Hi Ard, > Currently on ARM, we only permit kernel mode NEON in task context [...] > For IPsec packet encryption involving highly performant crypto > implementations, this results in a substantial performance hit [...] Thanks for your continued work on this. > Without these changes, an IPsec tunnel from a 32-bit VM to the 64-bit > host can achieve a throughput of 9.5 MB/s TX and 11.9 MB/s RX. > > When the crypto algorithm is permitted to execute in softirq context, > the throughput increases to 16.5 MB/s TX and 41 MB/s RX. In my tests on an Armada 385, I could increase IPsec throughput with ChaCha20/Poly1305 on RX from ~230 to ~260 MBit/s when using the NEON code path. So you may add my: Tested-by: Martin Willi <martin@xxxxxxxxxxxxxx> Thanks, Martin
