[Openswan Users] [Ocf-linux-users] IPSec L2tpv3 throughput low using Netkey kernel stack

[David McCullough]

Jivin Paul Wouters lays it down ...
> On Tue, 17 May 2011, Kim Phillips wrote:
> 
> >>> but when the Sec driver is configured as module into the kernel the module doesn;t get inserted
> >>> gives segmentation fault and if the Sec driver is configured as non-module type the kernel doesn't
> >>> bootsup at all!
> >>
> >> David might be able to help with this. The ubsec driver is mostly used on linksys/asus machines,
> >> perhaps yours is slightly different?
> >
> > Based on the freescale URL posted to users at openswan, I assume you're
> > referring to the "SEC23DRVRS" driver?  That is a standalone driver,
> > and won't be of use unless you're prepared to write code to
> > integrate it into your IPsec stack.
> >
> > Known working (to me at least) IPsec offload configuration for the
> > 8315 should be NETKEY with CONFIG_CRYPTO_DEV_TALITOS configured in
> > a vanilla kernel.  To be able to tell whether h/w crypto offload is
> > in operation, see 'grep talitos /proc/interrupts' run.
> 
> Ah, i thought he meant the ubsec one. Talitos I believe is also supported with OCF and KLIPS
> IPsec, but I'm sure David can confirm that.

Yeah, Kim wrote the driver,  but the in kernel one is more up to date ;-)

Cheers,
Davidm

-- 
David McCullough,      david_mccullough at mcafee.com,  Ph:+61 734352815
McAfee - SnapGear      http://www.mcafee.com         http://www.uCdot.org