Re: [patch/RFC]: Asynchronous IPsec processing.
From: Herbert Xu <herbert@gondor.apana.org.au>
Date: 2005-05-03 09:53:12
On Fri, Apr 29, 2005 at 02:41:03PM +0400, Evgeniy Polyakov wrote:
I've created POC code to perform asynchronous IPsec [ESP] processing. Please comment about bugs in the following patch. It of course very dirty - but it is only begining, I just want to know if approach is right. Patch was tested with several ssh session and some traffic like find / and tcpdump over them.
IMHO we should ensure that the async code path does not adversely impact synchronous crypto performance. Most users will be using synchronous crypto primitives. Synchronous crypto is also the best way to utilise VIA Padlock which is arguably the best hardware crypto solution that's available today. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} [off-list ref] Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt