On Mon, 12 Dec 2022 at 15:38, Martin Willi <martin@xxxxxxxxxxxxxx> wrote: > > Hi Ard, > > > Currently on ARM, we only permit kernel mode NEON in task context [...] > > For IPsec packet encryption involving highly performant crypto > > implementations, this results in a substantial performance hit [...] > > Thanks for your continued work on this. > > > Without these changes, an IPsec tunnel from a 32-bit VM to the 64-bit > > host can achieve a throughput of 9.5 MB/s TX and 11.9 MB/s RX. > > > > When the crypto algorithm is permitted to execute in softirq context, > > the throughput increases to 16.5 MB/s TX and 41 MB/s RX. > > In my tests on an Armada 385, I could increase IPsec throughput with > ChaCha20/Poly1305 on RX from ~230 to ~260 MBit/s when using the NEON > code path. So you may add my: > > Tested-by: Martin Willi <martin@xxxxxxxxxxxxxx> > Thanks!
