ipsec: fix AES CBC IV generation (CVE-2022-46397)

For AES-CBC, the IV must be unpredictable (see NIST SP800-38a Appendix
C). Chaining IVs like is done by ipsecmb and native backends for the
VNET_CRYPTO_OP_FLAG_INIT_IV is fully predictable.
Encrypt a counter as part of the message, making the (predictable)
counter-generated IV unpredictable.

Fixes: VPP-2037
Type: fix

Change-Id: If4f192d62bf97dda553e7573331c75efa11822ae
Signed-off-by: Benoît Ganne <bganne@cisco.com>

.gitreview

@@ -2,3 +2,4 @@
 host=gerrit.fd.io
 port=29418
 project=vpp
+defaultbranch=stable/2106

Makefile

@@ -131,7 +131,7 @@ else ifeq ($(OS_ID)-$(OS_VERSION_ID),centos-8)
 	RPM_DEPENDS += compat-openssl10 openssl-devel
 	RPM_DEPENDS += python2-devel python36-devel python3-ply
 	RPM_DEPENDS += python3-virtualenv python3-jsonschema
-	RPM_DEPENDS += cmake
+	RPM_DEPENDS += libarchive cmake
 	RPM_DEPENDS_GROUPS = 'Development Tools'
 else
 	RPM_DEPENDS += yum-utils
@@ -220,7 +220,6 @@ help:
 	@echo " docs                 - Build the Sphinx documentation"
 	@echo " docs-venv            - Build the virtual environment for the Sphinx docs"
 	@echo " docs-clean           - Remove the generated files from the Sphinx docs"
-	@echo " stats-fs-help        - Help to build the stats segment file system"
 	@echo ""
 	@echo "Make Arguments:"
 	@echo " V=[0|1]                  - set build verbosity level"
@@ -362,7 +361,7 @@ wipedist:
 .PHONY: wipe
 wipe: wipedist test-wipe $(BR)/.deps.ok
 	$(call make,$(PLATFORM)_debug,$(addsuffix -wipe,$(TARGETS)))
-	@find . -type f -name "*.api.json" ! -path "./test/*" -exec rm {} \;
+	@find . -type f -name "*.api.json" ! -path "./src/*" -exec rm {} \;
 
 .PHONY: rebuild
 rebuild: wipe build
@@ -669,33 +668,6 @@ featurelist: centos-pyyaml
 checkfeaturelist: centos-pyyaml
 	@extras/scripts/fts.py --validate --all
 
-
-# Build vpp_stats_fs
-
-.PHONY: stats-fs-install
-stats-fs-install:
-	@extras/vpp_stats_fs/install.sh install
-
-.PHONY: stats-fs-start
-stats-fs-start:
-	@extras/vpp_stats_fs/install.sh start
-
-.PHONY: stats-fs-cleanup
-stats-fs-cleanup:
-	@extras/vpp_stats_fs/install.sh cleanup
-
-.PHONY: stats-fs-help
-stats-fs-help:
-	@extras/vpp_stats_fs/install.sh help
-
-.PHONY: stats-fs-force-unmount
-stats-fs-force-unmount:
-	@extras/vpp_stats_fs/install.sh unmount
-
-.PHONY: stats-fs-stop
-stats-fs-stop:
-	@extras/vpp_stats_fs/install.sh stop
-
 #
 # Build the documentation
 #

