freebsd-dev/sys/netipsec
Fabien Thomas f8e73c47d8 Add a SPD cache to speed up lookups.
When large SPDs are used, we face two problems:

- too many CPU cycles are spent during the linear searches in the SPD
  for each packet
- too much contention on multi socket systems, since we use a single
  shared lock.

Main changes:

- added the sysctl tree 'net.key.spdcache' to control the SPD cache
  (disabled by default).
- cache the sp indexes that are used to perform SP lookups.
- use a range of dedicated mutexes to protect the cache lines.

Submitted by: Emeric Poupon <emeric.poupon@stormshield.eu>
Reviewed by: ae
Sponsored by:	Stormshield
Differential Revision: https://reviews.freebsd.org/D15050
2018-05-22 15:54:25 +00:00
..
ah_var.h
ah.h
esp_var.h
esp.h
ipcomp_var.h
ipcomp.h
ipsec6.h
ipsec_input.c
ipsec_mbuf.c
ipsec_mod.c
ipsec_output.c
ipsec_pcb.c
ipsec_support.h
ipsec.c
ipsec.h
key_debug.c
key_debug.h
key_var.h
key.c
key.h
keydb.h
keysock.c
keysock.h
subr_ipsec.c
udpencap.c
xform_ah.c
xform_esp.c
xform_ipcomp.c
xform_tcp.c
xform.h