On Thu, Jan 19, 2023 at 06:03:40PM +0000, Dmitry Safonov wrote: > > - net/ipv4/ah4.c could benefit from it: currently it allocates > crypto_alloc_ahash() per every connection, allocating user-specified > hash algorithm with ahash = crypto_alloc_ahash(x->aalg->alg_name, 0, 0), > which are not shared between each other and it doesn't provide > pre-allocated temporary/scratch buffer to calculate hash, so it uses > GFP_ATOMIC in ah_alloc_tmp() > - net/ipv6/ah6.c is copy'n'paste of the above > - net/ipv4/esp4.c and net/ipv6/esp6.c are more-or-less also copy'n'paste > with crypto_alloc_aead() instead of crypto_alloc_ahash() No they should definitely not switch over to the pool model. In fact, these provide the correct model that you should follow. The correct model is to allocate the tfm on the control/slow path, and allocate requests on the fast path (or reuse existing memory, e.g., from the skb). We have not yet explored doing the latter with IPsec but that is certainly a possibility. Yes I understand that this is currently impossible for hashes but that is why I'm working on per-request keys. > - net/xfrm/xfrm_ipcomp.c has its own manager for different compression > algorithms that are used in quite the same fashion. The significant > exception is scratch area: it's IPCOMP_SCRATCH_SIZE=65400. So, if it > could be shared with other crypto users that do the same pattern > (bh-disabled usage), it would save some memory. IPcomp uses the legacy crypto compression interface. We now have a new acomp interface which was specifically designed so that we don't need to have these memory pools. Cheers, -- Email: Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
