[Openswan Users] [Ocf-linux-users] IPSec L2tpv3 throughput low using Netkey kernel stack

[Paul Wouters]

On Tue, 17 May 2011, Kim Phillips wrote:

>>> but when the Sec driver is configured as module into the kernel the module doesn;t get inserted
>>> gives segmentation fault and if the Sec driver is configured as non-module type the kernel doesn't
>>> bootsup at all!
>>
>> David might be able to help with this. The ubsec driver is mostly used on linksys/asus machines,
>> perhaps yours is slightly different?
>
> Based on the freescale URL posted to users at openswan, I assume you're
> referring to the "SEC23DRVRS" driver?  That is a standalone driver,
> and won't be of use unless you're prepared to write code to
> integrate it into your IPsec stack.
>
> Known working (to me at least) IPsec offload configuration for the
> 8315 should be NETKEY with CONFIG_CRYPTO_DEV_TALITOS configured in
> a vanilla kernel.  To be able to tell whether h/w crypto offload is
> in operation, see 'grep talitos /proc/interrupts' run.

Ah, i thought he meant the ubsec one. Talitos I believe is also supported with OCF and KLIPS
IPsec, but I'm sure David can confirm that.

Paul