[Bug 233759] igb (I210) + net.inet.ipsec.async_crypto=1 + aesni kill receiving queues and traffic

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=233759

--- Comment #3 from Lev A. Serebryakov <lev at FreeBSD.org> ---
(In reply to Eric Joyner from comment #2)
They randomly stop while receiving traffic. It could be several minutes, like
all traffic is passing well for 2 minutes, then 1/4 of traffic is lost forever,
then after another 30 seconds other 1/4 of traffic is lost (1/2 in total), then
1/2 of traffic could pass for another 3-4-5 minutes, but at least only 3/4 is
lost and 3 queues are effectively stopped. There is no panics or any messages
in kernel output.

I never seen recovery, but, to be honest, I didn't wait more than 5 minutes.

I could say, that ifconfig igb0 down && ifconfig igb0 up doesn't help.

I could not say about igb1 (outbound interface) for sure, as I've checked
inbound one with "tcpdump" and it shows that 1/4-1/2-3/4 of traffic is not seen
even by tcpdump. Traffic is generated (with pkt-gen on other end of the link,
NOT ON SAME SYSTEM!) with distinct pattern (regular loop over many source IPs),
so holes in the traffic is well seen by eye (when packet rate is low). And igb1
only send traffic, it is unidirectional UDP test (as pkt-gen implies).

And one more: only sending works. I could turn on
"net.inet.ipsec.async_crypto=1" and send traffic from very this system with,
say, iperf3 (use it as endpoint with IPsec and not as router), and it make
things faster (it is why I've tried to turn it on for routing), and everything
works.

BTW, I could try to build kernel with INVARIANTS and WITNESSes...

-- 
You are receiving this mail because:
You are the assignee for the bug.