Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 27 Oct 2004 12:54:28 -0400
From:      David Gilbert <dgilbert@dclg.ca>
To:        Mike Tancsa <mike@sentex.net>
Cc:        David Gilbert <dgilbert@dclg.ca>
Subject:   Re: IPSec on current.
Message-ID:  <16767.53956.366966.737912@canoe.dclg.ca>
In-Reply-To: <6.1.2.0.0.20041027124606.09c40768@64.7.153.2>
References:  <16767.52282.937187.190919@canoe.dclg.ca> <6.1.2.0.0.20041027124606.09c40768@64.7.153.2>

next in thread | previous in thread | raw e-mail | index | archive | help
>>>>> "Mike" == Mike Tancsa <mike@sentex.net> writes:

Mike> At 12:26 PM 27/10/2004, David Gilbert wrote:
>> I'm just trying to diagnose something on 5.3-RC1 running on a dual
>> AMD64 platform.  Running setkey seems to be hanging the system
>> ... has anyone had this happen recently?

Mike> I did a bunch of stress testing on RELENG_5 with FAST_IPSEC and
Mike> the soekris HiFn card using the HiFn drivers that are in HEAD
Mike> just last week.  I was able to bring up close to 200
Mike> associations without issue.  Which IPSEC are you using ? KAME or
Mike> FAST_IPSEC ?  If FAST_IPSEC, did you disable INET6 ?

I'm using FAST_IPSEC and INET6 is enabled.  I see a network
performance test from (undated)

http://people.freebsd.org/~pjd/netperf/

in which amd64 && FAST_IPSEC was noted as broken.  Don't know when
that was.

So ... are you saying that FAST_IPSEC excludes INET6?

Dave.

-- 
============================================================================
|David Gilbert, Independent Contractor.       | Two things can only be     |
|Mail:       dave@daveg.ca                    |  equal if and only if they |
|http://daveg.ca                              |   are precisely opposite.  |
=========================================================GLO================



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?16767.53956.366966.737912>