Re: iflib.tx_abdicate: very strange behavior on incoming IPsec traffic (regression?)

From: Lev Serebryakov <lev_at_FreeBSD.org>
Date: Fri, 7 Dec 2018 18:02:20 +0300
On 07.12.2018 16:40, Lev Serebryakov wrote:

>  (I'm not sure, that it is exactly "bug" or "defect" and want to
 ... discuss it here before filing PR.

>  Now I'm throwing IPsec into mix. All incoming traffic is tunneled with
> IPsec policy, with aes-128-gcm encryption. And with IPsec tx_abdicate
> makes thing much worse and much more unstable.
 I could say, that it doesn't matter, if I using IPsec with "tunnel"
policy to encrypt and tunnel transit traffic or if I add "gif" into mix
and encrypt GIF traffic in "transport" mode. In both cases tx_abdicate
makes PPS much lower.

-- 
// Lev Serebryakov


Received on Fri Dec 07 2018 - 14:02:27 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:41:19 UTC