From owner-freebsd-current@FreeBSD.ORG Wed Oct 27 16:54:42 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 696EA16A4CE for ; Wed, 27 Oct 2004 16:54:42 +0000 (GMT) Received: from ox.eicat.ca (ox.eicat.ca [66.96.30.35]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3CE9D43D1F for ; Wed, 27 Oct 2004 16:54:42 +0000 (GMT) (envelope-from dgilbert@daveg.ca) Received: by ox.eicat.ca (Postfix, from userid 66) id C1D06C694; Wed, 27 Oct 2004 12:54:41 -0400 (EDT) Received: by canoe.dclg.ca (Postfix, from userid 101) id 793D01D2BBE; Wed, 27 Oct 2004 12:54:28 -0400 (EDT) From: David Gilbert MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <16767.53956.366966.737912@canoe.dclg.ca> Date: Wed, 27 Oct 2004 12:54:28 -0400 To: Mike Tancsa In-Reply-To: <6.1.2.0.0.20041027124606.09c40768@64.7.153.2> References: <16767.52282.937187.190919@canoe.dclg.ca> <6.1.2.0.0.20041027124606.09c40768@64.7.153.2> X-Mailer: VM 7.17 under 21.5 (beta17) "chayote" (+CVS-20040321) XEmacs Lucid cc: freebsd-current@freebsd.org cc: David Gilbert Subject: Re: IPSec on current. X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 27 Oct 2004 16:54:42 -0000 >>>>> "Mike" == Mike Tancsa writes: Mike> At 12:26 PM 27/10/2004, David Gilbert wrote: >> I'm just trying to diagnose something on 5.3-RC1 running on a dual >> AMD64 platform. Running setkey seems to be hanging the system >> ... has anyone had this happen recently? Mike> I did a bunch of stress testing on RELENG_5 with FAST_IPSEC and Mike> the soekris HiFn card using the HiFn drivers that are in HEAD Mike> just last week. I was able to bring up close to 200 Mike> associations without issue. Which IPSEC are you using ? KAME or Mike> FAST_IPSEC ? If FAST_IPSEC, did you disable INET6 ? I'm using FAST_IPSEC and INET6 is enabled. I see a network performance test from (undated) http://people.freebsd.org/~pjd/netperf/ in which amd64 && FAST_IPSEC was noted as broken. Don't know when that was. So ... are you saying that FAST_IPSEC excludes INET6? Dave. -- ============================================================================ |David Gilbert, Independent Contractor. | Two things can only be | |Mail: dave@daveg.ca | equal if and only if they | |http://daveg.ca | are precisely opposite. | =========================================================GLO================