Date: Sun, 2 May 2021 16:48:32 +0300 From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: =?UTF-8?Q?=c3=96zkan_KIRIK?= <ozkan.kirik@gmail.com>, FreeBSD Net <freebsd-net@freebsd.org> Subject: Re: IPsec performace - netisr hits %100 Message-ID: <6fb8384a-5fe6-9d59-6e35-09b72bd79c30@yandex.ru> In-Reply-To: <CAAcX-AF=0s5tueCuanFKkoALNkRnWJ-8QrzfCqSu=ReoWvqMug@mail.gmail.com> References: <CAAcX-AF=0s5tueCuanFKkoALNkRnWJ-8QrzfCqSu=ReoWvqMug@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --55swJcWbEueFWtwL9iIn3zNBPatPykmix Content-Type: multipart/mixed; boundary="Dmp2wHxJlcZPTXhJ2rsNwVvmgJIiDawK0"; protected-headers="v1" From: "Andrey V. Elsukov" <bu7cher@yandex.ru> To: =?UTF-8?Q?=c3=96zkan_KIRIK?= <ozkan.kirik@gmail.com>, FreeBSD Net <freebsd-net@freebsd.org> Message-ID: <6fb8384a-5fe6-9d59-6e35-09b72bd79c30@yandex.ru> Subject: Re: IPsec performace - netisr hits %100 References: <CAAcX-AF=0s5tueCuanFKkoALNkRnWJ-8QrzfCqSu=ReoWvqMug@mail.gmail.com> In-Reply-To: <CAAcX-AF=0s5tueCuanFKkoALNkRnWJ-8QrzfCqSu=ReoWvqMug@mail.gmail.com> --Dmp2wHxJlcZPTXhJ2rsNwVvmgJIiDawK0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: quoted-printable 30.04.2021 23:11, =C3=96zkan KIRIK =D0=BF=D0=B8=D1=88=D0=B5=D1=82: > Hello, >=20 > I'm using FreeBSD stable/12 built world on 12 April 2021. > my setup is: > [freebsd host cc0] <--------> [cc1 - same freebsd, but jail] >=20 > without IPsec, I can achieve easily to 20Gbps. (test was run with diffe= rent > source IPs using multiple iperf to scale across multiple queues) > My hardware is Xeon D-2146NT (8 core + SoC Qat), cc0 and cc1 is Chelsio= > T62100-LP-CR. I suspect you are using 9k MTU on cc(4) interfaces. If you set bigger MTU on the if_ipsec(4) interfaces, this can increase throughput. --=20 WBR, Andrey V. Elsukov --Dmp2wHxJlcZPTXhJ2rsNwVvmgJIiDawK0-- --55swJcWbEueFWtwL9iIn3zNBPatPykmix Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature" -----BEGIN PGP SIGNATURE----- wsB5BAABCAAjFiEE5lkeG0HaFRbwybwAAcXqBBDIoXoFAmCOrbAFAwAAAAAACgkQAcXqBBDIoXpg NwgAmm4QtsWn/gaHoFXmHA6SyJQjCnd7xtlMSzb4MEfiMLZS3HR6JJtX8GHMVqGnyfbens2H2ETc WW3QRVeHUIEs0cXlC+xkNWl/1IV4r0X8RribzbATVtYEM+hbMpFw77r3gGmz6jL1HljHIEbpCah8 E7QJy+GWkY5Fwc27+T6lHd97LFfsQYZvqe5QnBs0otlyVj5hLaVC1UWWIheQQcQq+3s+yqu5hKEd V7lLaNorwC36VzB1NWouS09DEchfvd5C35ou5l1f3UAak/vec0YgTDSeUsLRSCtbB0j/6M1leHNW ccvmxR4LZ4YVEoYzJ9uikvqEHpnxCuc5DODcCflkWw== =uCuc -----END PGP SIGNATURE----- --55swJcWbEueFWtwL9iIn3zNBPatPykmix--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6fb8384a-5fe6-9d59-6e35-09b72bd79c30>