Date: Wed, 27 Oct 2004 12:54:28 -0400 From: David Gilbert <dgilbert@dclg.ca> To: Mike Tancsa <mike@sentex.net> Cc: David Gilbert <dgilbert@dclg.ca> Subject: Re: IPSec on current. Message-ID: <16767.53956.366966.737912@canoe.dclg.ca> In-Reply-To: <6.1.2.0.0.20041027124606.09c40768@64.7.153.2> References: <16767.52282.937187.190919@canoe.dclg.ca> <6.1.2.0.0.20041027124606.09c40768@64.7.153.2>
next in thread | previous in thread | raw e-mail | index | archive | help
>>>>> "Mike" == Mike Tancsa <mike@sentex.net> writes: Mike> At 12:26 PM 27/10/2004, David Gilbert wrote: >> I'm just trying to diagnose something on 5.3-RC1 running on a dual >> AMD64 platform. Running setkey seems to be hanging the system >> ... has anyone had this happen recently? Mike> I did a bunch of stress testing on RELENG_5 with FAST_IPSEC and Mike> the soekris HiFn card using the HiFn drivers that are in HEAD Mike> just last week. I was able to bring up close to 200 Mike> associations without issue. Which IPSEC are you using ? KAME or Mike> FAST_IPSEC ? If FAST_IPSEC, did you disable INET6 ? I'm using FAST_IPSEC and INET6 is enabled. I see a network performance test from (undated) http://people.freebsd.org/~pjd/netperf/ in which amd64 && FAST_IPSEC was noted as broken. Don't know when that was. So ... are you saying that FAST_IPSEC excludes INET6? Dave. -- ============================================================================ |David Gilbert, Independent Contractor. | Two things can only be | |Mail: dave@daveg.ca | equal if and only if they | |http://daveg.ca | are precisely opposite. | =========================================================GLO================
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?16767.53956.366966.737912>