On 22.12.2021. 14:52, Alexander Bluhm wrote:
> Hi,
>
> IPsec is not MP safe yet. To allow forwarding in parallel without
> dirty hacks, it is better to protect IPsec input and output with
> kernel lock. We do not loose much as crypto needs the kernel lock
> anyway. From here we can refine the l
Hi,
IPsec is not MP safe yet. To allow forwarding in parallel without
dirty hacks, it is better to protect IPsec input and output with
kernel lock. We do not loose much as crypto needs the kernel lock
anyway. From here we can refine the lock later.
Note that there is no kernel lock in the SPD
