Date: Wed, 05 Nov 2014 19:19:13 +0300 From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: "Eric L. Camachat" <eric.camachat@gmail.com>, freebsd-net@freebsd.org Subject: Re: netmap in GENERIC, by default, on HEAD Message-ID: <545A4E01.6010404@yandex.ru> In-Reply-To: <545A4B22.6080001@gmail.com> References: <92D22BEA-DDE5-4C6E-855C-B8CACB0319AC@neville-neil.com> <545A47A5.4010601@yandex.ru> <545A4B22.6080001@gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On 05.11.2014 19:06, Eric L. Camachat wrote: >>> In two weeks I will enable IPSec by default, again in preparation for 11. > >> Hi, > >> recently we did some IP forwarding tests and the GENERIC kernel is >> several times faster than GENERIC+IPSEC. Even when IPSEC has no SA. > >> I didn't do test on vanilla kernel, but our kernel is able forward >> IPv4/IPv6 on rate close to 8.6 Mpps. The same kernel compiled with IPSEC >> can forward only 180 kpps. I think this problem should be solved before >> enabling it in GENERIC. > > I think this is why we need IPSEC in GENERIC to let more tests involved. > Maybe it also helps in kernel SSL encryption (key per IP vs per TCP > session). IPSEC had unresolved bugs for years, and now all will be magically fixed. I think we need some way to enable/disable it on the fly. This may be a compromise. -- WBR, Andrey V. Elsukov [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJUWk4FAAoJEAHF6gQQyKF6mwUH/jgB+BZKnlA4RucJbYa4TD0+ YmUeLRr9Y6ZYsxuyrxCry1QJ6QZ2pFtQ9sgRryyLEGYTVhipMfHqwXI0Fu1AnIws 1nRNxH6tdianCxRjWGvR+uEEl9jn6sMO4+86KVDJ8HjAzJXs/U7l8VGbsaa5W7xH dgfZ9s6u3032DNG18+HrR20Kp6Ua9RvDeqKmmSAtzZoJ6N/4Aj+jO7jagRwpH/UZ BfPFIspWpfHIHkVvl+wS+5V04uzRGu5RwxGHSfvgqAHCFImX9fHZdYvqKAtXrAA/ tyadxTv5kUqJXb2zArNHUFrh1Wm21RYdtW/kL06fXkoMMhsrBPQXZlSw/OhYmSc= =n9sw -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?545A4E01.6010404>