On 17.7.2020. 20:17, jean-yves boisiaud wrote: > hello, > > Last week, I upgraded a couple of firewalls using carp/pfsync and sasyncd > from 6.0 to 6.7 (yes, big jump !). > > I also applied all the 6.7 published patches. > > When some heavy traffic takes one of the IPSec tunnel, I noticed that : > - all network connections are slowed down > - unused network bandwidth increase instead of decrease > - idle CPU move towards 0, and spinning increase to take about 50% of the > CPU > > When I stop the IPSec traffic : > - network connections increase immediatly > - unused network bandwidth cecreases immediately > - spinning CPU is low. > > Yes I know, my hardware is a bit old. I understand that CPU raises due to > IPSec crypto, but I do not understand why network performance decrease.
maybe intel mitigation stuff decreased your performance. it in from openbsd 6.3 ... don't know if you are using aes for ipsec, but you cpu doesn't have aes-ni... maybe to try wireguard ? :)
