svn commit: r365449 - head/sbin/rcorder

[Olivier Cochard-Labbé]

On Thu, Sep 17, 2020 at 10:21 PM John Baldwin <jhb at freebsd.org> wrote:

>
>
> I don't think the issue is with rcorder though.  I think the reason the
> ordering matters warrants further investigation.  Is aesni not getting
> used when ipsec is loaded first?  You can use dtrace with the script at
> https://github.com/bsdjhb/kdbg/blob/master/dtrace/crypto_drivers.d to see
> which driver is being used.
>
>
Hi,

The driver used is cryptosoft when ipsec keys are set before the aesni
module is loaded.

  I suspect
> btw that you could just do 'sh /etc/rc.d/ipsec restart' post-boot without
> unloading any modules which would also fix your benchmark.
>


Correct, just restarting ipsec fix the benchmark.
And once restarted, the driver used is aesni.


> I think long term we want OCF's notions of sessions to be a bit more
> fluid such that "client" sessions for things like GELI and IPSec can
> be backed by one or more "driver" sessions (including "driver" sessions
> coming and going as devices come and go).  That's a fair bit more work
> however.
>
>
And why not simply add 'kld' into the REQUIRE part of /etc/rc.d/ipsec ?
But this will fix only IPsec: What about other crypto consumers ?

Regards,

Olivier