From owner-freebsd-net@FreeBSD.ORG Wed Nov 5 16:06:59 2014 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id E0EDDA6 for ; Wed, 5 Nov 2014 16:06:59 +0000 (UTC) Received: from mail-pa0-x230.google.com (mail-pa0-x230.google.com [IPv6:2607:f8b0:400e:c03::230]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id B6688FBF for ; Wed, 5 Nov 2014 16:06:59 +0000 (UTC) Received: by mail-pa0-f48.google.com with SMTP id ey11so1042317pad.21 for ; Wed, 05 Nov 2014 08:06:59 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; bh=6zyvrOaf+D/oYLOhhxoSQ/c+SdqNVPO/7gdU2TM8dXk=; b=m4F1s7en1ypMEoAbegL3ORpRE2TAMbPaGTbvTiWnHOfuS0qXBtEYkfUGjP5qQKJgnE ahgB/mGGAhskfBBszoGMjB3Fhv6og690AGXHsmWa33jmKdQNbSF3R+0aoCtAqG6AEATQ EN1GgE5g/5rKPSKQYZOCXxnXpZswgjdNmaCBjmswN5ntQd751iY6AQt6IOl9dDRRUsSO ToM/caxTnfgvQtiG9YVgwYzTzAlkhcm6qeVEa9saD05oZp0ctVZ4duGgQZpxxZqcvILn ktljkejOduLBQMW7sXlDmOTZisB6jp80zDwFugClvMADATFcw9zI9NQx999yvhtnQgPP bnuQ== X-Received: by 10.69.20.74 with SMTP id ha10mr18310203pbd.122.1415203619383; Wed, 05 Nov 2014 08:06:59 -0800 (PST) Received: from ketagalan.camachat.org ([2601:9:4700:360:a288:b4ff:fec2:e5d0]) by mx.google.com with ESMTPSA id ty8sm3607568pab.26.2014.11.05.08.06.58 for (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 05 Nov 2014 08:06:59 -0800 (PST) Message-ID: <545A4B22.6080001@gmail.com> Date: Wed, 05 Nov 2014 08:06:58 -0800 From: "Eric L. Camachat" User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.2.0 MIME-Version: 1.0 To: freebsd-net@freebsd.org Subject: Re: netmap in GENERIC, by default, on HEAD References: <92D22BEA-DDE5-4C6E-855C-B8CACB0319AC@neville-neil.com> <545A47A5.4010601@yandex.ru> In-Reply-To: <545A47A5.4010601@yandex.ru> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 05 Nov 2014 16:07:00 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 11/05/2014 07:52, Andrey V. Elsukov wrote: > On 05.11.2014 18:39, George Neville-Neil wrote: >> Howdy, >> >> Last night (Pacific Time) I committed a change so that GENERIC, on HEAD >> has the netmap >> device enabled. This is to increase the breadth of our testing of that >> feature prior >> to the release of FreeBSD 11. >> >> In two weeks I will enable IPSec by default, again in preparation for 11. > > Hi, > > recently we did some IP forwarding tests and the GENERIC kernel is > several times faster than GENERIC+IPSEC. Even when IPSEC has no SA. > > I didn't do test on vanilla kernel, but our kernel is able forward > IPv4/IPv6 on rate close to 8.6 Mpps. The same kernel compiled with IPSEC > can forward only 180 kpps. I think this problem should be solved before > enabling it in GENERIC. > I think this is why we need IPSEC in GENERIC to let more tests involved. Maybe it also helps in kernel SSL encryption (key per IP vs per TCP session). -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iF4EAREIAAYFAlRaSyIACgkQSfBQu3oOwYwdfQEAvlvDjlH489YP7n7PYKkLbOfX 5Ew7+VdiJAC7BBkxnSwA/2y2V2sakpdPzlxEt5O4oQbKEmBUa40W7CU3gBzgJjTw =EHh4 -----END PGP SIGNATURE-----