I want to keep this thread on crossbow for now, in case it's something not already in place.
The recent processor affinity thread got me thinking again. A given NIC can scatter its inbound traffic to one or more CPUs, and crossbow makes this even more configurable (per the dladm(1M) changes). Beyond that, will inbound traffic scatter across multiple CPUs? Consider a node that has multiple inbound IPsec SAs. Each inbound SA will have one or more individual flows inside it, AND if all of them hammer one CPU their high-overhead decrypt/verify operations cannot be shared among multiple CPUs. Does crossbow improve this situation? Or are we already there w.r.t. sharing inbound load? This message posted from opensolaris.org
