> -Original Message-
> From: David Miller
> Sent: Tuesday, April 23, 2019 10:57 PM
> To: f...@strlen.de
> Cc: Vakul Garg ; netdev@vger.kernel.org
> Subject: Re: ipsec tunnel performance degrade
>
> From: Florian Westphal
> Date: Tue, 23 Apr 2019 18:25
From: Florian Westphal
Date: Tue, 23 Apr 2019 18:25:21 +0200
> Vakul Garg wrote:
>> > Vakul Garg wrote:
>> > > > Do you use xfrm interfaces?
>> > >
>> > > I don't think so. I use setkey to create policies/SAs.
>> > > Can you please give me some hint about it?
>> >
>> > Then you're not using ip
Vakul Garg wrote:
> > Vakul Garg wrote:
> > > > Do you use xfrm interfaces?
> > >
> > > I don't think so. I use setkey to create policies/SAs.
> > > Can you please give me some hint about it?
> >
> > Then you're not using ipsec interfaces.
> >
> Instead of creating policies/SA using setkey, I s
> -Original Message-
> From: Florian Westphal
> Sent: Tuesday, April 23, 2019 11:27 AM
> To: Vakul Garg
> Cc: Florian Westphal ; netdev@vger.kernel.org
> Subject: Re: ipsec tunnel performance degrade
>
> Vakul Garg wrote:
> > > Do you use xfrm interf
Vakul Garg wrote:
> > Do you use xfrm interfaces?
>
> I don't think so. I use setkey to create policies/SAs.
> Can you please give me some hint about it?
Then you're not using ipsec interfaces.
> > > Further, perf show that a lot of atomic primitives such as
> > > __ll_sc___cmpxchg_case_mb_4(),
> -Original Message-
> From: Florian Westphal
> Sent: Monday, April 22, 2019 11:16 PM
> To: Vakul Garg
> Cc: netdev@vger.kernel.org
> Subject: Re: ipsec tunnel performance degrade
>
> Vakul Garg wrote:
> > Post kernel 4.9, I am experiencing
Vakul Garg wrote:
> Post kernel 4.9, I am experiencing more than 50% degrade in ipsec performance
> on my arm64 based systems (with onchip crypto accelerator).
> (We use only lts kernels). My understanding is that it is mainly due to xfrm
> flow cache removal in version 4.12.
Yes, likely.
> I
