Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 7 Dec 2018 18:02:20 +0300
From:      Lev Serebryakov <lev@FreeBSD.org>
To:        FreeBSD Net <freebsd-net@freebsd.org>, FreeBSD Current <freebsd-current@freebsd.org>
Cc:        olivier@cochard.me
Subject:   Re: iflib.tx_abdicate: very strange behavior on incoming IPsec traffic (regression?)
Message-ID:  <93d241ab-abf8-7f9b-7876-ba727ec8fea4@FreeBSD.org>
In-Reply-To: <94ec8936-4a66-ee1a-5a38-ee27a4bbfbee@FreeBSD.org>
References:  <94ec8936-4a66-ee1a-5a38-ee27a4bbfbee@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--Qs8SULFFSCCR3ZrXNB7oweGk1hATHix8I
Content-Type: multipart/mixed; boundary="PfuFyJ54teISwgTtOfGCksXNTnOycf9pk";
 protected-headers="v1"
From: Lev Serebryakov <lev@FreeBSD.org>
Reply-To: lev@FreeBSD.org
To: FreeBSD Net <freebsd-net@freebsd.org>,
 FreeBSD Current <freebsd-current@freebsd.org>
Cc: olivier@cochard.me
Message-ID: <93d241ab-abf8-7f9b-7876-ba727ec8fea4@FreeBSD.org>
Subject: Re: iflib.tx_abdicate: very strange behavior on incoming IPsec
 traffic (regression?)
References: <94ec8936-4a66-ee1a-5a38-ee27a4bbfbee@FreeBSD.org>
In-Reply-To: <94ec8936-4a66-ee1a-5a38-ee27a4bbfbee@FreeBSD.org>

--PfuFyJ54teISwgTtOfGCksXNTnOycf9pk
Content-Type: text/plain; charset=utf-8
Content-Language: en-US
Content-Transfer-Encoding: quoted-printable

On 07.12.2018 16:40, Lev Serebryakov wrote:

>  (I'm not sure, that it is exactly "bug" or "defect" and want to
 ... discuss it here before filing PR.

>  Now I'm throwing IPsec into mix. All incoming traffic is tunneled with=

> IPsec policy, with aes-128-gcm encryption. And with IPsec tx_abdicate
> makes thing much worse and much more unstable.
 I could say, that it doesn't matter, if I using IPsec with "tunnel"
policy to encrypt and tunnel transit traffic or if I add "gif" into mix
and encrypt GIF traffic in "transport" mode. In both cases tx_abdicate
makes PPS much lower.

--=20
// Lev Serebryakov


--PfuFyJ54teISwgTtOfGCksXNTnOycf9pk--

--Qs8SULFFSCCR3ZrXNB7oweGk1hATHix8I
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
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=FPyf
-----END PGP SIGNATURE-----

--Qs8SULFFSCCR3ZrXNB7oweGk1hATHix8I--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?93d241ab-abf8-7f9b-7876-ba727ec8fea4>