Re: OpenBSD ipsec performance on modern HW

2015-02-23 Thread Evgeniy Sudyr
2013 13:17 À : BARDOU Pierre Cc : misc@openbsd.org Objet : Re: OpenBSD ipsec performance on modern HW All, during my tests I seen that CPU on all cores and memory usage was very low. Just interesting if there are any bottlenecks and how to fix them. 1) Does anybody care tcp stack tuning

Re: OpenBSD ipsec performance on modern HW

2013-07-22 Thread BARDOU Pierre
De : Evgeniy Sudyr [mailto:eject.in...@gmail.com] Envoyé : dimanche 21 juillet 2013 13:17 À : BARDOU Pierre Cc : misc@openbsd.org Objet : Re: OpenBSD ipsec performance on modern HW All, during my tests I seen that CPU on all cores and memory usage was very low. Just interesting if there are any

Re: OpenBSD ipsec performance on modern HW

2013-07-22 Thread Evgeniy Sudyr
: OpenBSD ipsec performance on modern HW All, during my tests I seen that CPU on all cores and memory usage was very low. Just interesting if there are any bottlenecks and how to fix them. 1) Does anybody care tcp stack tuning for high speed IPSEC ? 2) Can I run IPSEC (that's isakmpd

Re: OpenBSD ipsec performance on modern HW

2013-07-21 Thread Evgeniy Sudyr
All, during my tests I seen that CPU on all cores and memory usage was very low. Just interesting if there are any bottlenecks and how to fix them. 1) Does anybody care tcp stack tuning for high speed IPSEC ? 2) Can I run IPSEC (that's isakmpd ?) on other cores? Pierre, can you share your

Re: OpenBSD ipsec performance on modern HW

2013-07-21 Thread Peter Hessler
On 2013 Jul 21 (Sun) at 14:16:32 +0300 (+0300), Evgeniy Sudyr wrote: :All, : :during my tests I seen that CPU on all cores and memory usage was very low. :Just interesting if there are any bottlenecks and how to fix them. Lots of bottlenecks. They can only be fixed in code, and others are working

Re: OpenBSD ipsec performance on modern HW

2013-07-16 Thread BARDOU Pierre
BARDOU -Message d'origine- De : Chris Cappuccio [mailto:ch...@nmedia.net] Envoyé : mardi 16 juillet 2013 00:51 À : Evgeniy Sudyr Cc : misc@openbsd.org; mi...@openbsd.org Objet : Re: OpenBSD ipsec performance on modern HW Evgeniy Sudyr [eject.in...@gmail.com] wrote: BOX1 dmesg: cpu0

Re: OpenBSD ipsec performance on modern HW

2013-07-15 Thread Chris Cappuccio
Evgeniy Sudyr [eject.in...@gmail.com] wrote: BOX1 dmesg: cpu0: Intel(R) Xeon(R) CPU E5620 @ 2.40GHz, 2400.45 MHz cpu1: Intel(R) Xeon(R) CPU E5620 @ 2.40GHz, 2400.09 MHz cpu2: Intel(R) Xeon(R) CPU E5620 @ 2.40GHz, 2400.09 MHz cpu3: Intel(R) Xeon(R) CPU E5620 @ 2.40GHz, 2400.09 MHz cpu4:

OpenBSD ipsec performance on modern HW

2013-07-14 Thread Evgeniy Sudyr
Hi I need to figure if I can improve isakmpd / ipsec performance in my setup on openbsd -current I have two boxes connected to each other via 1Gbit link and I'm using iperf to test performance with default ipsec.conf between these two servers: # cat ipsec.conf: ike esp from aaa.aaa.aaa.118 to

Re: OpenBSD ipsec performance on modern HW

2013-07-14 Thread Evgeniy Sudyr
systat output from one of Box-es: 4 usersLoad 0.89 0.35 0.22 Sun Jul 14 13:34:03 2013 memory totals (in KB)PAGING SWAPPING Interrupts real virtual free in out in out12188 total Active24660 24660

Re: OpenBSD ipsec performance on modern HW

2013-07-14 Thread Christian Weisgerber
Evgeniy Sudyr eject.in...@gmail.com wrote: I need to figure if I can improve isakmpd / ipsec performance in my setup on openbsd -current I have two boxes connected to each other via 1Gbit link and I'm using iperf to test performance with default ipsec.conf between these two servers: #

Re: OpenBSD ipsec performance on modern HW

2013-07-14 Thread Evgeniy Sudyr
top CPU load during iperf test Box1: load averages: 0.48, 0.17, 0.11 gateway1 18:40:59 24 processes: 23 idle, 1 on processor CPU0 states: 0.0% user, 0.0% nice, 35.9% system, 15.8% interrupt, 48.3% idle CPU1 states: 0.0% user, 0.0% nice, 0.0% system, 0.0% interrupt, 100% idle CPU2