Date: Wed, 05 Nov 2014 19:19:13 +0300 From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: "Eric L. Camachat" <eric.camachat@gmail.com>, freebsd-net@freebsd.org Subject: Re: netmap in GENERIC, by default, on HEAD Message-ID: <545A4E01.6010404@yandex.ru> In-Reply-To: <545A4B22.6080001@gmail.com> References: <92D22BEA-DDE5-4C6E-855C-B8CACB0319AC@neville-neil.com> <545A47A5.4010601@yandex.ru> <545A4B22.6080001@gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --swOQumfd8nv04GXjc9Va1STEDB6HeShhK Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable On 05.11.2014 19:06, Eric L. Camachat wrote: >>> In two weeks I will enable IPSec by default, again in preparation for= 11. >=20 >> Hi, >=20 >> recently we did some IP forwarding tests and the GENERIC kernel is >> several times faster than GENERIC+IPSEC. Even when IPSEC has no SA. >=20 >> I didn't do test on vanilla kernel, but our kernel is able forward >> IPv4/IPv6 on rate close to 8.6 Mpps. The same kernel compiled with IPS= EC >> can forward only 180 kpps. I think this problem should be solved befor= e >> enabling it in GENERIC. >=20 > I think this is why we need IPSEC in GENERIC to let more tests involved= =2E > Maybe it also helps in kernel SSL encryption (key per IP vs per TCP > session). IPSEC had unresolved bugs for years, and now all will be magically fixed. I think we need some way to enable/disable it on the fly. This may be a compromise. --=20 WBR, Andrey V. Elsukov --swOQumfd8nv04GXjc9Va1STEDB6HeShhK Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJUWk4FAAoJEAHF6gQQyKF6mwUH/jgB+BZKnlA4RucJbYa4TD0+ YmUeLRr9Y6ZYsxuyrxCry1QJ6QZ2pFtQ9sgRryyLEGYTVhipMfHqwXI0Fu1AnIws 1nRNxH6tdianCxRjWGvR+uEEl9jn6sMO4+86KVDJ8HjAzJXs/U7l8VGbsaa5W7xH dgfZ9s6u3032DNG18+HrR20Kp6Ua9RvDeqKmmSAtzZoJ6N/4Aj+jO7jagRwpH/UZ BfPFIspWpfHIHkVvl+wS+5V04uzRGu5RwxGHSfvgqAHCFImX9fHZdYvqKAtXrAA/ tyadxTv5kUqJXb2zArNHUFrh1Wm21RYdtW/kL06fXkoMMhsrBPQXZlSw/OhYmSc= =n9sw -----END PGP SIGNATURE----- --swOQumfd8nv04GXjc9Va1STEDB6HeShhK--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?545A4E01.6010404>