build/external/packages/rdma-core.mk

@@ -42,12 +42,12 @@ endef
 
 define  rdma-core_install_cmds
 	mkdir -p $(rdma-core_install_dir)/lib/pkgconfig
-	cp -av $(rdma-core_build_dir)/include $(rdma-core_install_dir) > $(rdma-core_install_log)
-	cp -v $(rdma-core_build_dir)/lib/pkgconfig/libibverbs.pc \
+	cp -avL $(rdma-core_build_dir)/include $(rdma-core_install_dir) > $(rdma-core_install_log)
+	cp -avL $(rdma-core_build_dir)/lib/pkgconfig/libibverbs.pc \
 	  $(rdma-core_build_dir)/lib/pkgconfig/libmlx5.pc \
 	  $(rdma-core_build_dir)/lib/pkgconfig/libmlx4.pc \
 	  $(rdma-core_install_dir)/lib/pkgconfig >> $(rdma-core_install_log)
-	cp -v $(rdma-core_build_dir)/lib/statics/libibverbs.a \
+	cp -avL $(rdma-core_build_dir)/lib/statics/libibverbs.a \
 	  $(rdma-core_build_dir)/lib/statics/libmlx5.a \
 	  $(rdma-core_build_dir)/lib/statics/libmlx4.a \
 	  $(rdma-core_build_dir)/util/librdma_util.a \

