sudo ./dpdk-ipsec-secgw -l 0,1 -n 2 --socket-mem 0,1024 -a d8:00.0 -a d8:00.1 --vdev "crypto_aesni_mb" --vdev "crypto_null" -- -p 0xf -P -u 0x1 --config="(0,0,0),(1,0,1)" -f test.cfg
#SP IPv4 rules
sp ipv4 out esp protect 1005 pri 1 dst 192.168.105.0/24 sport 0:65535 dport 0:65535
sp ipv4 in esp protect 5 pri 1 dst 192.168.105.0/24 sport 0:65535 dport 0:65535
#SA rules
sa out 1005 aead_algo aes-128-gcm aead_key 2b:7e:15:16:28:ae:d2:a6:ab:f7:15:88:09:cf:4f:3d:de:ad:be:ef \
mode ipv4-tunnel src 172.16.1.5 dst 172.16.2.5 \
port_id 1 \
type no-offload \
sa in 5 aead_algo aes-128-gcm aead_key 2b:7e:15:16:28:ae:d2:a6:ab:f7:15:88:09:cf:4f:3d:de:ad:be:ef \
mode ipv4-tunnel src 172.16.1.5 dst 172.16.2.5 \
port_id 1 \
type no-offload \
#Routing rules
rt ipv4 dst 172.16.2.5/32 port 1
rt ipv4 dst 192.168.105.10/32 port 0
enp216s16: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.1.35 netmask 255.255.255.0 broadcast 192.168.1.255
ether 8e:83:3d:dd:0c:e4 txqueuelen 1000 (Ethernet)
RX packets 11812 bytes 740018 (740.0 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 55 bytes 7357 (7.3 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
enp216s16f2: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.1.36 netmask 255.255.255.0 broadcast 192.168.1.255
inet6 fe80::97e9:fbe2:d9b3:cef0 prefixlen 64 scopeid 0x20<link>
ether 66:10:1f:f0:87:94 txqueuelen 1000 (Ethernet)
RX packets 11869 bytes 744482 (744.4 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 34 bytes 4965 (4.9 KB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0