> -Original Message-
> From: David Miller
> Sent: Tuesday, April 23, 2019 10:57 PM
> To: f...@strlen.de
> Cc: Vakul Garg ; netdev@vger.kernel.org
> Subject: Re: ipsec tunnel performance degrade
>
> From: Florian Westphal
> Date: Tue, 23 Apr 2019 18:25
From: Florian Westphal
Date: Tue, 23 Apr 2019 18:25:21 +0200
> Vakul Garg wrote:
>> > Vakul Garg wrote:
>> > > > Do you use xfrm interfaces?
>> > >
>> > > I don't think so. I use setkey to create policies/SAs.
>> > > Can you please give me some hint about it?
>> >
>> > Then you're not using ip
Vakul Garg wrote:
> > Vakul Garg wrote:
> > > > Do you use xfrm interfaces?
> > >
> > > I don't think so. I use setkey to create policies/SAs.
> > > Can you please give me some hint about it?
> >
> > Then you're not using ipsec interfaces.
> >
> Instead of creating policies/SA using setkey, I s
> -Original Message-
> From: Florian Westphal
> Sent: Tuesday, April 23, 2019 11:27 AM
> To: Vakul Garg
> Cc: Florian Westphal ; netdev@vger.kernel.org
> Subject: Re: ipsec tunnel performance degrade
>
> Vakul Garg wrote:
> > > Do you use xfrm interf
Vakul Garg wrote:
> > Do you use xfrm interfaces?
>
> I don't think so. I use setkey to create policies/SAs.
> Can you please give me some hint about it?
Then you're not using ipsec interfaces.
> > > Further, perf show that a lot of atomic primitives such as
> > > __ll_sc___cmpxchg_case_mb_4(),
> -Original Message-
> From: Florian Westphal
> Sent: Monday, April 22, 2019 11:16 PM
> To: Vakul Garg
> Cc: netdev@vger.kernel.org
> Subject: Re: ipsec tunnel performance degrade
>
> Vakul Garg wrote:
> > Post kernel 4.9, I am experiencing
Vakul Garg wrote:
> Post kernel 4.9, I am experiencing more than 50% degrade in ipsec performance
> on my arm64 based systems (with onchip crypto accelerator).
> (We use only lts kernels). My understanding is that it is mainly due to xfrm
> flow cache removal in version 4.12.
Yes, likely.
> I
Hi
Post kernel 4.9, I am experiencing more than 50% degrade in ipsec performance
on my arm64 based systems (with onchip crypto accelerator).
(We use only lts kernels). My understanding is that it is mainly due to xfrm
flow cache removal in version 4.12.
I am not sure whether any subsequent work