build/external/patches/dpdk_21.02/0001-net-iavf-deprecate-i40evf-pmd.patch

@@ -0,0 +1,232 @@
+From 7b44e3f10ac886eaece0ee3ed217ba7219ec41c1 Mon Sep 17 00:00:00 2001
+From: Robin Zhang <robinx.zhang@intel.com>
+Date: Mon, 19 Apr 2021 03:05:39 +0000
+Subject: [PATCH] net/iavf: deprecate i40evf pmd
+
+The i40evf PMD will be deprecated, iavf will be the only VF driver for
+Intel 700 serial (i40e) NIC family. To reach this, there will be 2 steps:
+
+Step 1: iavf will be the default VF driver, while i40evf still can be
+selected by devarg: "driver=i40evf".
+This is covered by this patch, which include:
+1) add all 700 serial NIC VF device ID into iavf PMD
+2) skip probe if devargs contain "driver=i40evf" in iavf
+3) continue probe if devargs contain "driver=i40evf" in i40evf
+
+Step 2: i40evf and related devarg are removed, this will happen at DPDK
+21.11
+
+Between step 1 and step 2, no new feature will be added into i40evf except
+bug fix.
+
+Signed-off-by: Robin Zhang <robinx.zhang@intel.com>
+Acked-by: Qi Zhang <qi.z.zhang@intel.com>
+Acked-by: Ferruh Yigit <ferruh.yigit@intel.com>
+Acked-by: Beilei Xing <beilei.xing@intel.com>
+---
+ doc/guides/nics/intel_vf.rst         |  6 +++
+ doc/guides/rel_notes/deprecation.rst |  8 ++++
+ drivers/common/iavf/iavf_devids.h    |  2 +
+ drivers/net/i40e/i40e_ethdev_vf.c    | 45 ++++++++++++++++++++++
+ drivers/net/iavf/iavf_ethdev.c       | 57 +++++++++++++++++++++++++++-
+ 5 files changed, 116 insertions(+), 2 deletions(-)
+
+diff --git a/doc/guides/nics/intel_vf.rst b/doc/guides/nics/intel_vf.rst
+index 529ff4a955..fcea8151bf 100644
+--- a/doc/guides/nics/intel_vf.rst
++++ b/doc/guides/nics/intel_vf.rst
+@@ -88,6 +88,12 @@ For more detail on SR-IOV, please refer to the following documents:
+     assignment in hypervisor. Take qemu for example, the device assignment should carry the IAVF device id (0x1889) like
+     ``-device vfio-pci,x-pci-device-id=0x1889,host=03:0a.0``.
+ 
++    Starting from DPDK 21.05, the default VF driver for Intel® 700 Series Ethernet Controller will be IAVF. No new feature
++    will be added into i40evf except bug fix until it's removed in DPDK 21.11. Between DPDK 21.05 and 21.11, by using the
++    ``devargs`` option ``driver=i40evf``, i40evf PMD still can be used on Intel® 700 Series Ethernet Controller, for example::
++
++    -a 81:02.0,driver=i40evf
++
+     When IAVF is backed by an Intel® E810 device, the "Protocol Extraction" feature which is supported by ice PMD is also
+     available for IAVF PMD. The same devargs with the same parameters can be applied to IAVF PMD, for detail please reference
+     the section ``Protocol extraction for per queue`` of ice.rst.
+diff --git a/doc/guides/rel_notes/deprecation.rst b/doc/guides/rel_notes/deprecation.rst
+index 82c1a90a37..ea41be51a7 100644
+--- a/doc/guides/rel_notes/deprecation.rst
++++ b/doc/guides/rel_notes/deprecation.rst
+@@ -125,3 +125,11 @@ Deprecation Notices
+ * cmdline: ``cmdline`` structure will be made opaque to hide platform-specific
+   content. On Linux and FreeBSD, supported prior to DPDK 20.11,
+   original structure will be kept until DPDK 21.11.
++
++* i40e: As there are both i40evf and iavf pmd, the functions of them are
++  duplicated. And now more and more advanced features are developed on iavf.
++  To keep consistent with kernel driver's name
++  (https://patchwork.ozlabs.org/patch/970154/), i40evf is no need to maintain.
++  Starting from 21.05, the default VF driver of i40e will be iavf, but i40evf
++  can still be used if users specify the devarg "driver=i40evf". I40evf will
++  be deleted in DPDK 21.11.
+diff --git a/drivers/common/iavf/iavf_devids.h b/drivers/common/iavf/iavf_devids.h
+index 722c2e4f49..0f98375a09 100644
+--- a/drivers/common/iavf/iavf_devids.h
++++ b/drivers/common/iavf/iavf_devids.h
+@@ -13,5 +13,7 @@
+ #define IAVF_DEV_ID_VF_HV		0x1571
+ #define IAVF_DEV_ID_ADAPTIVE_VF		0x1889
+ #define IAVF_DEV_ID_X722_VF		0x37CD
++#define IAVF_DEV_ID_X722_A0_VF          0x374D
++
+ 
+ #endif /* _IAVF_DEVIDS_H_ */
+diff --git a/drivers/net/i40e/i40e_ethdev_vf.c b/drivers/net/i40e/i40e_ethdev_vf.c
+index 2909b4d894..b5706a6a7f 100644
+--- a/drivers/net/i40e/i40e_ethdev_vf.c
++++ b/drivers/net/i40e/i40e_ethdev_vf.c
+@@ -1656,9 +1656,53 @@ i40evf_dev_uninit(struct rte_eth_dev *eth_dev)
+ 	return 0;
+ }
+ 
++static int
++i40evf_check_driver_handler(__rte_unused const char *key,
++			    const char *value, __rte_unused void *opaque)
++{
++	if (strcmp(value, "i40evf"))
++		return -1;
++
++	return 0;
++}
++
++static int
++i40evf_driver_selected(struct rte_devargs *devargs)
++{
++	struct rte_kvargs *kvlist;
++	const char *key = "driver";
++	int ret = 0;
++
++	if (devargs == NULL)
++		return 0;
++
++	kvlist = rte_kvargs_parse(devargs->args, NULL);
++	if (kvlist == NULL)
++		return 0;
++
++	if (!rte_kvargs_count(kvlist, key))
++		goto exit;
++
++	/* i40evf driver selected when there's a key-value pair:
++	 * driver=i40evf
++	 */
++	if (rte_kvargs_process(kvlist, key,
++			       i40evf_check_driver_handler, NULL) < 0)
++		goto exit;
++
++	ret = 1;
++
++exit:
++	rte_kvargs_free(kvlist);
++	return ret;
++}
++
+ static int eth_i40evf_pci_probe(struct rte_pci_driver *pci_drv __rte_unused,
+ 	struct rte_pci_device *pci_dev)
+ {
++	if (!i40evf_driver_selected(pci_dev->device.devargs))
++		return 1;
++
+ 	return rte_eth_dev_pci_generic_probe(pci_dev,
+ 		sizeof(struct i40e_adapter), i40evf_dev_init);
+ }
+@@ -1681,6 +1725,7 @@ static struct rte_pci_driver rte_i40evf_pmd = {
+ RTE_PMD_REGISTER_PCI(net_i40e_vf, rte_i40evf_pmd);
+ RTE_PMD_REGISTER_PCI_TABLE(net_i40e_vf, pci_id_i40evf_map);
+ RTE_PMD_REGISTER_KMOD_DEP(net_i40e_vf, "* igb_uio | vfio-pci");
++RTE_PMD_REGISTER_PARAM_STRING(net_i40e_vf, "driver=i40evf");
+ 
+ static int
+ i40evf_dev_configure(struct rte_eth_dev *dev)
+diff --git a/drivers/net/iavf/iavf_ethdev.c b/drivers/net/iavf/iavf_ethdev.c
+index 4d37722022..721cdcc14e 100644
+--- a/drivers/net/iavf/iavf_ethdev.c
++++ b/drivers/net/iavf/iavf_ethdev.c
+@@ -127,6 +127,10 @@ static int iavf_set_mc_addr_list(struct rte_eth_dev *dev,
+ 
+ static const struct rte_pci_id pci_id_iavf_map[] = {
+ 	{ RTE_PCI_DEVICE(IAVF_INTEL_VENDOR_ID, IAVF_DEV_ID_ADAPTIVE_VF) },
++	{ RTE_PCI_DEVICE(IAVF_INTEL_VENDOR_ID, IAVF_DEV_ID_VF) },
++	{ RTE_PCI_DEVICE(IAVF_INTEL_VENDOR_ID, IAVF_DEV_ID_VF_HV) },
++	{ RTE_PCI_DEVICE(IAVF_INTEL_VENDOR_ID, IAVF_DEV_ID_X722_VF) },
++	{ RTE_PCI_DEVICE(IAVF_INTEL_VENDOR_ID, IAVF_DEV_ID_X722_A0_VF) },
+ 	{ .vendor_id = 0, /* sentinel */ },
+ };
+ 
+@@ -2331,10 +2335,59 @@ iavf_dcf_cap_selected(struct rte_devargs *devargs)
+ 	return ret;
+ }
+ 
++static int
++iavf_drv_i40evf_check_handler(__rte_unused const char *key,
++			      const char *value, __rte_unused void *opaque)
++{
++	if (strcmp(value, "i40evf"))
++		return -1;
++
++	return 0;
++}
++
++static int
++iavf_drv_i40evf_selected(struct rte_devargs *devargs, uint16_t device_id)
++{
++	struct rte_kvargs *kvlist;
++	const char *key = "driver";
++	int ret = 0;
++
++	if (device_id != IAVF_DEV_ID_VF &&
++	    device_id != IAVF_DEV_ID_VF_HV &&
++	    device_id != IAVF_DEV_ID_X722_VF &&
++	    device_id != IAVF_DEV_ID_X722_A0_VF)
++		return 0;
++
++	if (devargs == NULL)
++		return 0;
++
++	kvlist = rte_kvargs_parse(devargs->args, NULL);
++	if (kvlist == NULL)
++		return 0;
++
++	if (!rte_kvargs_count(kvlist, key))
++		goto exit;
++
++	/* i40evf driver selected when there's a key-value pair:
++	 * driver=i40evf
++	 */
++	if (rte_kvargs_process(kvlist, key,
++			       iavf_drv_i40evf_check_handler, NULL) < 0)
++		goto exit;
++
++	ret = 1;
++
++exit:
++	rte_kvargs_free(kvlist);
++	return ret;
++}
++
+ static int eth_iavf_pci_probe(struct rte_pci_driver *pci_drv __rte_unused,
+ 			     struct rte_pci_device *pci_dev)
+ {
+-	if (iavf_dcf_cap_selected(pci_dev->device.devargs))
++	if (iavf_dcf_cap_selected(pci_dev->device.devargs) ||
++	    iavf_drv_i40evf_selected(pci_dev->device.devargs,
++				     pci_dev->id.device_id))
+ 		return 1;
+ 
+ 	return rte_eth_dev_pci_generic_probe(pci_dev,
+@@ -2357,7 +2410,7 @@ static struct rte_pci_driver rte_iavf_pmd = {
+ RTE_PMD_REGISTER_PCI(net_iavf, rte_iavf_pmd);
+ RTE_PMD_REGISTER_PCI_TABLE(net_iavf, pci_id_iavf_map);
+ RTE_PMD_REGISTER_KMOD_DEP(net_iavf, "* igb_uio | vfio-pci");
+-RTE_PMD_REGISTER_PARAM_STRING(net_iavf, "cap=dcf");
++RTE_PMD_REGISTER_PARAM_STRING(net_iavf, "cap=dcf driver=i40evf");
+ RTE_LOG_REGISTER(iavf_logtype_init, pmd.net.iavf.init, NOTICE);
+ RTE_LOG_REGISTER(iavf_logtype_driver, pmd.net.iavf.driver, NOTICE);
+ #ifdef RTE_LIBRTE_IAVF_DEBUG_RX
+-- 
+2.20.1
+

docs/archive/index.rst

@@ -1,50 +0,0 @@
-.. _archive:
-
-########
-Archive
-########
-
-.. toctree::
-
-*****
-2018
-*****
-
-`<https://docs.fd.io/vpp/18.11>`_
-
-`<https://docs.fd.io/vpp/18.10>`_
-
-`<https://docs.fd.io/vpp/18.07.1>`_
-
-`<https://docs.fd.io/vpp/18.04>`_
-
-`<https://docs.fd.io/vpp/18.01.2>`_
-
-`<https://docs.fd.io/vpp/18.01.1>`_
-
-`<https://docs.fd.io/vpp/18.01>`_
-
-
-*****
-2017
-*****
-
-`<https://docs.fd.io/vpp/17.10>`_
-
-`<https://docs.fd.io/vpp/17.07.01>`_
-
-`<https://docs.fd.io/vpp/17.07>`_
-
-`<https://docs.fd.io/vpp/17.04>`_
-
-`<https://docs.fd.io/vpp/17.01.1>`_
-
-`<https://docs.fd.io/vpp/17.01>`_
-
-*****
-2016
-*****
-
-`<https://docs.fd.io/vpp/16.09>`_
-
-`<https://docs.fd.io/vpp/16.12>`_

docs/events/Community/TSC/2016_04_28_pariseventproposal.rst

@@ -1,23 +0,0 @@
-.. _2016_04_28_pariseventproposal:
-
-.. toctree::
-
-########################################
-2016 May 31st Paris FD.io event proposal
-########################################
-
-Event
------
-
-This presentation was held on May 31st 206.
-
-Speakers
---------
-
-Pierre Pfister
-
-Presentation
-------------
-
-`Powerpoint <https://wiki.fd.io/images/d/d1/2016_May_Paris_FD.io_Traing_proposal.pptx>`_
-

docs/events/Community/TSC/index.rst

@@ -1,15 +0,0 @@
-.. _TSCmeeting:
-
-.. toctree::
-
-########################
-April 2016 - TSC Meeting
-########################
-
-.. toctree::
-    :maxdepth: 1
-    
-    2016_04_28_pariseventproposal.rst
-    
-
-    

docs/events/Community/VPP/2017_04_25_buildingincontainerspoc.rst

@@ -1,22 +0,0 @@
-.. _2017_04_25_buildingincontainerspoc:
-
-.. toctree::
-
-##########################
-Building In Containers PoC
-##########################
-
-Event
------
-
-This presentation was held on April 27, 2017
-
-Speakers
---------
-
-Ed Kern
-
-Presentation
-------------
-
-`PDF <https://wiki.fd.io/images/a/a8/Building_in_Containers_PoC.pdf>`_

