[ovs-dev] Virtio Crypto with OVS-DPDK

Ilya Maximets i.maximets at samsung.com
Thu Sep 12 15:48:47 UTC 2019


On 12.09.2019 18:35, Harish Kumar Ambati wrote:
> Thanks  IIya for the reply . Please find my comment below.
> 
>>>Hi Harish,
> 
>>>Why do you want to integrate virtio-crypto into OVS?
>>>OVS is an OpenFlow Network Switch, but crypto devices are not network devices.
>>>They will not fit in OVS purposes nor OVS architecture.
> 
> Let's take a use-case of ipsec running in a guest. A guest with a virtio_net driver, shares a number of virtqueues with QEMU.
> Virtio-net backend is supported by OVS. Now, if we want to use crypto device with virtio-crypto? How should we do it without OVS? 
> I felt OVS is a right place to also provide support for virtio-crypto - especially when it is being used in conjunction with virtio-net.

virtio-crypto is a separate device with its own virtqueues.
It doesn't have any connection to virtio-net device.
If application in guest will want to send ciphered traffic, it
will first send the data to virtio-crypto device to be encrypted,
will receive it back from the crypto device and only after that it
will send resulted encrypted packet to virtio-net, where it will
be received by OVS and sent to the wild network.

So, any other application could be a backend for virtio-crypto
device. You could run same crypto example from DPDK along with
OVS. OVS will be responsible for networking and cprypto example
will be responsible for encrypting.

> 
> Please suggest.
> 
>  
> 
> Regards,
> 
> Harish
> 
> 
> -----Original Message-----
> From: ovs-dev-bounces at openvswitch.org <ovs-dev-bounces at openvswitch.org> On Behalf Of Ilya Maximets
> Sent: Tuesday, September 10, 2019 2:02 PM
> To: ovs-dev at openvswitch.org
> Subject: Re: [ovs-dev] Virtio Crypto with OVS-DPDK
> 
>  
> 
>> Hi All,
> 
>>
> 
>> I am working on Virtio Crypto and could run DPDK virtio crypto use cases on both x86 and ARM.
> 
>>
> 
>> Now ,  I am trying to integrate virtio crypto with ovs-dpdk , is there any work done in this direction . Could someone please help with inputs.
> 
>  
> 
>>>Hi Harish,
> 
>>>Why do you want to integrate virtio-crypto into OVS?
> 
>>>OVS is an OpenFlow Network Switch, but crypto devices are not network devices.
> 
>>>They will not fit in OVS purposes nor OVS architecture.
> 
>  
> 
> Let's take a use-case of ipsec running in a guest. A guest with a virtio_net driver, shares a number of virtqueues with QEMU.
> 
> Virtio-net backend is supported by OVS. Now, if we want to use crypto device with virtio-crypto? How should we do it without OVS? 
> 
> I felt OVS is a right place to also provide support for virtio-crypto - specially when it is being used in conjunction with virtio-net.Please suggest.
> 
>  
> 
>  
> 
> Best regards, Ilya Maximets.
> 
>  
> 
>>
> 
>> Below is the DPDK sample application we tried.
> 
>>
> 
>> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fdoc.dpdk.org%2Fguides%2Fsample_app_ug%2Fvhost_crypto.html&amp;data=02%7C01%7Charish.ambati%40nxp.com%7C71f7b0c627d94851911408d735c95903%7C686ea1d3bc2b4c6fa92cd99c5c301635%7C0%7C1%7C637037011215155264&amp;sdata=iVd%2FR747iUd%2BlxwFXNPP%2BUFdClGoat8DTEYkX9ZpCa4%3D&amp;reserved=0
> 
>>
> 
>> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fspp-tmp.readthedocs.io%2Fen%2Fstable%2Fcryptodevs%2Fvirtio.html&amp;data=02%7C01%7Charish.ambati%40nxp.com%7C71f7b0c627d94851911408d735c95903%7C686ea1d3bc2b4c6fa92cd99c5c301635%7C0%7C1%7C637037011215155264&amp;sdata=OoPgNStH42qfPd4tG7H0JkeLOp5jR5Pz7G2aEZsNxZ0%3D&amp;reserved=0
> 
>>
> 
>>
> 
>> Regards,
> 
>> Harish
> 
>> Software R&D
> 
>> Hyderabad Design Center (HDC), NXP India
> 
>> Mob:9885996745 work: 91-4033504056
> 
> _______________________________________________
> 
> dev mailing list
> 
> dev at openvswitch.org <mailto:dev at openvswitch.org>
> 
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fmail.openvswitch.org%2Fmailman%2Flistinfo%2Fovs-dev&amp;data=02%7C01%7Charish.ambati%40nxp.com%7C71f7b0c627d94851911408d735c95903%7C686ea1d3bc2b4c6fa92cd99c5c301635%7C0%7C1%7C637037011215155264&amp;sdata=gdI1%2FMhMj756sf7gvA2i3vAMCnAE2NxRI5Qki1QAOjo%3D&amp;reserved=0
> 


More information about the dev mailing list