Date: Wed, 25 Apr 2007 14:00:08 +0400 From: Alex Povolotsky <tarkhil@webmail.sub.ru> To: Kris Kennaway <kris@obsecurity.org> Cc: Alexey Karagodov <karagodov@gmail.com>, freebsd-stable@freebsd.org Subject: Re: 6.2-RELEASE does not use second CPU? Message-ID: <462F26A8.5090500@webmail.sub.ru> In-Reply-To: <20070420191105.GA38067@xor.obsecurity.org> References: <c7aff4ef0704201154u52bb054cs6f93067fbaa37a21@mail.gmail.com> <20070420190857.9A34445058@ptavv.es.net> <20070420191105.GA38067@xor.obsecurity.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Kris Kennaway wrote: > On Fri, Apr 20, 2007 at 12:08:57PM -0700, Kevin Oberman wrote: > >>> Date: Fri, 20 Apr 2007 22:54:52 +0400 >>> From: "Alexey Karagodov" <karagodov@gmail.com> >>> Sender: owner-freebsd-stable@freebsd.org >>> >>> and what is this, i mean why: >>> WARNING: debug.mpsafenet forced to 0 as ipsec requires Giant >>> WARNING: MPSAFE network stack disabled, expect reduced performance. >>> >> I thought it was pretty clear. >> >> ipsec is not multi-processor safe and requires the use of GIANT. If you >> have IPSEC in your kernel the network stack will also be giant locked >> which will cut performance. >> > > Yep, google for extensive discussion (hint: FAST_IPSEC) > No visible changes in behaviour with FAST_IPSEC Fast IPsec: Initialized Security Association Processing. mptable still shows ONE CPU Alex.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?462F26A8.5090500>