tjwallas / privacy-domain Goto Github PK

- DPDK supported Hardware

- Intel processor that supports the AES-NI instruction set.

- Linux Operating System

- DPDK Release 17.02 (https://core.dpdk.org/download/)

- Intel(R) Multi-Buffer Crypto for IPsec (https://github.com/intel/intel-ipsec-mb)

- Follow the instructions at https://doc.dpdk.org/guides/linux_gsg/build_dpdk.html

- Follow the instruction in the REAME file at https://github.com/intel/intel-ipsec-mb

- export RTE_SDK=$HOME/DPDK

- export RTE_APP=$(HOME)/DPDK/examples

- export RTE_TARGET=x86_64-native-linuxapp-gcc

- export AESNI_MULTI_BUFFER_LIB_PATH=$HOME/intel-ipsec-mb-0.44

- cp -r nat_eval $RTE_APP/.

- cd $RTE_APP/nat_eval/enc_lib/ff3/lib; sh mk_lnx_lib.sh; cd ../../..;

- make

- run.sh has a sample command that we used to run the applications; however, the arguments must be adjusted based on your environment. For more details, check the following links:

	- EAL Options: https://doc.dpdk.org/guides-17.02/testpmd_app_ug/run_app.html
	
	- App-specific Options: https://doc.dpdk.org/guides-17.02/sample_app_ug/l3_forward.html

- Generate traffic with traffic generator. For each packet:

	- Use random source addresses and destination addresses to maximize the number of cache misses to measure worst-case performance.
	
	- Vary the frame sizes of the packet for each experiment. For our experiments, we used the following sizes:
	
		- 64B, 128B, 256B, 512B, 1024B, 1518B, iMIX (mixture of 7 64B frames, 4 596B frames, 1 1518B frame)

- cp -r ipsec_eval $RTE_APP/.

- make

- run.sh has a sample command that we used to run the applications; however, the arguments must be adjusted based on your environment. For more details, check the following links:

	- EAL Options: https://doc.dpdk.org/guides-17.02/testpmd_app_ug/run_app.html
	
	- App-specific Options: https://doc.dpdk.org/guides-17.02/sample_app_ug/ipsec_secgw.html

- Generate traffic with a traffic generator. For each packet:

	- Use random destination address to ensure that a different IPsec SA would be chosen for each packet.
	
	- Vary the frame sizes of the packet for each experiment. For our experiments, we used the following sizes:
		
		- 64B, 128B, 256B, 512B, 1024B, 1456B, iMIX (mixture of 7 64B frames, 4 596B frames, 1 1456B frame)
			
		- Note that we cannot use 1518B (i.e., max-size) frames, due to packet encapsulation.
			
	- Note that generated packets must be sent to the "Protected ports." See DPDK documentation for the ipsec application for more information about "Protected Ports" (https://doc.dpdk.org/guides-17.02/sample_app_ug/ipsec_secgw.html)