From: Sowmini Varadhan <sowmini.varadhan@xxxxxxxxxx> Date: Tue, 1 Dec 2015 12:59:53 -0500 > I instrumented iperf with and without ipsec, just using esp-null, > and 1 thread, to keep things simple. I'm seeing some pretty dismal > performance numbers with ipsec, and trying to think of ways to > improve this. Here are my findings, please share feedback. Doesn't skb_cow_data() contribute significantly to the ESP base cost, especially for TCP packets? I mean, we're copying every TCP data frame. If this is the case, even with GSO/whatever offloads, I expect that performance will be roughly halfed. -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
