On 05.11.2014 18:39, George Neville-Neil wrote:
> Howdy,
> 
> Last night (Pacific Time) I committed a change so that GENERIC, on HEAD
> has the netmap
> device enabled.  This is to increase the breadth of our testing of that
> feature prior
> to the release of FreeBSD 11.
> 
> In two weeks I will enable IPSec by default, again in preparation for 11.

Hi,

recently we did some IP forwarding tests and the GENERIC kernel is
several times faster than GENERIC+IPSEC. Even when IPSEC has no SA.

I didn't do test on vanilla kernel, but our kernel is able forward
IPv4/IPv6 on rate close to 8.6 Mpps. The same kernel compiled with IPSEC
can forward only 180 kpps. I think this problem should be solved before
enabling it in GENERIC.

-- 
WBR, Andrey V. Elsukov
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to