Re: OpenBSD ipsec performance on modern HW

2015-02-23 Thread Evgeniy Sudyr
made syntax errors ipssecctl will tell you quickly btw. >> >> -- >> Cordialement, >> Pierre BARDOU >> >> De : Evgeniy Sudyr [mailto:eject.in...@gmail.com] >> Envoyé : dimanche 21 juillet 2013 13:17 >> À : BARDOU Pierre >> Cc : misc@openbsd.org

Re: OpenBSD ipsec performance on modern HW

2013-07-22 Thread Evgeniy Sudyr
om] > Envoyé : dimanche 21 juillet 2013 13:17 > À : BARDOU Pierre > Cc : misc@openbsd.org > Objet : Re: OpenBSD ipsec performance on modern HW > > All, > > during my tests I seen that CPU on all cores and memory usage was very low. > Just interesting if there are an

Re: OpenBSD ipsec performance on modern HW

2013-07-22 Thread BARDOU Pierre
-- Cordialement, Pierre BARDOU De : Evgeniy Sudyr [mailto:eject.in...@gmail.com] Envoyé : dimanche 21 juillet 2013 13:17 À : BARDOU Pierre Cc : misc@openbsd.org Objet : Re: OpenBSD ipsec performance on modern HW All, during my tests I seen that CPU on all cores and memory usage was very low. Just

Re: OpenBSD ipsec performance on modern HW

2013-07-21 Thread Peter Hessler
On 2013 Jul 21 (Sun) at 14:16:32 +0300 (+0300), Evgeniy Sudyr wrote: :All, : :during my tests I seen that CPU on all cores and memory usage was very low. :Just interesting if there are any bottlenecks and how to fix them. Lots of bottlenecks. They can only be fixed in code, and others are working

Re: OpenBSD ipsec performance on modern HW

2013-07-21 Thread Evgeniy Sudyr
All, during my tests I seen that CPU on all cores and memory usage was very low. Just interesting if there are any bottlenecks and how to fix them. 1) Does anybody care tcp stack tuning for high speed IPSEC ? 2) Can I run IPSEC (that's isakmpd ?) on other cores? Pierre, can you share your ipsec

Re: OpenBSD ipsec performance on modern HW

2013-07-16 Thread BARDOU Pierre
BARDOU -Message d'origine- De : Chris Cappuccio [mailto:ch...@nmedia.net] Envoyé : mardi 16 juillet 2013 00:51 À : Evgeniy Sudyr Cc : misc@openbsd.org; mi...@openbsd.org Objet : Re: OpenBSD ipsec performance on modern HW Evgeniy Sudyr [eject.in...@gmail.com] wrote: > >

Re: OpenBSD ipsec performance on modern HW

2013-07-15 Thread Chris Cappuccio
Evgeniy Sudyr [eject.in...@gmail.com] wrote: > > BOX1 dmesg: > cpu0: Intel(R) Xeon(R) CPU E5620 @ 2.40GHz, 2400.45 MHz > cpu1: Intel(R) Xeon(R) CPU E5620 @ 2.40GHz, 2400.09 MHz > cpu2: Intel(R) Xeon(R) CPU E5620 @ 2.40GHz, 2400.09 MHz > cpu3: Intel(R) Xeon(R) CPU E5620 @ 2.40GHz, 2400.09 MHz > cpu

Re: OpenBSD ipsec performance on modern HW

2013-07-14 Thread Evgeniy Sudyr
top CPU load during iperf test Box1: load averages: 0.48, 0.17, 0.11 gateway1 18:40:59 24 processes: 23 idle, 1 on processor CPU0 states: 0.0% user, 0.0% nice, 35.9% system, 15.8% interrupt, 48.3% idle CPU1 states: 0.0% user, 0.0% nice, 0.0% system, 0.0% interrupt, 100% idle CPU2 stat

Re: OpenBSD ipsec performance on modern HW

2013-07-14 Thread Christian Weisgerber
Evgeniy Sudyr wrote: > I need to figure if I can improve isakmpd / ipsec performance in my setup > on openbsd -current > > I have two boxes connected to each other via 1Gbit link and I'm using iperf > to test performance with default ipsec.conf between these two servers: > > # cat ipsec.conf: >

Re: OpenBSD ipsec performance on modern HW

2013-07-14 Thread Evgeniy Sudyr
systat output from one of Box-es: 4 usersLoad 0.89 0.35 0.22 Sun Jul 14 13:34:03 2013 memory totals (in KB)PAGING SWAPPING Interrupts real virtual free in out in out12188 total Active24660 24660 3930

OpenBSD ipsec performance on modern HW

2013-07-14 Thread Evgeniy Sudyr
Hi I need to figure if I can improve isakmpd / ipsec performance in my setup on openbsd -current I have two boxes connected to each other via 1Gbit link and I'm using iperf to test performance with default ipsec.conf between these two servers: # cat ipsec.conf: ike esp from aaa.aaa.aaa.118 to aa