Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 16 Aug 2005 20:59:56 +0200
From:      Pawel Jakub Dawidek <pjd@FreeBSD.org>
To:        Mike Tancsa <mike@sentex.net>
Cc:        FreeBSD-current <freebsd-current@freebsd.org>
Subject:   Re: VIA/ACE PadLock integration with crypto(9).
Message-ID:  <20050816185956.GA8407@garage.freebsd.pl>
In-Reply-To: <6.2.3.4.0.20050813102138.0644fe08@64.7.153.2>
References:  <20050812134511.GE25162@garage.freebsd.pl> <6.2.3.4.0.20050813012441.061d08b0@64.7.153.2> <20050813074636.GH27996@garage.freebsd.pl> <6.2.3.4.0.20050813102138.0644fe08@64.7.153.2>

next in thread | previous in thread | raw e-mail | index | archive | help

--BXVAT5kNtrzKuDFl
Content-Type: text/plain; charset=iso-8859-2
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sat, Aug 13, 2005 at 02:23:51PM -0400, Mike Tancsa wrote:
+> Overnight I also let a copy of netperf run blasting various network test=
s across the IPSEC tunnel and all was as expected.  I had to enable polling=
 on the box as it was=20
+> getting dangerously close to livelock with the high level of interrupts.=
  At 1500 HZ its still quite fast, forwarding IPSEC traffic at 60Mb/s and t=
he box is VERY=20
+> responsive.  Without the padlock.ko, it comes in just at 23Mb/s.

Good news, but I think, I expected more...

+> +> Also,   I came across a small ipsec bug while testing
+> >+>
+> >+> http://www.freebsd.org/cgi/query-pr.cgi?pr=3D84860
+> >It could be RELENG_5 specific, as it uses rijndael implementation
+> >which was removed after RELENG_5 (there is no sys/opencrypto/rijndael.c
+> >anymore). Maybe rijndael version from sys/crypto/ handles it better?
+> >This needs to be verified.
+>=20
+> Actually this happens in RELENG_6 as well.  I have updated the PR with a=
 crash dump and back trace.

Ok, I committed a fix to HEAD.
Here is the patch:

	http://people.freebsd.org/~pjd/patches/rijndael.patch

--=20
Pawel Jakub Dawidek                       http://www.wheel.pl
pjd@FreeBSD.org                           http://www.FreeBSD.org
FreeBSD committer                         Am I Evil? Yes, I Am!

--BXVAT5kNtrzKuDFl
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (FreeBSD)

iD8DBQFDAjesForvXbEpPzQRAjY6AJwP+pjFHTaNKoMvxiVk1oHg/ouEVgCePhU9
BxhqEG0XqJ4dMSAMAt4lkYw=
=QwFi
-----END PGP SIGNATURE-----

--BXVAT5kNtrzKuDFl--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050816185956.GA8407>