Application User Guide

• 1. OVS Offload
  • 1.1. Introduction
  • 1.2. Architecture
    • 1.2.1. Packet Flow - Wire-VM Communication and vice versa
  • 1.3. Getting the sources and compile
  • 1.4. Setting up the Environment
    • 1.4.1. Binding required devices
  • 1.5. Launching the application
    • 1.5.1. Understanding the output
    • 1.5.2. Understanding different nodes
  • 1.6. Various Packet Flow Scenarios (with demo)
    • 1.6.1. Wire-VM Communication
• 2. VirtIO-crypto
  • 2.1. Setting up EP environment
    • 2.1.1. Setup SDP PF/VF count in EBF menu
    • 2.1.2. Setup huge pages for DPDK application
    • 2.1.3. Bind required DMA devices to vfio-pci
    • 2.1.4. Bind required CPT VF’s to vfio-pci
    • 2.1.5. Bind PEM BAR4 and DPI BAR0 platform devices to vfio-platform
    • 2.1.6. Bind required SDP RVU devices to vfio-pci
  • 2.2. Running the EP firmware application
    • 2.2.1. EAL Options
    • 2.2.2. Application Options
    • 2.2.3. Example EP firmware command
  • 2.3. Setting up Host environment
  • 2.4. Running DPDK crypto-perf on host virtio device
• 3. VirtIO-l2fwd
  • 3.1. Setting up EP environment
    • 3.1.1. Setup SDP PF/VF count in EBF menu
    • 3.1.2. Setup huge pages for DPDK application
    • 3.1.3. Bind required DMA devices to vfio-pci
    • 3.1.4. Bind required RPM VF’s to vfio-pci
    • 3.1.5. Bind PEM BAR4 and DPI BAR0 platform devices to vfio-platform
    • 3.1.6. Bind required SDP RVU devices to vfio-pci
  • 3.2. Running the EP firmware application
    • 3.2.1. EAL Options
    • 3.2.2. Application Options
    • 3.2.3. Example EP firmware command
  • 3.3. Setting up Host environment
• 4. Secgw-graph
  • 4.1. Features
  • 4.2. Setting up environment
    • 4.2.1. Setup of SDP and RPM devices
    • 4.2.2. Setup huge pages for DPDK application
    • 4.2.3. Bind required RPM VF’s to vfio-pci
    • 4.2.4. Bind required SDP VF’s to vfio-pci
    • 4.2.5. Bind required CPT VF to vfio-pci
    • 4.2.6. Bind required Inline device PF to vfio-pci
    • 4.2.7. Setting up Host environment
  • 4.3. Running secgw-graph
    • 4.3.1. EAL Options
    • 4.3.2. Application Options
    • 4.3.3. secgw.cli
    • 4.3.4. Application bootup logs
    • 4.3.5. CLI terminal
  • 4.4. CLI commands
  • 4.5. Running as IPv4 router
    • 4.5.1. Configuration
    • 4.5.2. ping host2 IP from host1
    • 4.5.3. How it works
    • 4.5.4. Resolving Partial Routes
  • 4.6. Running as IPsec gateway
    • 4.6.1. Configuration
    • 4.6.2. Check IPsec configuration
    • 4.6.3. ping host2 IP from host1
  • 4.7. Planned Features
  • 4.8. Known Issues
• 5. Universal SmartNIC Turnkey App
  • 5.1. Introduction
    • 5.1.1. Feature List
  • 5.2. Getting the sources and compile
    • 5.2.1. Binding required devices
  • 5.3. Launching the application
    • 5.3.1. Application Options
    • 5.3.2. Example Commands
    • 5.3.3. Supported CLI commands
    • 5.3.4. Runtime configuration
    • 5.3.5. Application running demo
• 6. FD.io Vector Packet Processing (VPP)
  • 6.1. What is VPP?
  • 6.2. VPP Accelerations
  • 6.3. Marvell’s High-Performance VPP for OCTEON
    • 6.3.1. Installing and Running VPP for Packet I/O Acceleration Demo
    • 6.3.2. Running VPP for Crypto offload Demo
    • 6.3.3. VPP FD.io Documentation
  • 6.4. VPP Usage and Integrations
  • 6.5. Compiling VPP from sources
  • 6.6. Enhancing VPP IPsec offload with Strongswan Integration
    • 6.6.1. Strongswan Integration
    • 6.6.2. Configuring VPP IPsec route mode or policy mode
    • 6.6.3. VPP startup.conf configuration and CLI commands
    • 6.6.4. Strongswan configuration on DPU
    • 6.6.5. Strongswan configuration on remote DPU/Host:
    • 6.6.6. Ipsec Linux commands
  • 6.7. Host Offload to OCTEON DPU Via Virtio Interface over PCIe
    • 6.7.1. Configuring OCTEON DPU
  • 6.8. Host offload to OCTEON DPU via SDP interface over PCIe
    • 6.8.1. Configuring OCTEON DPU
    • 6.8.2. Configuring Host
• 7. TLS Proxy with NGINX
  • 7.1. Introduction
  • 7.2. NGINX Brief
  • 7.3. NGINX as TLS termination proxy
    • 7.3.1. Usage/deployment Model
    • 7.3.2. NGINX Architecture Diagram
    • 7.3.3. NGINX acceleration on OCTEON
  • 7.4. Steps to Install
    • 7.4.1. Ubuntu Debian package
    • 7.4.2. Compiling from Sources
  • 7.5. Environment Setup
    • 7.5.1. Enabling CPT device
    • 7.5.2. NGINX configuration
    • 7.5.3. OpenSSL configuration
  • 7.6. Launching the application
    • 7.6.1. Running the Proxy Application
    • 7.6.2. Functional Testing of the Proxy
    • 7.6.3. Performance Testing of the Proxy
• 8. Machine Learning
  • 8.1. Resnet50
    • 8.1.1. Introduction
    • 8.1.2. Preprocessing of Input
    • 8.1.3. Model Execution
    • 8.1.4. Postprocessing of Output
  • 8.2. LUCID
    • 8.2.1. Introduction
    • 8.2.2. Training Model
    • 8.2.3. Run Script
    • 8.2.4. References
• 9. Snort with VectorScan
  • 9.1. What is Snort?
  • 9.2. What is VectorScan?
  • 9.3. Accelerations
  • 9.4. Installing Snort
    • 9.4.1. Ubuntu Debian package
    • 9.4.2. Install the Snort package and verify
  • 9.5. VectorScan Benchmarking
    • 9.5.1. Pattern Sets
    • 9.5.2. Performance measurements
  • 9.6. Snort Benchmarking
• 10. Kubernetes CNI Offload
  • 10.1. Introduction
  • 10.2. Architecture of CNI-Offload Solution
    • 10.2.1. Host Components
    • 10.2.2. DPU Components
    • 10.2.3. Solution Software and Firmware Matrix
  • 10.3. Installation Steps
    • 10.3.1. System Requirements:
    • 10.3.2. Add nodes to k8s Cluster
    • 10.3.3. Build and Deploy CNI-Offload Solution
    • 10.3.4. Verify CNI-Offload Solution is Deployed
  • 10.4. Test Star Wars Demo with CNI-Offload
    • 10.4.1. Testbed Diagram:
    • 10.4.2. Deploy Services
    • 10.4.3. Service Offload Validation
    • 10.4.4. Policy Offload Validation
    • 10.4.5. Star Wars Demo Video with CNI-Offload
  • 10.5. Test IPsec Transparent Encryption with CNI-Offload
    • 10.5.1. IPSec Demo Video with CNI-Offload