IPSec offload to a VF IXGBEVF driver

[idata]

Hi all,

I'm terminating IPsec tunned in a VM. VM is assigned a VF from Intel X520.

Is it possible to offload IPsec computations on a VF? or is there any other way to offload the IPsec from a VM directly to physical NIC card (Intel X520)

Can you please point me to a relevant documentation to help on this mater.

Any help would be appreciated.--

Thanks,Ali

[idata]

Hi Ali357,

Thank you for posting in Wired Communities. What is the exact X520 NIC you have? Please provide the exact model and operating systems. I will have to check on this.

Regards,

Sharon

[idata]

Hi Sharon,

Followings are the details of hw/sw I'm using.

1. Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection (rev 01)
2. Host Ubuntu Version: Ubuntu 17.04
3. Host IXGBE driver version: 5.2.3
4. Guest Ubuntu Version: Ubuntu 17.04
5. Guest IXGBEVF driver version: 4.2.1
6. Host Kernel version: 4.10.0-33-generic
7. Guest Kernel version: 4.10.0-33-generic

Any help will be appreciated.

Thanks

Ali

[idata]

Hi Ali357,

Thank you for the information. I will update you if there is any information to share.Regards,Sharon

[idata]

Hi Ali357,

As an additional information. The Windows 2012 Hyper-V supports virtualmachine offloading the IPsec processing to the NIC on the host. Here are the stepsto check:Start Device Manager.Click Start, click Control Panel, click Hardware and Sound, and then click Device Manager.In Device Manager, expand Network adapters, and then double-click the adapter that you want to check.On the Properties dialog box, click the Advanced tab.If IPsecOffloadV2 appears in the Property list, then the network adapter supports IPsec task offload. As you are using Ubuntu, please check with Ubuntu support the process of offloading the IPsec processing to the physical NIC on the host.Thanks,Sharon

[idata]

Hi Ali357,

Please feel free to update me and if you have contacted Ubuntu support.Thanks,Sharon

[idata]

Hi Ali357,

Further checking at our end, the IPSec offloads are not supported on VFs. Hope this information clarified. Thank you.Regards,Sharon

[idata]

Hi Ali357,

Please feel free to update me if you still have other inquiries. Thank you.Regards,Sharon