 Fast Installation and Update on page 7 Updated Section 4 1 1 Loading Kernel and Driver on page 11 Updated Section 4 2 1 Loading Kernel and Driver on page 14 Updated Section 4 2 3 Setting up IPse...

Page 5: ...s 1 1 2 Transport Mode Table 3 lists the hardware software and firmware that the set up requires Table 2 Set up Requirements Requirements Description Hardware Four servers Four ConnectX 4 adapter card...

Page 6: ...10GbE 40GbE Driver Kernel Components kernel 4 9 0_rc6_37cc319_2017_01_22_16_06_10 1 x86_64 rpm kernel devel 4 9 0_rc6_37cc319_2017_01_22_16_06_10 1 x86_64 rpm iproute2 4 9 0rc6_ipsec_offload 1 x86_64...

Page 7: ...rnel RPM files Offload scripts xfrm iproute MFT tar file Firmware bin files 2 3 Software Firmware and Tools Update Step 1 To download the package please refer to www mellanox com Products Programma bl...

Page 8: ...rt with_fpga apps 13 mst status MST modules MST PCI module is not loaded MST PCI configuration module is not loaded MST devices No MST devices were found nor MST modules were loaded You may need to ru...

Page 9: ...both server A and B The other two servers Gateway C and Gateway D are used for IP forwarding encryption and decryption Each gateway server should have one ConnectX 4 and one Innova IPsec adapter card...

Page 10: ...ova IPsec adapter card should be installed in both Server A and Server B The IPsec configuration is set to the fol lowing Encryption algorithm AES GCM 128 256 bit key and 128 bit ICV IPsec operation m...

Page 11: ...1 Configure IP addresses for the six interfaces on the four servers root gateway c uname r kernel 4 9 0_rc6_3602b52_2016_12_06_16_08_22 root gateway c modprobe mlx_ipsec root gateway c lsmod grep mlx...

Page 12: ...4 24 dev ens1 root gateway c ifconfig ens1 192 168 8 1 24 up root gateway c ifconfig ens2 192 168 7 2 24 up root gateway d ifconfig ens2 192 168 7 9 24 up root gateway d ifconfig ens1 192 168 9 1 24...

Page 13: ...ets 0 ipsec_dec_out_packets 0 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 0 ipsec_enc_out_packets 0 ipsec_enc_bypass_packets 6 ipsec_dec_drop_packets 0 ipsec_dec_auth_fail_packets 0 ipsec_enc_drop...

Page 14: ...ect kernel version is running root gateway c ethtool S ens2 grep ipsec ipsec_dec_in_packets 8 ipsec_dec_out_packets 8 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 8 ipsec_enc_out_packets 8 ipsec_en...

Page 15: ...2768 0 mlx_accel_core 32768 1 mlx_ipsec mlx5_ib 159744 1 mlx_accel_core mlx5_core 319488 2 mlx5_ib mlx_accel_core root server a dmesg tail 5983 745124 mlx_accel_hw_dev_add_one called for 0000 00 08 0...

Page 16: ...2 root server a ethtool S ens1 grep ipsec ipsec_dec_in_packets 8 ipsec_dec_out_packets 8 ipsec_dec_bypass_packets 6 ipsec_enc_in_packets 8 ipsec_enc_out_packets 8 ipsec_enc_bypass_packets 6 ipsec_dec_...

Reviews: