![]() | |||||||||||||
Messages in this thread |
On Sun, Sep 21, 2008 at 11:46:28AM +0200, Steffen Klassert wrote: > > It's non-trivial but possible. I have a test implementation that > runs the whole IP layer in parallel. The basic idea to keep track > of the packet ordering is to give the packets sequence numbers > befor we run in parallel. Befor we push the packets to the upper > layers or to the neighboring subsystem I have a mechanism that > brings them back to the right order. Yes that should do the trick. > With my test environment (two quad core boxes) I get with IPSEC > aes192-sha1 and one tcp stream a throughput of about 600 Mbit/s > compared to about 200 Mbit/s without the parallel processing. Yes this would definitely help IPsec. However, I'm not so sure of its benefit to routing and other parts of networking. That's why I'd rather have this sort of hack stay in the crypto system where it's isolated rather than having it proliferate throughout the network stack. When the time comes to weed out this because all CPUs that matter have encryption in hardware then it'll be much easier to delete a crypto algorithm as opposed to removing parts of the network infrastructure :) Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt | ||||||||||||
| Last update: 2008-09-22 10:27 [from the cache] ©2003-2008 | |||||||||||||