Accelerated Networking¶
In this tutorial, we will deploy User Plane Function (UPF) in DPDK mode using the sdcore-user-plane-k8s Terraform Module in a VM.
This builds upon the Mastering tutorial. Follow that tutorial until the “Prepare SD-Core User Plane VM”, then come back here.
1. Prepare the SD-Core User Plane VM for DPDK¶
Log in to the user-plane
VM:
lxc exec user-plane --user 1000 -- bash -l
Enable HugePages in the User Plane VM¶
Update Grub to enable 2 units of 1Gi HugePages in the User Plane VM. Then, the VM is gracefully rebooted to activate the settings.
sudo sed -i "s/GRUB_CMDLINE_LINUX=.*/GRUB_CMDLINE_LINUX='default_hugepagesz=1G hugepages=2'/" /etc/default/grub
sudo update-grub
sudo reboot
Log in to the user-plane
VM again:
lxc exec user-plane --user 1000 -- bash -l
Checkpoint 1: Are HugePages enabled ?¶
You should be able to see the 2 units of Free HugePages with 1048576 kB size by executing the following command:
cat /proc/meminfo | grep Huge
The output should be similar to the following:
AnonHugePages: 0 kB
ShmemHugePages: 0 kB
FileHugePages: 0 kB
HugePages_Total: 2
HugePages_Free: 2
HugePages_Rsvd: 0
HugePages_Surp: 0
Hugepagesize: 1048576 kB
Hugetlb: 2097152 kB
Take note of access and core interfaces MAC addresses¶
List the network interfaces to take note of the MAC addresses of the enp6s0
and enp7s0
interfaces.
In this example, the core
interface named enp6s0
has the MAC address 00:16:3e:87:67:eb
and the access
interface named enp7s0
has the MAC address 00:16:3e:31:d7:e0
.
ip link
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: enp5s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
link/ether 00:16:3e:52:85:ef brd ff:ff:ff:ff:ff:ff
3: enp6s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
link/ether 00:16:3e:87:67:eb brd ff:ff:ff:ff:ff:ff
4: enp7s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000
link/ether 00:16:3e:31:d7:e0 brd ff:ff:ff:ff:ff:ff
Load the vfio-pci
driver in the User Plane VM¶
As root
user, load the vfio-pci
driver. To make it persistent upon VM restarts, add it to the /etc/rc.local
file.
cat << EOF | sudo tee -a /etc/rc.local
#!/bin/bash
sudo echo "vfio-pci" > /etc/modules-load.d/vfio-pci.conf
sudo modprobe vfio-pci
EOF
sudo chmod +x /etc/rc.local
sudo /etc/rc.local
Note
Using vfio-pci
, by default, needs IOMMU to be enabled. IOMMU support could be checked by running the command ls /sys/kernel/iommu_groups/
.
If IOMMU groups do not exist in the command output then it is not supported.
In the environments which do not support IOMMU, vfio-pci
needs to be loaded with additional module parameter persistently using the command below.
Enable VFIO driver unsafe IOMMU mode if IOMMU mode is not supported:
cat << EOF | sudo sudo tee -a /etc/rc.local
sudo echo "options vfio enable_unsafe_noiommu_mode=1" > /etc/modprobe.d/vfio-noiommu.conf
sudo echo "Y" > /sys/module/vfio/parameters/enable_unsafe_noiommu_mode
sudo modprobe vfio enable_unsafe_noiommu_mode=1
EOF
sudo chmod +x /etc/rc.local
sudo /etc/rc.local
Bind access
and core
interfaces to VFIO driver¶
Get the PCI addresses of the access and core interfaces.
sudo lshw -c network -businfo
Bus info Device Class Description
========================================================
pci@0000:05:00.0 network Virtio network device
virtio@10 enp5s0 network Ethernet interface
pci@0000:06:00.0 network Virtio network device
virtio@11 enp6s0 network Ethernet interface # In this example `core` with PCI address `0000:06:00.0`
pci@0000:07:00.0 network Virtio network device
virtio@13 enp7s0 network Ethernet interface # In this example `access` with PCI address `0000:07:00.0`
Install driverctl:
sudo apt update
sudo apt install -y driverctl
Bind access
and core
interfaces to vfio-pci
driver persistently:
cat << EOF | sudo tee -a /etc/rc.local
#!/bin/bash
sudo driverctl set-override 0000:07:00.0 vfio-pci
sudo driverctl set-override 0000:06:00.0 vfio-pci
EOF
sudo chmod +x /etc/rc.local
sudo /etc/rc.local
Checkpoint 5: Verify that VFIO-PCI driver is loaded ?¶
Check the current driver of interfaces by running the following command:
sudo driverctl -v list-devices | grep -i net
You should see the following output:
0000:05:00.0 virtio-pci (Virtio network device)
0000:06:00.0 vfio-pci [*] (Virtio network device)
0000:07:00.0 vfio-pci [*] (Virtio network device)
Verify that two VFIO devices are created with a form of noiommu-{a number}
by running the following command:
ls -l /dev/vfio/
You should see a similar output:
crw------- 1 root root 242, 0 Aug 17 22:15 noiommu-0
crw------- 1 root root 242, 1 Aug 17 22:16 noiommu-1
crw-rw-rw- 1 root root 10, 196 Aug 17 21:51 vfio
Install Kubernetes Cluster¶
Install the Microk8s and enable the hostpath-storage
, multus
and metallb
plugins.
sudo snap install microk8s --channel=1.31/stable --classic
sudo microk8s enable hostpath-storage
sudo microk8s addons repo add community https://github.com/canonical/microk8s-community-addons --reference feat/strict-fix-multus
sudo microk8s enable multus
sudo usermod -a -G microk8s $(whoami)
sudo snap alias microk8s.kubectl kubectl
sudo microk8s enable metallb:10.201.0.200/32
newgrp microk8s
Now, update the MicroK8s DNS to point to our DNS server:
sudo microk8s disable dns
sudo microk8s enable dns:10.201.0.1
Configure Kubernetes for DPDK¶
Create SR-IOV Network Device Plugin ConfigMap by replacing the pciAddresses
with the PCI addresses of access
and core
interfaces:
cat <<EOF | kubectl apply -f -
apiVersion: v1
kind: ConfigMap
metadata:
name: sriovdp-config
namespace: kube-system
data:
config.json: |
{
"resourceList": [
{
"resourceName": "intel_sriov_vfio_access",
"selectors": {
"pciAddresses": ["0000:07:00.0"]
}
},
{
"resourceName": "intel_sriov_vfio_core",
"selectors": {
"pciAddresses": ["0000:06:00.0"]
}
}
]
}
EOF
Deploy SR-IOV Network Device Plugin:
kubectl apply -f https://raw.githubusercontent.com/k8snetworkplumbingwg/sriov-network-device-plugin/v3.6.2/deployments/sriovdp-daemonset.yaml
Checkpoint 6: Check the allocatable resources in the Kubernetes node¶
Make sure that there are 2 1Gi HugePages
, 1 intel_sriov_vfio_access
and 1 intel_sriov_vfio_core
are available by running the following command:
sudo snap install jq
kubectl get node -o json | jq '.items[].status.allocatable'
You should see the following output:
{
"cpu": "4",
"ephemeral-storage": "19086016Ki",
"hugepages-1Gi": "2Gi",
"hugepages-2Mi": "0",
"intel.com/intel_sriov_vfio_access": "1",
"intel.com/intel_sriov_vfio_core": "1",
"memory": "14160716Ki",
"pods": "110"
}
Copy vfioveth CNI under /opt/cni/bin on the VM¶
Copy the vfioveth
CNI under /opt/cni/bin
:
sudo mkdir -p /opt/cni/bin
sudo wget -O /opt/cni/bin/vfioveth https://raw.githubusercontent.com/opencord/omec-cni/master/vfioveth
sudo chmod +x /opt/cni/bin/vfioveth
Export the Kubernetes configuration and copy it to the juju-controller
VM:
sudo microk8s.config > /tmp/user-plane-cluster.yaml
scp /tmp/user-plane-cluster.yaml juju-controller.mgmt:
Log out of the VM and go back to the Mastering tutorial, continuing at the Prepare gNB Simulator VM.
When you reach step 5 (Deploy SD-Core User Plane
), come back here instead.
2. Deploy User Plane Function (UPF) in DPDK mode¶
Create a Juju model named user-plane
:
juju add-model user-plane user-plane-cluster
Deploy sdcore-user-plane-k8s
Terraform Module.
In the directory named terraform
, update the main.tf
file.
Please replace the access-interface-mac-address
and core-interface-mac-address
according your environment. They are advised to be noted in the Checkpoint 4
.
cd terraform
cat << EOF >> main.tf
module "sdcore-user-plane" {
source = "git::https://github.com/canonical/terraform-juju-sdcore//modules/sdcore-user-plane-k8s?ref=v1.5"
model = "user-plane"
upf_config = {
cni-type = "vfioveth"
upf-mode = "dpdk"
access-gateway-ip = "10.202.0.1"
access-ip = "10.202.0.10/24"
core-gateway-ip = "10.203.0.1"
core-ip = "10.203.0.10/24"
external-upf-hostname = "upf.mgmt"
access-interface-mac-address = "c2:c8:c7:e9:cc:18" # In this example, its the MAC address of access interface.
core-interface-mac-address = "e2:01:8e:95:cb:4d" # In this example, its the MAC address of core interface
enable-hw-checksum = "false"
gnb-subnet = "10.204.0.0/24"
}
}
EOF
Update the Juju Terraform provider:
terraform init
Deploy SD-Core User Plane:
terraform apply -auto-approve
Monitor the status of the deployment:
juju status --watch 1s --relations
The deployment is ready when the UPF application is in the Active/Idle
state.
It is normal for grafana-agent
to remain in waiting state.
Checkpoint 7: Is UPF running in DPDK mode ?¶
Verify that DPDK BESSD is configured in DPDK mode by using the Juju debug log:
juju debug-log --replay | grep -i dpdk
You should see the following output:
unit-upf-0: 16:18:59 INFO unit.upf/0.juju-log Container bessd configured for DPDK
Go back to the Mastering tutorial and continue from step: 6. Deploy the gNB Simulator.