docs/events/Community/VPP/index.rst

@@ -1,14 +0,0 @@
-.. _VPPCall:
-
-.. toctree::
-
-#####################
-April 2017 - VPP Call
-#####################
-
-.. toctree::
-    :maxdepth: 1
-    
-    2017_04_25_buildingincontainerspoc.rst
-
-    

docs/events/Conferences/CiscoLiveUS/2017_06_26_vppcontainernetwork.rst

@@ -1,22 +0,0 @@
-.. _2017_06_26_vppcontainernetwork:
-
-.. toctree::
-
-#########################################
-VPP and container networking at 110Gbps	
-#########################################
-
-Event
------
-
-This presentation was held on June 26th, 2017.
-
-Speakers
---------
-
-Keith Burns
-
-Slideshow
----------
-
-`Powerpoint Presentation <https://wiki.fd.io/images/7/7b/Cisco_Live_VPP_and_container_networking_%28BRKSDN-2119%29.pptx>`_

docs/events/Conferences/CiscoLiveUS/index.rst

@@ -1,12 +0,0 @@
-.. _CiscoLiveUS:
-
-.. toctree::
-
-#########################
-June 2017 - Cisco Live US
-#########################
-
-.. toctree::
-    :maxdepth: 1
-
-    2017_06_26_vppcontainernetwork.rst

docs/events/Conferences/Linuxcon/2016_08_24_introfdio.rst

@@ -1,22 +0,0 @@
-.. _2016_08_24_introfdio:
-
-.. toctree::
-
-##############
-Intro to FD.io
-##############
-
-Event
------
-
-This presentation was held on August 24th, 2016.
-
-Speakers
---------
-
-Ed Warnicke
-
-Presentation
--------------
-
-`Powerpoint <https://wiki.fd.io/images/8/87/Fd.io_intro_-_Linuxcon_NA_2016.pptx>`_

docs/events/Conferences/Linuxcon/2016_08_24_onelispintro.rst

@@ -1,22 +0,0 @@
-.. _2016_08_24_onelispintro:
-
-.. toctree::
-
-###############
-ONE-LISP Intro
-###############
-
-Event
------
-
-This presentation was held on August 24th, 2016.
-
-Speakers
---------
-
-Florin Coras
-
-Presentation
-------------
-
-`Powerpoint <https://wiki.fd.io/images/3/3e/ONE-LISP_-_Linuxcon_NA_2016.pptx>`_

docs/events/Conferences/Linuxcon/index.rst

@@ -1,13 +0,0 @@
-.. _Linuxcon:
-
-.. toctree::
-
-##############################
-August 2017 - Linuxcon NA 2016
-##############################
-
-.. toctree::
-    :maxdepth: 1
-
-    2016_08_24_introfdio
-    2016_08_24_onelispintro

docs/events/Conferences/OSCON/2017_05_11_40gbpsipsec.rst

@@ -1,22 +0,0 @@
-.. _2017_05_11_40gbpsipsec:
-
-.. toctree::
-
-##################################
-40Gbps IPsec on commodity hardware
-##################################
-
-Event
------
-
-This presentation was held on May 11th, 2017.
-
-Speakers
---------
-
-Jim Thompson
-
-Slideshow
----------
-
-`PDF <https://wiki.fd.io/images/1/1d/40_Gbps_IPsec_on_commodity_hardware.pdf>`_

docs/events/Conferences/OSCON/index.rst

@@ -1,13 +0,0 @@
-.. _OSCON:
-
-.. toctree::
-
-################
-May 2017 - OSCON
-################
-
-.. toctree::
-    :maxdepth: 1
-
-    2017_05_11_40gbpsipsec.rst
-    

docs/events/MeetUps/FDIOVPPTerabit/2017_07_11_fdiouniversalterabitnetwork.rst

@@ -1,22 +0,0 @@
-.. _2017_07_11_fdiouniversalterabitnetwork:
-
-.. toctree::
-
-############################################
-FD.io: A Universal Terabit Network Dataplane
-############################################
-
-Event
------
-
-This presentation was held on July 11, 2017
-
-Speakers
---------
-
-Maciek Konstantynowicz
-
-Slideshow
----------
-
-`PDF <https://wiki.fd.io/images/2/24/Fdio-Purley-Demo-v9-mathsfix-pdf.pdf>`_

