On Wed, Oct 10, 2018 at 8:54 AM Josh Coombs <jcoo...@staff.gwi.net> wrote: > > 2.3 billion 1 byte packets failed to re-create the bug. To try and > simplify the setup I removed macsec from the equation, using a single > host in the middle as the bridge. Interestingly, rather than 1.3Gbits > a second in both directions, it ran around 8Mbits a second. Switching > the filter from u32 to matchall didn't change the performance. Going > back to the four machine test bed, again removing macsec and just > bridging through radically decreased the throughput to around 8Mbits. > Flip on macsec for the bridge and 1.3Gbits?
This is a great narrow down! We can rule out macsec for guilty. Can you share a minimum reproducer for this problem? If so I can take a look.
