Hi,
I have a MBF2H332A-AENOT BlueField-2 P-Series DPU card which is Crypto Disabled. While tring to run IPsec application on the arm side, I got this error.
root@localhost:/home/ubuntu# /opt/mellanox/doca/applications/east_west_overlay_encryption/bin/east_west_overlay_encryption.sh -i
Disabling regex temporarily to configure IPsec full offload.
Restarting ib driver (/etc/init.d/openibd restart).
Unloading HCA driver: [ OK ]
Loading HCA driver and Access Layer: [ OK ]
none
IPSec full offload failed. IPSec full offload should be full.
Then, I try to configure it manually, however, it truns out there is no such directory ‘/sys/class/net/*/compat/devlink/ipsec_mode’.
root@localhost:/home/ubuntu# cat /etc/mellanox/mlnx-bf.conf
ALLOW_SHARED_RQ="yes"
# Please note, IPsec full offload requires FW steering,
# Please note that setting IPSEC_FULL_OFFLOAD="yes" will automatically move to FW steering.
IPSEC_FULL_OFFLOAD="yes"
root@localhost:/home/ubuntu# /etc/init.d/openibd restart
Unloading HCA driver: [ OK ]
Loading HCA driver and Access Layer: [ OK ]
root@localhost:/home/ubuntu# systemctl restart mlx-regex
root@localhost:/home/ubuntu# cat /sys/class/net/
en3f0pf0sf0/ ovs-system/ pf1hpf/ vxlan-br/
enp3s0f0s0/ p0/ sf_bridge1/ vxlan_sys_4789/
lo/ p1/ sf_bridge2/
oob_net0/ pf0hpf/ tmfifo_net0/
root@localhost:/home/ubuntu# cat /sys/class/net/enp3s0f0s0/
addr_assign_type duplex phys_port_name
addr_len flags phys_switch_id
address gro_flush_timeout power/
broadcast ifalias proto_down
carrier ifindex queues/
carrier_changes iflink speed
carrier_down_count link_mode statistics/
carrier_up_count mtu subsystem/
dev_id name_assign_type tx_queue_len
dev_port netdev_group type
device/ operstate uevent
dormant phys_port_id
I am wondering whether I can run this application on my MBF2H332A-AENOT card or not.
Thanks,
YiFu