Date: Sat, 15 Nov 2008 14:15:05 +0100 From: Patrick =?ISO-8859-15?Q?Lamaizi=E8re?= <patfbsd@davenulle.org> To: freebsd-questions@freebsd.org Cc: riaank@gmail.com Subject: Re: IPsec's use of processors Message-ID: <20081115141505.029273ca@baby-jane-lamaiziere-net.local> In-Reply-To: <85c4b1850811140337n75321b0ao24a1361b076002c5@mail.gmail.com> References: <85c4b1850811140337n75321b0ao24a1361b076002c5@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Le Fri, 14 Nov 2008 13:37:58 +0200, "Riaan Kruger" <riaank@gmail.com> a écrit : > I would like to know how IPsec makes use of a multi processor machine? > > I have gateway (FreeBSD 7.0) with four SAs configured. When testing > throughput through the configured SAs, I see (with systat) that only > one cpu works really hard (+-10% idle min), two others work a bit > (+-70% idle min) and the fourth CPU does pretty much nothing. > > Is this normal, shouldn't at least the two cpus work hard because of > the high throughput? I guess that's because the cryptographic requests are dispatched and done by two kernel threads. The thread 'crypto' dispatches and processes the requests, the thread 'crypto-returns' returns the results. You can see these kernel threads with top S H Regards.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20081115141505.029273ca>