docs/events/MeetUps/FDIOVPPTerabit/index.rst

@@ -1,12 +0,0 @@
-.. _FDIOVPPTerabit:
-
-.. toctree::
-
-#############################
-July 2017 - FD.io VPP Terabit	
-#############################
-
-.. toctree::
-    :maxdepth: 1
-
-    2017_07_11_fdiouniversalterabitnetwork.rst

docs/events/MeetUps/IntelSDN/2017_06_13_clearcontainers.rst

@@ -1,23 +0,0 @@
-.. _2017_06_13_fdiointeldevsdnnfvdevlab:
-
-.. toctree::
-
-###############################
-Clear Containers + VPP Overview
-###############################
-
-Event
------
-
-This presentation was held on June 13, 2017
-
-Speakers
---------
-
-Manohar Castelino,
-Eric Erns
-
-Slideshow
----------
-
-`PDF <https://wiki.fd.io/images/1/16/Clear_Containers%2BVPP-overview-JuneDevLab.pdf>`_

docs/events/MeetUps/IntelSDN/2017_06_13_fdiooverview.rst

@@ -1,23 +0,0 @@
-.. _2017_06_13_fdiointeldevsdnnfvdevlab:
-
-.. toctree::
-
-##############
-FD.io Overview
-##############
-
-Event
------
-
-This presentation was held on June 13, 2017
-
-Speakers
---------
-
-Jerome Tollet,
-Ed Warnicke
-
-Presentation
-------------
-
-https://wiki.fd.io/images/8/87/Fdio-Intel_Developer_SDN_NFV_Dev_Lab.pptx

docs/events/MeetUps/IntelSDN/index.rst

@@ -1,12 +0,0 @@
-.. _IntelSDN:
-
-.. toctree::
-
-#################################
-June 2017 - Intel SDN/NFV Dev Lab
-#################################
-
-.. toctree::
-
-    2017_06_13_fdiooverview
-    2017_06_13_clearcontainers

docs/events/MeetUps/TWS/2016_08_30_introtodpdkcryptoandvpp.rst

@@ -1,24 +0,0 @@
-.. _2016_08_30_introtodpdkcryptoandvpp:
-
-.. toctree::
-
-###################################
-Intro to DPDK Cryptodev and VPP PoC
-###################################
-
-Event
------
-
-This presentation was held on August 30, 2016
-
-Speakers
---------
-
-Tommy Long,
-Sergio Gonzalez Monroy
-
-Slideshow
----------
-
-`Powerpoint <https://wiki.fd.io/images/2/2a/FDio_Cryptodev_Pres_Final_v2.pptx>`_
-

docs/events/MeetUps/TWS/index.rst

@@ -1,14 +0,0 @@
-.. _TWSMeeting:
-
-.. toctree::
-
-#########################
-August 2016 - TWS Meeting
-#########################
-
-.. toctree::
-    :maxdepth: 1
-
-    2016_08_30_introtodpdkcryptoandvpp.rst
-
-    

docs/events/MeetUps/fdioWebinar/2016_05_25_softwaredataplanes.rst

@@ -1,23 +0,0 @@
-.. _2016_05_25_softwaredataplanes:
-
-.. toctree::
-
-##########################################
-FD.io is the Future of Software Dataplanes
-##########################################
-
-Event
------
-
-This presentation was held on May, 5 2016
-
-Speakers
---------
-
-Ed Warnicke
-
-Slideshow
----------
-
-`Powerpoint <https://wiki.fd.io/images/8/8b/Fdio_is_the_future_of_software_dataplanes_-_v2.pptx>`_
-

