IPSec on current.

[David Gilbert]

>>>>> "Mike" == Mike Tancsa <mike at sentex.net> writes:

Mike> At 12:26 PM 27/10/2004, David Gilbert wrote:
>> I'm just trying to diagnose something on 5.3-RC1 running on a dual
>> AMD64 platform.  Running setkey seems to be hanging the system
>> ... has anyone had this happen recently?

Mike> I did a bunch of stress testing on RELENG_5 with FAST_IPSEC and
Mike> the soekris HiFn card using the HiFn drivers that are in HEAD
Mike> just last week.  I was able to bring up close to 200
Mike> associations without issue.  Which IPSEC are you using ? KAME or
Mike> FAST_IPSEC ?  If FAST_IPSEC, did you disable INET6 ?

I'm using FAST_IPSEC and INET6 is enabled.  I see a network
performance test from (undated)

http://people.freebsd.org/~pjd/netperf/

in which amd64 && FAST_IPSEC was noted as broken.  Don't know when
that was.

So ... are you saying that FAST_IPSEC excludes INET6?

Dave.

-- 
============================================================================
|David Gilbert, Independent Contractor.       | Two things can only be     |
|Mail:       dave at daveg.ca                    |  equal if and only if they |
|http://daveg.ca                              |   are precisely opposite.  |
=========================================================GLO================