From owner-freebsd-questions@FreeBSD.ORG  Fri Nov 14 12:01:27 2008
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 4BB151065675
	for <freebsd-questions@freebsd.org>;
	Fri, 14 Nov 2008 12:01:27 +0000 (UTC)
	(envelope-from riaank@gmail.com)
Received: from fg-out-1718.google.com (fg-out-1718.google.com [72.14.220.155])
	by mx1.freebsd.org (Postfix) with ESMTP id D3E078FC25
	for <freebsd-questions@freebsd.org>;
	Fri, 14 Nov 2008 12:01:26 +0000 (UTC)
	(envelope-from riaank@gmail.com)
Received: by fg-out-1718.google.com with SMTP id l26so1025102fgb.35
	for <freebsd-questions@freebsd.org>;
	Fri, 14 Nov 2008 04:01:24 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma;
	h=domainkey-signature:received:received:message-id:date:from:to
	:subject:mime-version:content-type;
	bh=4yEe859LuicsbeyjHpWZEuCxyFeJSzrP8sGiPs0S39o=;
	b=EnsUj73zG+S463TB89QRxSPek21P4G2i5vZgO2/ypgKG9CNfB20ttRIg2HZV9ld7f4
	AMIX6cU+4wUI7u+LAQm8iMlpnVaTzxxRAGV25IkDS/S5fa9MLTjXw6DWuhOzXYk59Y37
	oqpNaT/7d9h9OHicLp57EdW+ag0Hg4kEU9Qg0=
DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma;
	h=message-id:date:from:to:subject:mime-version:content-type;
	b=sthJbZQuQ3moeIN+z/ST3rQXYD2ju1cdZMu5ij23L8EOhi4Erl3NUcXN6ab0WfJvqR
	/amwE5OTyxwCYvMJnkd/hdfEtC8UrJva+SR6gWgFQkwGELOkUE5jVGMu5W5NdQTlrD0z
	gprRCMrCrF47bVFRvlC/r0aYpcOVjl7M4SaLI=
Received: by 10.187.201.15 with SMTP id d15mr104094faq.11.1226662678106;
	Fri, 14 Nov 2008 03:37:58 -0800 (PST)
Received: by 10.187.221.16 with HTTP; Fri, 14 Nov 2008 03:37:58 -0800 (PST)
Message-ID: <85c4b1850811140337n75321b0ao24a1361b076002c5@mail.gmail.com>
Date: Fri, 14 Nov 2008 13:37:58 +0200
From: "Riaan Kruger" <riaank@gmail.com>
To: "FreeBSD Questions" <freebsd-questions@freebsd.org>
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Subject: IPsec's use of processors
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 14 Nov 2008 12:01:27 -0000

I would like to know how IPsec makes use of a multi processor machine?

I have gateway (FreeBSD 7.0) with four SAs configured. When testing
throughput through the configured SAs, I see (with systat) that only one cpu
works really hard (+-10% idle min), two others work a bit (+-70% idle min)
and the fourth CPU does pretty much nothing.

Is this normal, shouldn't at least the two cpus work hard because of the
high throughput?

I hope i am on the right list.

Riaan