• Contenu
• DPDK
  • Liens
  • Misc
  • Note sileht dpdk:
    • configuration hugepages:
    • Compile and load modules:
    • Prepare examples programs:
    • Tests
  • Limitation SPF carte intel:
  • Packet Journey
  • Atelier 2016
    • Atelier Hardware
    • Atelier Liens
    • Atelier Issues
    • Atelier Build

DPDK¶

Traitement haute performance en logiciel, 10 Gbit/s en petit paquets line rate

Liens¶

• http://dpdk.org
• AtelierPPS2012
• GIT http://chiliproject.tetaneutral.net/projects/git-tetaneutral-net/repository/dpdk
  

  $ git clone ssh://git@git.tetaneutral.net/dpdk.git
  

• Nerim Antoine https://twitter.com/nerim_net/status/517592380841930752
  • Du code maison fondé sur #DPDK en prod dans le réseau : première étape vers l'élimination des systèmes propriétaires ?

Misc¶

• http://www.intel.fr/content/dam/www/public/us/en/documents/datasheets/xl710-10-40-controller-datasheet.pdf
• http://www.intel.fr/content/dam/www/public/us/en/documents/datasheets/82599-10-gbe-controller-datasheet.pdf
• http://www.intel.fr/content/dam/www/public/us/en/documents/datasheets/82598-10-gbe-controller-datasheet.pdf
• MoonGen: A Scriptable High-Speed Packet Generator
  • http://arxiv.org/pdf/1410.3322.pdf
  • http://www.net.in.tum.de/fileadmin/bibtex/publications/papers/MoonGen_IMC2015.pdf
  • https://github.com/emmericp/MoonGen
• https://www.kernel.org/doc/Documentation/networking/switchdev.txt
• https://www.usenix.org/conference/osdi14/technical-sessions/presentation/belay
  • IX: A Protected Dataplane Operating System for High Throughput and Low Latency
  • http://www.linuxfoundation.org/images/1/1c/Network_data_flow_through_kernel.png
  • http://www.linuxfoundation.org/collaborate/workgroups/networking/kernel_flow
• https://blog.cloudflare.com/how-to-receive-a-million-packets/
  • How to receive a million packets per second
• https://blog.cloudflare.com/how-to-achieve-low-latency/
• http://www.cs.cmu.edu/~dongz/papers/cuckooswitch.pdf
  • We show that CUCKOOSWITCH can process 92.22 million minimum sized packets per second on a commodity server equipped with eight 10 Gbps Ethernet interfaces while maintaining a forwarding table of one billion forwarding entries.
• Improving Linux networking performance https://lwn.net/Articles/629155/
  • https://www.youtube.com/watch?v=3XG9-X777Jo
  • http://people.netfilter.org/hawk/presentations/LCA2015/net_stack_challenges_100G_LCA2015.pdf
• http://www.bigswitch.com/sites/default/files/presentations/onug-baremetal-2014-final.pdf
• Intel PCI id http://www.intel.com/support/network/sb/cs-012904.htm
• http://www.intel.com/content/www/us/en/ethernet-controllers/ethernet-products.html?iid=embed_portal+hdprod_ethernet#s1=Gigabit%20Ethernet&s2=all&s3=all
• Intel Pro/1000 PT vs CT http://hardforum.com/showthread.php?t=1386042
• http://images.ncix.com/forumimages/C9864B87-583B-10FB-B0DE80742781CE07.jpg
• http://www.intel.com/content/www/us/en/ethernet-controllers/ethernet-controllers.html#s1=all&s2=82572EI&s3=all
• http://www.intel.com/content/www/us/en/ethernet-controllers/ethernet-controllers.html#s1=all&s2=82574L&s3=all
• https://github.com/Pktgen/Pktgen-DPDK
• Evaluating the Suitability of Server Network Cards for Software Routers http://kfall.net/ucbpage/papers/snc.pdf
• http://www.intel.fr/content/dam/www/public/us/en/documents/guides/intel-dpdk-sample-applications-user-guide.pdf
• rte_eth_rx_burst
  • http://dpdk.org/doc/api/rte__ethdev_8h.html#a5ac93faa0f3f69545ca121dcfd9433f5
  • http://dpdk.info/ml/archives/dev/2014-January/001223.html
• http://www.intel.fr/content/dam/www/public/us/en/documents/white-papers/aes-ipsec-performance-linux-paper.pdf
• http://networkbuilders.intel.com/docs/Network_Builders_RA_vBRAS_Final.pdf

• https://github.com/SnabbCo/snabbswitch
  • https://github.com/SnabbCo/snabbswitch/blob/master/src/apps/intel/intel10g.lua
  • http://blog.ipspace.net/2014/06/snabb-switch-and-nfv-on-openstack-in.html
  • https://github.com/SnabbCo/snabbswitch/wiki/Snabb-Lab
  • https://twitter.com/lukego/status/327714050219847680

