[Openswan Users] [Ocf-linux-users] IPSec L2tpv3 throughput low using Netkey kernel stack
david_mccullough at mcafee.com
Wed May 18 22:02:21 EDT 2011
Jivin Paul Wouters lays it down ...
> On Tue, 17 May 2011, Kim Phillips wrote:
> >>> but when the Sec driver is configured as module into the kernel the module doesn;t get inserted
> >>> gives segmentation fault and if the Sec driver is configured as non-module type the kernel doesn't
> >>> bootsup at all!
> >> David might be able to help with this. The ubsec driver is mostly used on linksys/asus machines,
> >> perhaps yours is slightly different?
> > Based on the freescale URL posted to users at openswan, I assume you're
> > referring to the "SEC23DRVRS" driver? That is a standalone driver,
> > and won't be of use unless you're prepared to write code to
> > integrate it into your IPsec stack.
> > Known working (to me at least) IPsec offload configuration for the
> > 8315 should be NETKEY with CONFIG_CRYPTO_DEV_TALITOS configured in
> > a vanilla kernel. To be able to tell whether h/w crypto offload is
> > in operation, see 'grep talitos /proc/interrupts' run.
> Ah, i thought he meant the ubsec one. Talitos I believe is also supported with OCF and KLIPS
> IPsec, but I'm sure David can confirm that.
Yeah, Kim wrote the driver, but the in kernel one is more up to date ;-)
David McCullough, david_mccullough at mcafee.com, Ph:+61 734352815
McAfee - SnapGear http://www.mcafee.com http://www.uCdot.org
More information about the Users