IPsec performace - netisr hits %100

Thu May 6 15:56:45 UTC 2021

On Thu, May 06, 2021 at 05:07:30PM +0300, Özkan KIRIK wrote:
> I wonder that if you received the flame graphs ?

Yes, there's nothing obviously problematic there.

> I also tested system with multiple if_ipsec interfaces using different
> source-dst tunnel address.
> By this way, system can utilize all cpu cores.
> But for single if_ipsec interface, is there a way to speed up transfer ?

Did you see Andrey's comment regarding the MTU on the ipsec interface?