Raj Ammanur <rammanur@xxxxxxxxxx> wrote: > > First, I would like to report that we are also seeing problem where IPSec > packets are getting queued up to the workqueue for async processing because > of the FPU not being available. Since there are also a lot of input pkts, by the > time xfrm_input() is invoked again after the async operation is completed, the > IPsec pkts are either out of sequence or out of the replay window, since the > replay window has advanced. We are using IPSec tunnel between two > switches connected over a Long Fat Network and have sender and receiver > servers connected to the two ends of the tunnel. Because of the TCP > receiver receiving pkts either out of order or not receiving pkts because of > dropped pkts, this is causing significant drop in TCP throughtput on Long Fat > Networks, where the network latency is high. Thanks for the reminder. I will try to post a patch for this soon. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt -- To unsubscribe from this list: send the line "unsubscribe linux-crypto" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