docs/events/MeetUps/fdioWebinar/index.rst

@@ -1,12 +0,0 @@
-.. _fdioWebinar:
-
-.. toctree::
-
-########################
-May 2016 - FD.io Webinar	
-########################
-
-.. toctree::
-    :maxdepth: 1
-
-    2016_05_25_softwaredataplanes

docs/events/Summits/DPDKSummit/2016/2016_08_10_tldkintro.rst

@@ -1,34 +0,0 @@
-.. _2016_08_10_tldkintro:
-
-.. toctree::
-
-##########
-TLDK intro
-##########
-
-Event
------
-
-This presentation describes the Transport Layer Development Kit (TLDK),
-which is an FD.io project that provides a set of libraries to accelerate L4-L7 protocol 
-processing for DPDK-based applications. The initial implementation supports UDP,
-with work on TCP in progress. The project scope also includes integration of 
-TLDK libraries into Vector Packet Processing (VPP) graph nodes to provide a host stack.
-This presentation was held during the DPDK US Summit on August 10th, 2016.
-
-Speakers
---------
-
-* Konstantin Ananyev 
-
-Slideshow
----------
-
-`Presentation Powerpoint <https://wiki.fd.io/images/d/d3/Tldk%40160805u2.pptx>`_
-
-Video
------
-
-`Video Presentation <https://www.youtube.com/watch?v=GiEXLrJuAxg>`_
-
-

docs/events/Summits/DPDKSummit/2016/index.rst

@@ -1,12 +0,0 @@
-.. _2016:
-
-.. toctree::
-
-#########################
-August 2016 - DPDK Summit
-#########################
-
-.. toctree:: 
-    :maxdepth: 1
-
-    2016_08_10_tldkintro.rst

docs/events/Summits/DPDKSummit/2017/2017_11_15_dpdkvppandpfsense.rst

@@ -1,37 +0,0 @@
-.. _2017_11_15_dpdkvppandpfsense:
-
-.. toctree::
-
-#########################
-DPDK, VPP and pfSense 3.0
-#########################
-
-Event
------
-
-pfSense is a open source firewall/vpn appliance,
-based on FreeBSD, started in 2006 with over 1M active installs.
-We are basing pfSense release 3.0 on FD.io's VPP,
-leveraging key DPDK components including cryptodev,
-while adding a CLI and RESTCONF layer, 
-leveraging FRRouting and Strongswan.
-
-This presentation was held during the 2017 DPDK Summit
- on September 26th, 2017.
-
-Speakers
---------
-
-* Jim Thompson
-
-Slideshow
----------
-
-`Presentation PDF <dpdksummit.com/Archive/pdf/2017Userspace/DPDK-Userspace2017-Day2-9-pfSense.pdf>`_
-
-Video
------
-
-`Video Presentation <https://www.youtube.com/watch?v=lMJy8vKm47E>`_
-
-

docs/events/Summits/DPDKSummit/2017/2017_11_15_vpphoststack.rst

@@ -1,42 +0,0 @@
-.. _2017_11_15_vpphoststack:
-
-.. toctree::
-
-##############
-VPP Host Stack
-##############
-
-Event
------
-
-Although packet forwarding with VPP and DPDK can now scale to tens of millions
-of packets per second per core, lack of alternatives to kernel-based
-sockets means that containers and host applications cannot
-take full advantage of this speed. To fill this gap, VPP 
-was recently added functionality specifically designed 
-to allow containerized or host applications to communicate 
-via shared-memory if co-located, or via a high-performance
-TCP stack inter-host.
-
-This presentation was held during the 2017 DPDK Summit
- on September 26th, 2017.
-
-Speakers
---------
-
-* Florin Coras
-* Dave Barach
-* Keith Burns 
-* Dave Wallace
-
-Slideshow
----------
-
-`Presentation PDF <https://wiki.fd.io/images/f/f2/Vpp-hoststack.pdf>`_
-
-Video
------
-
-`Video Presentation <https://www.youtube.com/watch?v=NWG7A0are00>`_
-
-