[dpdk-users] ipsec-secgw fails to run as DEV_TX_OFFLOAD_SECURITY and DEV_RX_OFFLOAD_SECURITY missing in Intel NIC X722

[Das, Surajit]

Hi DPDK Experts,

I tried running ipsec-secgw on Intel VFs created from PF  X722 for 10GBASE-T.
The app fails to run because the capabilities in bit mask dev_info.tx_offload_capa and dev_info.tx_offload_capa does not cover DEV_RX_OFFLOAD_SECURITY and DEV_TX_OFFLOAD_SECURITY.

Is this because the NIC itself does not support this capability?
Or does the igb_uio driver need to be compiled with some additional flags?

Is there anyway to run ipsec-secgw with encryption handled in software?

Versions:
dpdk-stable-19.11.6
3.10.0-1062.el7.x86_64
CentOS Linux release 7.7.1908 (Core)

NIC version:
Intel Corporation Ethernet Virtual Function 700 Series (rev 09)

Command Arguments:
./build/ipsec-secgw -l 6,7 -w 00:0b.0 -w 00:0c.0 --vdev "crypto_null" --log-level 8 --socket-mem 1024 -- -p 0xf -P -u 0x2 --config="(0,0,6),(1,0,7)" -f /root/config_file

Error Message:

EAL: Error - exiting with code: 1
  Cause: Error: port 1 required RX offloads: 0x800e, avaialbe RX offloads: 0x2a6f


Regards,
Surajit