netns performance

2017-06-13 Thread Don Bowman
This was talked about before (e.g. https://lkml.org/lkml/2014/6/11/42) In 3.10, this 'script' takes ~1s to run, regardless of # CPU: ip netns add foo ip netns add bar for i in `seq 0 1000` do echo -e 'netns exec foo echo\nnetns exec bar echo' >> ipnetns.batch done time ip -b ipnetns.batch >

netns performance

2017-06-13 Thread Don Bowman
This was talked about before (e.g. https://lkml.org/lkml/2014/6/11/42) In 3.10, this 'script' takes ~1s to run, regardless of # CPU: ip netns add foo ip netns add bar for i in `seq 0 1000` do echo -e 'netns exec foo echo\nnetns exec bar echo' >> ipnetns.batch done time ip -b ipnetns.batch >

Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-16 Thread Don Bowman
On 3 May 2017 at 04:14, Steffen Klassert <steffen.klass...@secunet.com> wrote: > On Sat, Apr 29, 2017 at 08:39:34PM -0400, Don Bowman wrote: >> On 28 April 2017 at 03:13, Steffen Klassert >> <steffen.klass...@secunet.com> wrote: >> > On Thu, Apr 27, 2017 a

Re: ipsec doesn't route TCP with 4.11 kernel

2017-05-16 Thread Don Bowman
On 3 May 2017 at 04:14, Steffen Klassert wrote: > On Sat, Apr 29, 2017 at 08:39:34PM -0400, Don Bowman wrote: >> On 28 April 2017 at 03:13, Steffen Klassert >> wrote: >> > On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman wrote: >> >> On 27 April 2017 at

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-29 Thread Don Bowman
On 28 April 2017 at 03:13, Steffen Klassert <steffen.klass...@secunet.com> wrote: > On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman wrote: >> On 27 April 2017 at 04:42, Steffen Klassert <steffen.klass...@secunet.com> >> wrote: >> > On Wed, Apr 26, 2017

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-29 Thread Don Bowman
On 28 April 2017 at 03:13, Steffen Klassert wrote: > On Thu, Apr 27, 2017 at 06:13:38PM -0400, Don Bowman wrote: >> On 27 April 2017 at 04:42, Steffen Klassert >> wrote: >> > On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong Wang wrote: >> >> (Cc'ing netdev and I

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-27 Thread Don Bowman
11-rc3/ It appears I was incorrect about where this was introduced. 4.10.1-041001-generic works correctly. 4.11.0-041100rc1-generic does not THese are both from the kernel-mainline ubuntu. > > If v4.11-rc2 is good and -rc3 is bad, I can help you bisect between the two. > > Thanks, > >

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-27 Thread Don Bowman
ect about where this was introduced. 4.10.1-041001-generic works correctly. 4.11.0-041100rc1-generic does not THese are both from the kernel-mainline ubuntu. > > If v4.11-rc2 is good and -rc3 is bad, I can help you bisect between the two. > > Thanks, > > Joe > > > > On 04/25/201

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-27 Thread Don Bowman
On 27 April 2017 at 04:42, Steffen Klassert <steffen.klass...@secunet.com> wrote: > On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong Wang wrote: >> (Cc'ing netdev and IPSec maintainers) >> >> On Tue, Apr 25, 2017 at 6:08 PM, Don Bowman <d...@donbowman.ca> wrote:

Re: ipsec doesn't route TCP with 4.11 kernel

2017-04-27 Thread Don Bowman
On 27 April 2017 at 04:42, Steffen Klassert wrote: > On Wed, Apr 26, 2017 at 10:01:34PM -0700, Cong Wang wrote: >> (Cc'ing netdev and IPSec maintainers) >> >> On Tue, Apr 25, 2017 at 6:08 PM, Don Bowman wrote: for 'esp' question, i have ' esp = aes256-sha256-modp1536!'

ipsec doesn't route TCP with 4.11 kernel

2017-04-25 Thread Don Bowman
I'm not sure how to describe this. 4.11rc2 worked, after that, no. My ipsec tunnel comes up ok. ICMP works. UDP works. But TCP, the sender [which is the ipsec client] does not reach the destination. Its not a routing rule issue (since ICMP/UDP work). Its not a traffic selector just selecting

ipsec doesn't route TCP with 4.11 kernel

2017-04-25 Thread Don Bowman
I'm not sure how to describe this. 4.11rc2 worked, after that, no. My ipsec tunnel comes up ok. ICMP works. UDP works. But TCP, the sender [which is the ipsec client] does not reach the destination. Its not a routing rule issue (since ICMP/UDP work). Its not a traffic selector just selecting