From: Mark Huth <[EMAIL PROTECTED]>
Date: Thu, 24 May 2007 17:15:30 -0700
> I'm a bit curious why all of the crypto modules got loaded, but it
> doesn't matter.
When SADB_REGISTER is performed on a PF_KEY socket, it calls
xfrm_probe_algs() which iterates over the lists and loads all the
availble
On Thu, May 24, 2007 at 05:15:30PM -0700, Mark Huth wrote:
>
> I'm a bit curious why all of the crypto modules got loaded, but it
> doesn't matter.
If anybody does a PFKEY_REGISTER call then all the algorithms will get
loaded so that the key manager can find out what algorithms are actually
avai
Herbert Xu wrote:
On Fri, May 18, 2007 at 02:34:12PM +1000, Herbert Xu wrote:
Actually, I think we should just probe for the specific algorithm
requested rather than everything. See patch below.
Doh, forgot to actually remove the probe call :)
[IPSEC] pfkey: Load specific algorithm in pfk
From: Herbert Xu <[EMAIL PROTECTED]>
Date: Sat, 19 May 2007 07:21:48 +1000
> On Fri, May 18, 2007 at 02:34:12PM +1000, Herbert Xu wrote:
> >
> > Actually, I think we should just probe for the specific algorithm
> > requested rather than everything. See patch below.
>
> Doh, forgot to actually r
On Fri, May 18, 2007 at 02:34:12PM +1000, Herbert Xu wrote:
>
> Actually, I think we should just probe for the specific algorithm
> requested rather than everything. See patch below.
Doh, forgot to actually remove the probe call :)
[IPSEC] pfkey: Load specific algorithm in pfkey_add rather than
Herbert Xu wrote:
Mark Huth <[EMAIL PROTECTED]> wrote:
This patch provides a performance optimization in the pfkey_add path.
Prior versions have a serious performance problem when adding a large
number of SAs to a node. For example, if a backup node needs to be
loaded with the SAs previously
Mark Huth <[EMAIL PROTECTED]> wrote:
>
> This patch provides a performance optimization in the pfkey_add path.
> Prior versions have a serious performance problem when adding a large
> number of SAs to a node. For example, if a backup node needs to be
> loaded with the SAs previously held by a fa
Sorry about previous html/non-inline version which escaped.
This patch provides a performance optimization in the pfkey_add path.
Prior versions have a serious performance problem when adding a large
number of SAs to a node. For example, if a backup node needs to be
loaded with the SAs previousl
This patch provides a performance optimization in the pfkey_add path.
Prior versions have a serious performance problem when adding a large
number of SAs to a node. For example, if a backup node needs to be
loaded with the SAs previously held by a failed active node, thousands
of SAs may need to
