On Tue, Sep 20, 2016 at 03:45:26PM +0200, Florian Westphal wrote: > This is called from the packet input path, we get lock contention > if many cpus handle ipsec in parallel. > > After recent rcu conversion it is safe to call __xfrm_state_lookup > without the spinlock. > > Signed-off-by: Florian Westphal <f...@strlen.de>
Applied to ipsec-next, thanks a lot!