From owner-freebsd-stable@FreeBSD.ORG Wed Mar 18 21:41:46 2015 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id BF448E3 for ; Wed, 18 Mar 2015 21:41:46 +0000 (UTC) Received: from mail-in7.apple.com (mail-out7.apple.com [17.151.62.29]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 90204F6C for ; Wed, 18 Mar 2015 21:41:46 +0000 (UTC) Received: from relay7.apple.com (relay7.apple.com [17.128.113.101]) by mail-in7.apple.com (Apple Secure Mail Relay) with SMTP id 90.1D.03354.411F9055; Wed, 18 Mar 2015 14:41:40 -0700 (PDT) X-AuditID: 11973e16-f79b66d000000d1a-2a-5509f114f01e Received: from [17.149.238.142] (Unknown_Domain [17.149.238.142]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by relay7.apple.com (Apple SCV relay) with SMTP id 58.25.12765.BE0F9055; Wed, 18 Mar 2015 14:40:59 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2070.6\)) Subject: Re: 35-40% performance drop releng9 vs releng10 openvpn From: Charles Swiger In-Reply-To: <20150318211457.GL51048@funkthat.com> Date: Wed, 18 Mar 2015 14:41:40 -0700 Content-Transfer-Encoding: 7bit Message-Id: References: <5506250A.2000506@sentex.net> <20150316132055.GQ32288@funkthat.com> <5509D6C6.4050204@sentex.net> <20150318211457.GL51048@funkthat.com> To: John-Mark Gurney X-Mailer: Apple Mail (2.2070.6) X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrBLMWRmVeSWpSXmKPExsUi2FCYqivykTPUYG+bjMXhZiGL+11PmCw2 zZrF7sDsMePTfBaPy6c2M3scvvWfLYA5issmJTUnsyy1SN8ugStj+bmtzAVfmCt+7DzH2sDY w9zFyMkhIWAicfL6PHYIW0ziwr31bF2MXBxCAvsYJd5/Ow9XdHzmUxaIxHQmiaOzW1hAEswC WhI3/r1kArF5BQwk5p76AmYLCzhI3Nr3HGgSBwebgJrEhIk8IGFOASOJ50f3gs1kEVCV6J/f yQoxJlbiwqvJjBC2vMT2t3OYIUZaSTS3bGKH2DuZUeLB3FNgRSIC6hIv1/WAzZcAaujZlA5S IyHwl1XiW8Nn5gmMQrOQnDcLyXmzkOxYwMi8ilEoNzEzRzczz1wvsaAgJ1UvOT93EyMoqKfb ie1gfLjK6hCjAAejEg+vxFWOUCHWxLLiytxDjNIcLErivI//AoUE0hNLUrNTUwtSi+KLSnNS iw8xMnFwSjUwnrokmCiX5dG4p2tdxKNi56Qnf2RfbFR59lT0uM1rdu/1c4SjdulvE+ZctSv6 jdPLY6ZuCuu/e8yze7Zjmud8Mw4fvY95X85XLU3inr145kuz7zx+Sjfylny+ue7crsn6a7hE NFdYv/kTPa8ilHX+t+5A1mVbwlqnXPVctLN75RzzHYafF3mefqrEUpyRaKjFXFScCADj/ask SwIAAA== X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrNLMWRmVeSWpSXmKPExsUiOPVdn+7rD5yhBpcmqlkcbhayuN/1hMli 06xZ7A7MHjM+zWfxuHxqM7PH4Vv/2QKYo7hsUlJzMstSi/TtErgylp/bylzwhbnix85zrA2M PcxdjJwcEgImEsdnPmWBsMUkLtxbz9bFyMUhJDCdSeLo7BawBLOAlsSNfy+ZQGxeAQOJuae+ gNnCAg4St/Y9B2rg4GATUJOYMJEHJMwpYCTx/OhesPksAqoS/fM7WSHGxEpceDWZEcKWl9j+ dg4zxEgrieaWTewQeyczSjyYewqsSERAXeLluh6w+RJADT2b0icw8s9CctEsJBfNQjJ2ASPz KkaBotScxEpzvcSCgpxUveT83E2MoCBsKEzdwdi43OoQowAHoxIPr8RVjlAh1sSy4srcQ4wS HMxKIrxlJzhDhXhTEiurUovy44tKc1KLDzFKc7AoifNa/AWqFkhPLEnNTk0tSC2CyTJxcEo1 MNpU/3oQ2Ny08um0SepalXUH0m/XfZD7Kyvzd+fxtkMfu5xvpf/m1Vz1jmnf1ymn8lQ6NLex tvCcKA+aKTD/a+Uj3an8rKc+qB+QfzfDddKZWfWRWy8EXFs0pXO/n6X30zKzvUEKPfYv5iT9 s9lZPa97ptwmlkmz/Woz0iYv4nTnFlDwep14r1CJpTgj0VCLuag4EQCWUU+OPgIAAA== Cc: FreeBSD-STABLE Mailing List X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 18 Mar 2015 21:41:46 -0000 On Mar 18, 2015, at 2:14 PM, John-Mark Gurney wrote: > As I've never used OpenVPN before and their docs don't go into saying > what it's using.. Is OpenVPN a kernel or userland VPN? Do they use > IPSec in the kernel? or are they just using UDP or TCP for their > connections? OpenVPN runs in userland; it uses OpenSSL to create either a layer-2 or layer-3 tunnel via either UDP or TCP. http://en.wikipedia.org/wiki/OpenVPN has more details. Regards, -- -Chuck