> Betreff: Re: [E1000-devel] Poor IPsec performance and high ksoftirqd load > > On (02/25/16 18:53), Anna Fischer wrote: > > > > I'm running Linux 4.3.3 (Gentoo) and standard igb drivers. I have > > trouble with the performance of IPSec on my platform. The platform has > > Intel Ethernet Controller I211 (1GbE) and Intel Atom CPUs (4-core) > > from the C2000 product family. > > yes, we talked about this at some length at Netdev 1.1: > > http://www.netdevconf.org/1.1/talk-securing-traffic-tunnelled-over-l3- > sowmini-varadhan.html > > and > > http://www.netdevconf.org/1.1/bof-ipsec-performance-steffen- > klassert.html > > (slides and other material should be uploaded to the site soon) > > some factors that cause perf deterioration are the loss of segmentation > offload for ipsec traffic, and the loss of RPS/RFS. We're currently working on > fixing some of these things..
I figure that IPSec is not performing that well under Linux, but I have another platform running Xeon CPUs and HP NICs, and on that platform, using AES-NI enabled, I can achieve much higher throughput rates. So I didn't think it is a general kernel problem? Anna ------------------------------------------------------------------------------ Site24x7 APM Insight: Get Deep Visibility into Application Performance APM + Mobile APM + RUM: Monitor 3 App instances at just $35/Month Monitor end-to-end web transactions and take corrective actions now Troubleshoot faster and improve end-user experience. Signup Now! http://pubads.g.doubleclick.net/gampad/clk?id=272487151&iu=/4140 _______________________________________________ E1000-devel mailing list E1000-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel® Ethernet, visit http://communities.intel.com/community/wired
