On Tue, Jan 23, 2018 at 10:20 AM, Jeff Kirsher <jeffrey.t.kirs...@intel.com> wrote: > This series contains updates to ixgbe only. > > Shannon Nelson provides an implementation of the ipsec hardware offload > feature for the ixgbe driver for these devices: x540, x550, 82599. > > The ixgbe NICs support ipsec offload for 1024 Rx and 1024 Tx Security > Associations (SAs), using up to 128 inbound IP addresses, and using the > rfc4106(gcm(aes)) encryption. This code does not yet support checksum > offload, or TSO in conjunction with the ipsec offload - those will be > added in the future. > > This code shows improvements in both packet throughput and CPU utilization. > For example, here are some quicky numbers that show the magnitude of the > performance gain on a single run of "iperf -c <dest>" with the ipsec > offload on both ends of a point-to-point connection: > > 9.4 Gbps - normal case > 7.6 Gbps - ipsec with offload > 343 Mbps - ipsec no offload
Dave, looks like you pulled this in as well, correct? I did not receive notification. > The following are changes since commit > c13da21cdb8085f1d9a53463c88a4d3967fe90fd: > tun: avoid calling xdp_rxq_info_unreg() twice > and are available in the git repository at: > git://git.kernel.org/pub/scm/linux/kernel/git/jkirsher/next-queue 10GbE