Note sileht dpdk:¶

Extract from: http://www.intel.com/content/dam/www/public/us/en/documents/guides/intel-dpdk-getting-started-guide.pdf

configuration hugepages:¶

• 2M (1024*2k): hugepages=1024 (at runtime: echo 1024 > /sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages)
• 4G (4x1G): default_hugepagesz=1G hugepagesz=1G hugepages=4 (only works at boot time via grub)

mkdir /mnt/huge
mount -t hugetlbfs nodev /mnt/huge

Compile and load modules:¶

Note: source tools/setup.sh is a helper tools for this but works only with IGB driver not e1000e

# apt-get install make gcc linux-headers-amd64
# make config T=x86_64-default-linuxapp-gcc
# make T=x86_64-default-linuxapp-gcc
..
Build complete

# modprobe uio  (I think this is not useful)
# insmod build/kmod/rte_kni.ko (I think this is not useful)
# insmod build/kmod/igb_uio.ko (I think this is not useful)
# ./tools/pci_unbind.py --status

Network devices using IGB_UIO driver
====================================
<none>

Network devices using kernel driver
===================================
0000:00:19.0 '82579LM Gigabit Network Connection' if=eth1 drv=e1000e unused=<none>
0000:01:00.0 '82599EB 10-Gigabit SFI/SFP+ Network Connection' if=eth6 drv=ixgbe unused=igb_uio *Active*
0000:01:00.1 '82599EB 10-Gigabit SFI/SFP+ Network Connection' if=eth7 drv=ixgbe unused=igb_uio
0000:04:00.0 '82571EB Gigabit Ethernet Controller' if=eth2 drv=e1000e unused=igb_uio *Active*
0000:04:00.1 '82571EB Gigabit Ethernet Controller' if=eth3 drv=e1000e unused=igb_uio
0000:05:00.0 '82571EB Gigabit Ethernet Controller' if=eth4 drv=e1000e unused=igb_uio
0000:05:00.1 '82571EB Gigabit Ethernet Controller' if=eth5 drv=e1000e unused=igb_uio
0000:06:00.0 'RTL8111/8168B PCI Express Gigabit Ethernet controller' if=eth0 drv=r8169 unused=<none> *Active*

Other network devices
=====================
<none>

test sur eth7:

# ip link set eth7 down
# ./tools/pci_unbind.py --bind=igb_uio 0000:01:00.1

Prepare examples programs:¶

# export RTE_SDK=/root/sileht/dpdk-1.6.0r1
# export RTE_TARGET=build
# cd /root/sileht/
# cp -r $RTE_SDK/examples/helloworld my_rte_app
# cd my_rte_app
# make

Tests¶

Limitation SPF carte intel:¶

Une fois le module igb_uio changé sur les:

01:00.0 Ethernet controller: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ Network Connection (rev 01)

Un flags de l'eeprom change et le module ixgbe ne charge plus les ports de la carte qui n'ont pas des SFP+ intel avec le message d'erreur suivant:

[  563.069683] ixgbe 0000:01:00.0: failed to load because an unsupported SFP+ or QSFP module type was detected.
[  563.069786] ixgbe 0000:01:00.0: Reload the driver after installing a supported module.

Pour contourner le problème:

modprobe ixgbe allow_unsupported_sfp=1 # allow_any_sfp=1 suivant le kernel

ou

echo "options ixgbe allow_unsupported_sfp=1" > /etc/modprobe.d/ixgbe_any_sfp.conf
update-initramfs -u -k all

La carte fonctionnera à nouveau avec le message suivant:

[  908.361767] ixgbe 0000:01:00.0 (unregistered net_device): WARNING: Intel (R) Network Connections are quality tested using Intel (R) Ethernet Optics.  Using untested modules is not supported and may cause unstable operation or damage to the module or the adapter.  Intel Corporation is not responsible for any harm caused by using untested modules.

