Date: Sat, 14 Mar 2009 12:10:03 GMT From: Patrick =?ISO-8859-15?Q?Lamaizi=E8re?= <patfbsd@davenulle.org> To: freebsd-net@FreeBSD.org Subject: Re: misc/132277: poor performance using criptodevice for IPSEC Message-ID: <200903141210.n2ECA3TH019354@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
The following reply was made to PR kern/132277; it has been noted by GNATS. From: Patrick =?ISO-8859-15?Q?Lamaizi=E8re?= <patfbsd@davenulle.org> To: bug-followup@FreeBSD.org Cc: Vasile Marii <marii.vasile@gmail.com> Subject: Re: misc/132277: poor performance using criptodevice for IPSEC Date: Sat, 14 Mar 2009 13:05:52 +0100 Le Sun, 8 Mar 2009 20:00:11 GMT, Patrick Lamaizière <patfbsd@davenulle.org>: > I've made some tests on IPsec with glxsb and the performances are > very bad (around 14 Mbits). > > I think the problem is that glxsb handles only one request at a time. > When it is busy, it blocks the Open Crypto Framework with ERESTART > and it unblocks the OCF when the previous request is completed. Then > the OCF has to wake up and to resubmit the request. It looks like > this performs very badly when using it with IPsec. > > If glxsb processes the requests synchronously it performs quite > better, around 50 Mbits. I've filled a PR with a patch for glxb(4): kern/132622 Regards.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200903141210.n2ECA3TH019354>