Re: [vpp-dev] IPSec proposal to improve "ipsec4-output-feature" node performance

2021-03-22 Thread Govindarajan Mohandoss
Wednesday, March 3, 2021 8:45 AM To: Govindarajan Mohandoss mailto:govindarajan.mohand...@arm.com>>; vpp-dev mailto:vpp-dev@lists.fd.io>> Cc: nd mailto:n...@arm.com>> Subject: Re: [vpp-dev] IPSec proposal to improve "ipsec4-output-feature" node performance

Re: [vpp-dev] IPSec proposal to improve "ipsec4-output-feature" node performance

2021-03-03 Thread Govindarajan Mohandoss
Mohandoss ; vpp-dev Cc: nd Subject: Re: [vpp-dev] IPSec proposal to improve "ipsec4-output-feature" node performance Hi Govind, Flow caches always perform well, but they are more difficult to use than they first appear. Consider asking yourself these questions: 1 - how many entries can

Re: [vpp-dev] IPSec proposal to improve "ipsec4-output-feature" node performance

2021-03-03 Thread Neale Ranns
way… /neale From: vpp-dev@lists.fd.io on behalf of Govindarajan Mohandoss via lists.fd.io Date: Wednesday, 3 March 2021 at 06:57 To: vpp-dev Cc: nd Subject: [vpp-dev] IPSec proposal to improve "ipsec4-output-feature" node performance Hi Neale, I am working on optimizing "ips

[vpp-dev] IPSec proposal to improve "ipsec4-output-feature" node performance

2021-03-02 Thread Govindarajan Mohandoss
Hi Neale, I am working on optimizing "ipsec4-output-feature" node on ARM based systems. Towards that, I saw an opportunity to supplement SPD table lookup (linear search) with Bihash based flow cache. This approach is similar to ACL plugin stateful mode implementation. This approach will