Cody Doucette
Cody Doucette
We have found that even though a NIC may report that it supports ntuple filters, either the NIC or the driver may not support matching IPv6 addresses in practice. Therefore,...
More recent versions of DPDK add the ability to do a bulk freeing of packets. We should adopt it into Gatekeeper when we upgrade DPDK.
Gatekeeper currently supports some Linux applications and services through the KNI: - ARP and ND, since Gatekeeper intercepts ARP/ND requests from the KNI and replies using the Gatekeeper L2 resolution...
We should be able to get the relevant information to implement ECMP through the `RTA_MULTIPATH` attribute of the rtnetlink library. There's already a stub for handling this functionality in `cps/kni.c`....
We should be able to manually add ARP and ND entries to the LLS cache using the dynamic configuration block.
Traffic on DPDK ports can be captured and displayed for debugging purposes: https://doc.dpdk.org/guides/howto/packet_capture_framework.html We should investigate whether Gatekeeper can support this feature, either by default or in a debugging mode....
The LLS block currently checks to make sure that we're only receiving packets that are destined to us, which is one of four L2 addresses. The NIC should be able...
For example, is the Gatekeeper front interface expected to be in the same subnet as the back interface, a different subnet, or it does not matter? Similarly, is the back...
When it is available in hardware, we should enable RX checksum validation on IPv4 headers, and possibly on UDP/TCP headers. Note that setting the RX checksum offloads doesn't make the...
Gatekeeper still has two hardware requirements that the virtio driver/device doesn't support: checksumming and jumbo frames. Jumbo frames could be made to be configurably on or off. Checksumming will require...