Re: [PATCH 0/2]: Remote softirq invocation infrastructure.

On Sun, Sep 21, 2008 at 11:46:28AM +0200, Steffen Klassert wrote:

It's non-trivial but possible. I have a test implementation that
runs the whole IP layer in parallel. The basic idea to keep track
of the packet ordering is to give the packets sequence numbers
befor we run in parallel. Befor we push the packets to the upper
layers or to the neighboring subsystem I have a mechanism that
brings them back to the right order.

Yes that should do the trick.

With my test environment (two quad core boxes) I get with IPSEC
aes192-sha1 and one tcp stream a throughput of about 600 Mbit/s
compared to about 200 Mbit/s without the parallel processing.

Yes this would definitely help IPsec. However, I'm not so sure
of its benefit to routing and other parts of networking. That's
why I'd rather have this sort of hack stay in the crypto system
where it's isolated rather than having it proliferate throughout
the network stack.

When the time comes to weed out this because all CPUs that matter
have encryption in hardware then it'll be much easier to delete a
crypto algorithm as opposed to removing parts of the network
infrastructure :)

Cheers,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

Relevant Pages

  • Re: Need a script to understand names posts
    ... the physical layer of the ISO model, augmented by providing all of the logic ... a network model that does more than just detect the fact that packets ... and brings them back onto the network as if they had never been lost. ... the packets previously lost will never ever be lost again, ...
    (microsoft.public.scripting.wsh)
  • Re: network programming
    ... how an IP header is formed and in what OSI layer they fit. ... Sockets abstract part of the transport layer. ... packets so if you need them you may have to use FFI to access the OS ...
    (comp.lang.lisp)
  • Re: [fw-wiz] Layer 2 (stealth) firewalls - PBR?
    ... Layer 2 devices like switches have to forwrd layer 3 multicast packets out ... Protocol (IGMP) and Multicast Listener Discovery Snooping Switches. ... In the case of IP multicast traffic, an IGMP snooping switch provides ...
    (Firewall-Wizards)
  • Re: [OT] CNN bragging about "FTP technology"
    ... The specs for addresses aren't TCP, ... > data packets are put together in the right order at the receiving end; ... The machine, or physical layer, comprises ... The network layer has to do with addresses, ...
    (talk.origins)
  • Re: [PATCH] 802.1p priority (fixed)
    ... By the usual way, application does not have access to Layer 2 headers, ... said that there is a way to mark this packets with m_tag from PF/IPFW. ... packet, that going out the vlan iterface has m_tag with 802.1p, we use ... Cisco Catalyst does: trust the received 802.1p inforamtion, ...
    (freebsd-net)