Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 13 Dec 2016 14:45:28 +0100
From:      =?UTF-8?Q?Olivier_Cochard=2DLabb=C3=A9?= <olivier@cochard.me>
To:        "Andrey V. Elsukov" <ae@freebsd.org>
Cc:        "freebsd-current@freebsd.org" <freebsd-current@freebsd.org>,  "freebsd-net@freebsd.org" <freebsd-net@freebsd.org>
Subject:   Re: [RFC/RFT] projects/ipsec
Message-ID:  <CA%2Bq%2BTcqUV8vVvFD=X38secUcXnHnojNqgc62bmiqxykaEaOE6A@mail.gmail.com>
In-Reply-To: <2bd32791-944f-2417-41e9-e0fe1c705502@FreeBSD.org>
References:  <2bd32791-944f-2417-41e9-e0fe1c705502@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Dec 11, 2016 at 12:07 AM, Andrey V. Elsukov <ae@freebsd.org> wrote:

> Hi All,
>
> I am pleased to announce that projects/ipsec, that I started several
> months ago is ready for testing and review.
> The main goals were:
>   * rework locking to make IPsec code more friendly for concurrent
>     processing;
>   * make lookup in SADB/SPDB faster;
>   * revise PFKEY implementation, remove stale code, make it closer
>     to RFC;
>   * implement IPsec VTI (virtual tunneling interface);
>   * make IPsec code loadable as kernel module.
>
>
=E2=80=8BI've got a very simple configuration (static key),but I like the
performance improvement brings by projects/ipsec :-)

A simple packet-per-second using null encryption should be enough for
benching the improvement, but my IPSec lab (using Equilibrium methodology)
did a little more.

https://github.com/ocochard/netbenches/blob/master/AMD_GX-
412TC_4Cores_Intel_i210AT/ipsec/results/fbsd12.projects-
ipsec.equilibrium/graph.png

Thanks for your work!

Olivier



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CA%2Bq%2BTcqUV8vVvFD=X38secUcXnHnojNqgc62bmiqxykaEaOE6A>