Changes to VPP DAQ to support multiple cores per
Snort instance.

Signed-off-by: Robin Shapley <robin.shapley@arm.com>

Signed-off-by: Robin Shapley <Robin.Shapley@arm.com>
Signed-off-by: Paul Szczepanek <paul.szczepanek@arm.com>
Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Signed-off-by: Luca Vizzarro <luca.vizzarro@arm.com>

Signed-off-by: Robin Shapley <Robin.Shapley@arm.com>
Signed-off-by: Paul Szczepanek <paul.szczepanek@arm.com>
Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Signed-off-by: Luca Vizzarro <luca.vizzarro@arm.com>

Improve error handling in other use cases.

Signed-off-by: Robin Shapley <Robin.Shapley@arm.com>
Signed-off-by: Paul Szczepanek <paul.szczepanek@arm.com>
Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Signed-off-by: Luca Vizzarro <luca.vizzarro@arm.com>

Robin Shapley authored Dec 23, 2024 and Paul Szczepanek committed May 20, 2025

Use ikev2 to setup IPSec for compatability
with Ixia BreakingPoint. Add ability to configure
multiple Snort instances. Add ability to
individually enable components in NGFW.
Add additional ACL rules and startup arguments
to NGFW for benchmarking.

Signed-off-by: Robin Shapley <robin.shapley@arm.com>

Robin Shapley authored May 14, 2025 and Paul Szczepanek committed May 20, 2025

Rebase to latest VPP release, pick up Snort plugin patch and
associated bug fixes, add index out of bounds fix.

Signed-off-by: Robin Shapley <robin.shapley@arm.com>

Yoan Picchi authored May 01, 2025 and Paul Szczepanek committed May 20, 2025

Since vectorscan 5.4.11, the default changed to NOT optimise for the local
machine. This patch config vectorscan to optimise for the local CPU

Signed-off-by: Yoan Picchi <yoan.picchi@arm.com>

Igor Silin authored Apr 02, 2025 and Paul Szczepanek committed May 20, 2025

Add -i option to run_vpp_fw.sh to allow choice of interrupt
or polling mode for VPP Snort plugin and DAQ.
Polling gives >20% improvement in throughput when compared to
interrupt under high loads.

Signed-off-by: Igor Silin <igor.silin@arm.com>

Robin Shapley authored Mar 31, 2025 and Paul Szczepanek committed Apr 09, 2025

Remove dependency on repo tool and external
manifest repository. Update Quickstart guide.

Signed-off-by: Robin Shapley <robin.shapley@arm.com>

Signed-off-by: Robin Shapley <robin.shapley@arm.com>
Change-Id: Ie8ee4751ee3284d52f571a7cfd68ee3b62c308bb

Add Snort CPU pinning option and IPSec async
CPU options.

Signed-off-by: Robin Shapley <robin.shapley@arm.com>
Change-Id: Ifc4bc03f078b503c146470925352613416066bb4

Add IPSec tunnel to ngfw usecase, split traffic generator routing
rules to allow for bidirectional examples of traffic generators

Signed-off-by: Robin Shapley <robin.shapley@arm.com>
Change-Id: I43aaf4b7ecbcd96637ebea8b7eb15e142a982b81

Adding suffixes in all usecase. These suffixes will help in
simultaneous running of different usecases in parallel.
Sockfile and pidfile creation is done based on suffix given from
arguments. Default suffix is username

Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Change-Id: Idfb8e9917e703c9e7a107ec23adf84af64c80738

Dhruv Tripathi authored May 31, 2024 and Kamalakshitha Aligeri committed Oct 07, 2024

Signed-off-by: Dhruv Tripathi <dhruv.tripathi@arm.com>
Change-Id: Ia59ba7d13d9bf12b1004fdf7e045ec1d3f0d7b41

Modify the existing usecase scripts to store pids for stop
in a CI-friendly way, modify rule order and interface
count collection to be deterministic so CI tests do not
fail intermittently.

Signed-off-by: Robin Shapley <robin.shapley@arm.com>
Change-Id: I37e6b8a66ab7e902f03cc6ce833026de52b680d7

Rebase existing patches to v24.06 vpp and v24.03 dpdk
versions. Add patch to skip wireshark configuration
for CI.

