Ethernet Products
Determine ramifications of Intel® Ethernet products and technologies
4809 Discussions

IPSec offload to a VF IXGBEVF driver

idata
Employee
2,096 Views

Hi all,

I'm terminating IPsec tunned in a VM. VM is assigned a VF from Intel X520.

Is it possible to offload IPsec computations on a VF? or is there any other way to offload the IPsec from a VM directly to physical NIC card (Intel X520)

Can you please point me to a relevant documentation to help on this mater.

Any help would be appreciated.--

Thanks,Ali

0 Kudos
7 Replies
idata
Employee
716 Views

Hi Ali357,

Thank you for posting in Wired Communities. What is the exact X520 NIC you have? Please provide the exact model and operating systems. I will have to check on this.

Regards,

 

Sharon

 

0 Kudos
idata
Employee
716 Views

Hi Sharon,

Followings are the details of hw/sw I'm using.

  1. Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection (rev 01)
  2. Host Ubuntu Version: Ubuntu 17.04
  3. Host IXGBE driver version: 5.2.3
  4. Guest Ubuntu Version: Ubuntu 17.04
  5. Guest IXGBEVF driver version: 4.2.1
  6. Host Kernel version: 4.10.0-33-generic
  7. Guest Kernel version: 4.10.0-33-generic

Any help will be appreciated.

Thanks

Ali

0 Kudos
idata
Employee
716 Views

Hi Ali357,

 

 

Thank you for the information. I will update you if there is any information to share.

 

 

Regards,

 

Sharon

 

0 Kudos
idata
Employee
716 Views

Hi Ali357,

 

 

As an additional information. The Windows 2012 Hyper-V supports virtual

 

machine offloading the IPsec processing to the NIC on the host. Here are the steps

 

to check:

 

 

Start Device Manager.

 

Click Start, click Control Panel, click Hardware and Sound, and then click Device Manager.

 

In Device Manager, expand Network adapters, and then double-click the adapter that you want to check.

 

On the Properties dialog box, click the Advanced tab.

 

If IPsecOffloadV2 appears in the Property list, then the network adapter supports IPsec task offload.

 

 

As you are using Ubuntu, please check with Ubuntu support the process of offloading the IPsec processing to the physical NIC on the host.

 

 

Thanks,

 

Sharon

 

 

0 Kudos
idata
Employee
716 Views

Hi Ali357,

 

 

Please feel free to update me and if you have contacted Ubuntu support.

 

 

Thanks,

 

Sharon

 

0 Kudos
idata
Employee
716 Views

Hi Ali357,

 

 

Further checking at our end, the IPSec offloads are not supported on VFs. Hope this information clarified. Thank you.

 

 

Regards,

 

Sharon

 

0 Kudos
idata
Employee
716 Views

Hi Ali357,

 

 

Please feel free to update me if you still have other inquiries. Thank you.

 

 

Regards,

 

Sharon
0 Kudos
Reply