[strongSwan] Parallelism in ESP userspace processing?

Martin Willi martin at strongswan.org
Tue Sep 16 09:42:16 CEST 2014


Hi,

> For kernel space there is only one thread in ordinary case. But is there 
> anything different for userspace backend?

No, our libipsec userspace IPsec backend currently uses a single thread
in each flow direction.

If performance is critical, you certainly should use a kernel based
IPsec backend. It avoids moving packets between kernel and userspace. If
parallelism is required on Linux, you may have a look at the pcrypt
mechanism.

Regards
Martin



More information about the Users mailing list