Signed-off-by: Robin Shapley <robin.shapley@arm.com>
Change-Id: I128f380f9b1a0cba292578da04f7c951a1bf66a7

Robin Shapley authored Sep 06, 2024 and Kamalakshitha Aligeri committed Sep 18, 2024

Signed-off-by: Robin Shapley <robin.shapley@arm.com>
Change-Id: I7cac486ac7c978788c446617e67382a17b7e3be0

Add a use case for next generation firewall (ngfw) with
a combination of L2 acls, L3 acls, and snort. Example
traffic generators hitting each case and a benign case included.

Signed-off-by: Robin Shapley <robin.shapley@arm.com>
Change-Id: Ic5f0834be141b5cabe6d8c4c63506ebb4a43b2ce

Create ngfw usecase and make firewall and ngfw
scripts download snort rules relative to usecase
directory.

Signed-off-by: Robin Shapley <robin.shapley@arm.com>
Change-Id: Ib40af41c5e869dfb6255064972cc3802beafdb16

Signed-off-by: Robin Shapley <robin.shapley@arm.com>
Change-Id: I60639e4421022dd8840cd4000f07e88015e44cf1

Sanjyot Vaidya authored Jun 06, 2024 and Kamalakshitha Aligeri committed Jul 26, 2024

Adding calculate cores function in tools to avoid repeating this
in every script

Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Reviewed-by: Kamalakshitha Aligeri <Kamalakshitha.Aligeri@arm.com>
Change-Id: I2563ca95428008763a05971294e8db8bf9223fc5

Sanjyot Vaidya authored Jul 08, 2024 and Kamalakshitha Aligeri committed Jul 26, 2024

accidentally deleted the option of breaking the loop
while accepting command line arguments for layer 2 ACL.
Adding acl patch based on external comments.
Added changed commands since external patch changed

Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Reviewed-by: Kamalakshitha Aligeri <Kamalakshitha.Aligeri@arm.com>
Change-Id: Ie388587a7aa1448eeef0dde5bf56ffe7ac520c04

Paul Szczepanek authored Jun 20, 2024 and Nathan Brown committed Jun 28, 2024

Signed-off-by: Paul Szczepanek <paul.szczepanek@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>
Change-Id: I7400e829d4fea099cb0c8b40a27ea47ed1ebc03a

Paul Szczepanek authored Jun 20, 2024 and Nathan Brown committed Jun 28, 2024

Add usecase that uses VPP combined with Snort and Vectorscan
to create a demonstration of a firewall.

Signed-off-by: Paul Szczepanek <paul.szczepanek@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>
Reviewed-by: Dhruv Tripathi <dhruv.tripathi@arm.com>

Change-Id: If1939d0a7f80d11d7c43803e59e2829097862dc1

Paul Szczepanek authored Jun 20, 2024 and Nathan Brown committed Jun 28, 2024

Inside VPP findpath is trying to find installed libdaq.
Since we don't install in the OS we need to feed the
libdaq path to the cmake include path.

Signed-off-by: Paul Szczepanek <paul.szczepanek@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>
Reviewed-by: Dhruv Tripathi <dhruv.tripathi@arm.com>

Change-Id: Icedabf6cdd816a9f6f0935fc40a2c954fca08817

documents for running L2-L3 and L3-l4 ACL scripts

Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>
Change-Id: Ic84a8dae5ac41ba29ee7145eba558520594d69e9

Sanjyot Vaidya authored May 10, 2024 and Nathan Brown committed Jun 25, 2024

scripts to run l2-l3 acls

Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>
Change-Id: I7e1832de00a0aeba0183de2491567590a60fdb38

scripts to run l3-l4 acls

Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>
Change-Id: Ib4f5d81cb4766bc6ca42a26a93db08a6abdc1dc8

Sanjyot Vaidya authored Jun 10, 2024 and Nathan Brown committed Jun 20, 2024

Enable setting parameter to limit number of parallel jobs
when building components.
Keep default as nproc for maximal parallelism

Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>
Change-Id: Id6209e6208586b9b21420427d40e2a41c3f61892

Aditya Ambadipudi authored Apr 09, 2024 and Aditya Ambadipudi committed Apr 18, 2024

Add a target to the Makefile to build and install snort3, vectorscan
 & libdaq. Also install all the dependencies that these three
components need.

