Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 Apr 2007 15:11:05 -0400
From:      Kris Kennaway <kris@obsecurity.org>
To:        Kevin Oberman <oberman@es.net>
Cc:        freebsd-stable@freebsd.org, Alexey Karagodov <karagodov@gmail.com>
Subject:   Re: 6.2-RELEASE does not use second CPU?
Message-ID:  <20070420191105.GA38067@xor.obsecurity.org>
In-Reply-To: <20070420190857.9A34445058@ptavv.es.net>
References:  <c7aff4ef0704201154u52bb054cs6f93067fbaa37a21@mail.gmail.com> <20070420190857.9A34445058@ptavv.es.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, Apr 20, 2007 at 12:08:57PM -0700, Kevin Oberman wrote:
> > Date: Fri, 20 Apr 2007 22:54:52 +0400
> > From: "Alexey Karagodov" <karagodov@gmail.com>
> > Sender: owner-freebsd-stable@freebsd.org
> > 
> > and what is this, i mean why:
> > WARNING: debug.mpsafenet forced to 0 as ipsec requires Giant
> > WARNING: MPSAFE network stack disabled, expect reduced performance.
> 
> I thought it was pretty clear. 
> 
> ipsec is not multi-processor safe and requires the use of GIANT. If you
> have IPSEC in your kernel the network stack will also be giant locked
> which will cut performance.

Yep, google for extensive discussion (hint: FAST_IPSEC)

Kris

> -- 
> R. Kevin Oberman, Network Engineer
> Energy Sciences Network (ESnet)
> Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab)
> E-mail: oberman@es.net			Phone: +1 510 486-8634
> Key fingerprint:059B 2DDF 031C 9BA3 14A4  EADA 927D EBB3 987B 3751





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070420191105.GA38067>