[strongSwan] Parallelism in ESP userspace processing?

[Martin Willi]

Hi,

> For kernel space there is only one thread in ordinary case. But is there 
> anything different for userspace backend?

No, our libipsec userspace IPsec backend currently uses a single thread
in each flow direction.

If performance is critical, you certainly should use a kernel based
IPsec backend. It avoids moving packets between kernel and userspace. If
parallelism is required on Linux, you may have a look at the pcrypt
mechanism.

Regards
Martin