Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 24 Apr 2004 12:58:14 -0700
From:      Sam Leffler <sam@errno.com>
To:        Mike Tancsa <mike@sentex.net>
Cc:        "Oldach, Helge" <Helge.Oldach@atosorigin.com>
Subject:   Re: FAST_IPSEC bug fix
Message-ID:  <B8E1B8D8-9629-11D8-AAEB-000A95AD0668@errno.com>
In-Reply-To: <6.0.3.0.0.20040424142123.07bf3db0@64.7.153.2>
References:  <D2CFC58E0F8CB443B54BE72201E8916E94CBB2@dehhx005.hbg.de.int.atosorigin.com> <44658B20-9610-11D8-AAEB-000A95AD0668@errno.com> <6.0.3.0.0.20040424142123.07bf3db0@64.7.153.2>

next in thread | previous in thread | raw e-mail | index | archive | help
On Apr 24, 2004, at 11:24 AM, Mike Tancsa wrote:

>
> At 12:56 PM 24/04/2004, Sam Leffler wrote:
>> On Apr 24, 2004, at 9:03 AM, Oldach, Helge wrote:
>>
>>> Hi list,
>>>
>>> this is a month-old mail about the lack of a FAST_IPSEC feature 
>>> compared
>>> to legacy IPSEC. Including a working patch. I haven't seen this being
>>> committed, or is it? Please also MFC to STABLE.
>>
>> The fix was not quite right for -current (where it needs to go in 
>> first).  I sent out the attached patch for testing but received no 
>> feedback.  Until I can get it tested and committed to -current it 
>> won't be MFC'd.
>
> We dont run -current here, so I dont have anything to test it on.  
> Also, due to the bugs in the driver with HiFn 7955, we have had to 
> abandon FAST_IPSEC :(

Running FAST IPSEC w/o h/w crypto is still faster than KAME IPsec.  See 
the results in my BSDCon paper.

	Sam



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B8E1B8D8-9629-11D8-AAEB-000A95AD0668>