Packet Journey¶

https://www.gandi.net/news/en/2015-12-16/6308-packet-journey_a_free_software_router_for_linux_based_on_dpdk/
https://github.com/gandi/packet-journey

Atelier 2016¶

Atelier Hardware¶

core i7 2600 @ 3.40GHz
 fpu vme de pse tsc msr pae mce cx8 
 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 
 ss ht tm pbe syscall nx rdtscp lm constant_tsc arch_perfmon pebs bts rep_good nopl 
 xtopology nonstop_tsc aperfmperf eagerfpu pni pclmulqdq dtes64 monitor ds_cpl vmx smx est tm2 ssse3 
 cx16 xtpr pdcm pcid sse4_1 sse4_2 
 x2apic popcnt tsc_deadline_timer aes xsave avx lahf_lm ida arat epb xsaveopt pln pts dtherm tpr_shadow vnmi flexpriority ept vpid
16G RAM
SSD 250G

host eth DHCP          10G-a                                           10G-b
t1   54:04:a6:ef:a8:c7 00:1b:21:d9:28:55 fe80::21b:21ff:fed9:2855(t2b) 00:1b:21:d9:28:54 fe80::21b:21ff:fed9:2854(t3b)
t2   e0:69:95:2e:e6:a2 00:1b:21:d9:1a:e1 fe80::21b:21ff:fed9:1ae1(t3a) 00:1b:21:d9:1a:e0 fe80::21b:21ff:fed9:1ae0(t1a)
t3   bc:ae:c5:e1:b2:6d 00:1b:21:d9:df:3d fe80::21b:21ff:fed9:df3d(t2a) 00:1b:21:d9:df:3c fe80::21b:21ff:fed9:df3c(t1b)

1G e1000e
t1 00:15:17:a6:cb:19
t3 00:15:17:16:bd:de

h7   82599ES 8086:10fb 8086:7a11 
g1   82599ES (VM maposmatic)
g2   X520    8086:154d 8086:7b11
g3   82599ES
g4   X520 
g5   X520
g6   X520
n7   X520 (VM openstack)
g8   X520
g9   82598EB 8086:10f1 8086:a21f
g10  X520
g11  82598EB
g12  82598EB
stri X520

t1   82598EB 
t2   82598EB 
t3   82598EB 

stock 82598EB
stock 82598EB
stock X520

Atelier Liens¶

https://github.com/Gandi/packet-journey
http://dpdk.org/doc/guides/linux_gsg/build_dpdk.html
http://dpdk.org/doc/quick-start
http://dpdk.org/browse/apps/pktgen-dpdk/tree/README.md
http://dpdk.org/doc/guides/testpmd_app_ug/index.html
http://dpdk.readthedocs.org/en/v2.2.0/
https://github.com/emmericp/MoonGen
http://www.slideshare.net/movilforum/7-hands-on
http://p4.org/wp-content/uploads/2015/11/Princeton-Demo-Poster.pdf
http://dpdk.org/ml/archives/users/
http://dpdk.org/ml/archives/dev/
http://openvswitch.org/support/ovscon2015/
https://events.ccc.de/congress/2015/Fahrplan/events/7523.html lecture: DDoS mitigation EPIC FAIL collection
https://github.com/aragua/libpacket

Atelier Issues¶

• Issues opened
  • https://github.com/Gandi/packet-journey/issues/20
  • https://github.com/pktgen/Pktgen-DPDK/issues/52
  • https://github.com/emmericp/MoonGen/issues/106
  • http://dpdk.org/ml/archives/dev/2015-December/030798.html

Atelier Build¶

apt-get build-dep linux-image-3.16.0-30-generic 
apt-get install linux-tools-3.16.0-57-generic
apt-get install emacs24-nox libpcap-dev tcpdump iperf iperf3 screen rsync socat bzip2 xz-utils cmake python-sphinx

# Dans /etc/rc.local par exemple
modprobe uio_pci_generic
mkdir -p /mnt/huge
mount -t hugetlbfs nodev /mnt/huge
# si pas GRUB_CMDLINE_LINUX="default_hugepagesz=1G hugepagesz=1G hugepages=4" :
echo 1024 > /sys/devices/system/node/node0/hugepages/hugepages-2048kB/nr_hugepages

# Sources

mkdir ftp
cd ftp
wget http://dpdk.org/browse/dpdk/snapshot/dpdk-2.2.0.tar.gz
cd ..
tar xf ftp/dpdk-2.2.0.tar.gz
git clone https://github.com/Gandi/packet-journey.git
git clone http://dpdk.org/git/apps/pktgen-dpdk
git clone http://dpdk.org/git/dpdk-stable
git clone https://github.com/emmericp/MoonGen.git

# Build

cd dpdk-2.2.0
make config T=x86_64-native-linuxapp-gcc
make install T=x86_64-native-linuxapp-gcc
export RTE_SDK=/root/dpdk-2.2.0
export RTE_TARGET=x86_64-native-linuxapp-gcc
./tools/dpdk_nic_bind.py -s
./tools/dpdk_nic_bind.py --bind=uio_pci_generic 0000:01:00.0
./tools/dpdk_nic_bind.py --bind=uio_pci_generic 0000:01:00.1
./x86_64-native-linuxapp-gcc/build/app/test-pmd/testpmd -c 0x6 -n 2 -- -i

cd ../packet-journey
make

cd ../pktgen-dpdk
make
cd docs
make html