Signed-off-by: Aditya Ambadipudi <aditya.ambadipudi@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>

Change-Id: I869bf0f9c812641716d920b9753737b9ebbf8d59

Aditya Ambadipudi authored Apr 13, 2024 and Aditya Ambadipudi committed Apr 16, 2024

List of packages in the setup script is too long. Break it into
smaller lines.

Signed-off-by: Aditya Ambadipudi <aditya.ambadipudi@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>

Change-Id: I5646131526e487ee9bda8022379d9cdf51719cfc

Nathan Brown authored Mar 25, 2024 and Nathan Brown committed Mar 25, 2024

Signed-off-by: Nathan Brown <nathan.brown@arm.com>
Reviewed-by: Dhruv Tripathi <dhruv.tripathi@arm.com>

Change-Id: I82d0777b48fbab2843b26336152dce6a3616f4a9

Nathan Brown authored Mar 19, 2024 and Nathan Brown committed Mar 25, 2024

The commit log check script carried modifications made by Arm. Update
the copyright header in that script to acknowledge these modifications.

Fixes: 007645d3 ("scripts: resolve shell static analysis issues")
Fixes: 2329970d ("tools: verify correct commit tag order")
Signed-off-by: Nathan Brown <nathan.brown@arm.com>
Reviewed-by: Dhruv Tripathi <dhruv.tripathi@arm.com>

Change-Id: Iea4997e11a4eb8a79539cec0a12c61a912d8f173

Sanjyot Vaidya authored Mar 18, 2024 and Nathan Brown committed Mar 19, 2024

Modified license years in a file for easier testing
Since updating license patch of correct years was submitted
in 2024, we have to add 2024 year in a file.

Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>

Change-Id: Ib0956b544374e415e5cb50414e12c0a5380b76d6

updating license years based on copyright notices

Fixes: 17eda859 ("docs: updating license years")
Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>

Change-Id: Ib5014b4603040e35e250ada9db8edb6fd953c11e

updating license years based on copyright notices

Signed-off-by: Sanjyot Vaidya <Sanjyot.Vaidya@arm.com>
Reviewed-by: Nathan Brown <nathan.brown@arm.com>

Change-Id: Ifb84600725e951650d1b50542904a895d7bda0b9

Nathan Brown authored Mar 05, 2024 and Nathan Brown committed Mar 07, 2024

Update changelog with 24.03 release note.

Signed-off-by: Nathan Brown <nathan.brown@arm.com>
Reviewed-by: Dhruv Tripathi <dhruv.tripathi@arm.com>

Change-Id: I6d56fe5fe486c8374e110f93c953837639c89663

Nathan Brown authored Feb 21, 2024 and Nathan Brown committed Feb 21, 2024

Suggested-by: Dhruv Tripathi <dhruv.tripathi@arm.com>
Signed-off-by: Nathan Brown <nathan.brown@arm.com>
Reviewed-by: Dhruv Tripath <dhruv.tripathi@arm.com>
Reviewed-by: Luca Vizzarro <luca.vizzarro@arm.com>

Change-Id: I406801b0daa15757cb9f961606a8838d2c5ed34b

Nathan Brown authored Feb 20, 2024 and Nathan Brown committed Feb 21, 2024

Use the configuration file to specify the host OS and python version
to render the docs.

Currently, only Ubuntu 20.04 is supported.

Signed-off-by: Nathan Brown <nathan.brown@arm.com>
Reviewed-by: Dhruv Tripathi <dhruv.tripathi@arm.com>

Change-Id: I60f779aded7aeb215c3bc2a496c21f5980fc69cd

Signed-off-by: Luca Vizzarro <Luca.Vizzarro@arm.com>
Reviewed-by: Paul Szczepanek <Paul.Szczepanek@arm.com>
Change-Id: I1f2dd26ac2950abcd72158c57bb564ff9c0a52a3