[lkml]   [2018]   [Sep]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Regression: kernel 4.14 an later very slow with many ipsec tunnels
Am Donnerstag, 13. September 2018, 15:58:44 schrieb Florian Westphal:
> Wolfgang Walter <> wrote:
> > thanks to the fix from Steffen Klassert I could now run 4.14.69 + his
> > patch
> > and 4.18.7 + his patch without oopsing immediately.
> >
> > But I found that those kernels perform very bad. They perform so bad that
> > they are unusable for our router with about 3000 ipsec tunnels (tunnel
> > mode network <-> network).
> Can you do a 'perf record -a -g sleep 5' with 4.18 and provide 'perf
> report' result?
> It would be good to see where those cycles are spent.

I'll try that but this isn't that easy as the router image does not contain
perf. I also have to do that on our production router. I try to do that
tomorrow evening.

What I can say is that it depends mainly on number of policy rules and SA.

Wolfgang Walter
Studentenwerk München
Anstalt des öffentlichen Rechts

 \ /
  Last update: 2018-09-13 17:47    [W:0.160 / U:0.032 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site