Re: IPsec performance regression between 6.3 and 6.4

Hi, we recently found that the switch to constant-time AES has quite a heavy impact on IPsec performance. But since according to CVS that was part of OpenBSD 6.2 already, it's probably something else. https://github.com/openbsd/src/commit/d223d7cb85c1f2f705da547a0134b949655abe6a Patrick On

IPsec performance regression between 6.3 and 6.4

Hello, I'm currently doing some IPsec performance testing between OpenBSD 6.3 and 6.5. Dmesg and ipsec.conf is below for information. Testing with iperf3 and 1500B packets, throughput drops around 1/3, from 919 Mbps to 623 Mbps. I also tried 6.4, which has similar perfomance to 6.5. I went