Branch: refs/heads/master
  Commit: 67d6f7120962594e6b9e3343fd7cf13eda956b15
  Author: Janne Peltonen <>
  Date:   2018-10-29 (Mon, 29 Oct 2018)

  Changed paths:
    M platform/linux-generic/odp_ipsec_sad.c

  Log Message:
  linux-gen: ipsec: make SA lifetime checking more scalable to multiple threads

Enforcing the packet and byte based SA life times is currently slow if
the same SA is being handled by multiple threads since the threads
keep checking and updating the same shared byte and packet counters.

Make the implementation more scalable by having a thread-local quota
of packets and bytes for each SA and by updating the shared byte
and packet counters less frequently (i.e. when the quota runs out).

This introduces some inexactness to life time warnings and errors.
The warnings and errors about soft and hard limits being reached
may come a bit earlier than expected based on the packets sent to
the wire.

Signed-off-by: Janne Peltonen <>
Reviewed-by: Bill Fischofer <>
Signed-off-by: Maxim Uvarov <>

      **NOTE:** This service has been marked for deprecation:

      Functionality will be removed from on January 31st, 2019.

Reply via email to