From 4739c8833e2e8013417ef0e52610d8b310e97a93 Mon Sep 17 00:00:00 2001 From: Gabriel Oginski Date: Fri, 8 Oct 2021 09:09:45 +0100 Subject: wireguard: reduce memcopy and prefetch header Originally wireguard implementation does memory copy of the whole packet in encryption and decryption. This patch removes unnecessary packet copy in wireguard. In addition, it contains some performance improvement such as prefetching header and deleting unnecessary lock and unlock for decryption. Type: improvement Signed-off-by: Gabriel Oginski Change-Id: I1fe8e54d749e6922465341083b448c842e2b670f --- src/plugins/wireguard/wireguard_send.c | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'src/plugins/wireguard/wireguard_send.c') diff --git a/src/plugins/wireguard/wireguard_send.c b/src/plugins/wireguard/wireguard_send.c index a5f81774a19..53692f074da 100644 --- a/src/plugins/wireguard/wireguard_send.c +++ b/src/plugins/wireguard/wireguard_send.c @@ -50,7 +50,9 @@ wg_buffer_prepend_rewrite (vlib_buffer_t *b0, const wg_peer_t *peer, u8 is_ip4) vlib_buffer_advance (b0, -sizeof (*hdr4)); hdr4 = vlib_buffer_get_current (b0); - clib_memcpy (hdr4, peer->rewrite, vec_len (peer->rewrite)); + + /* copy only ip4 and udp header; wireguard header not needed */ + clib_memcpy (hdr4, peer->rewrite, sizeof (ip4_udp_header_t)); hdr4->udp.length = clib_host_to_net_u16 (b0->current_length - sizeof (ip4_header_t)); @@ -64,7 +66,9 @@ wg_buffer_prepend_rewrite (vlib_buffer_t *b0, const wg_peer_t *peer, u8 is_ip4) vlib_buffer_advance (b0, -sizeof (*hdr6)); hdr6 = vlib_buffer_get_current (b0); - clib_memcpy (hdr6, peer->rewrite, vec_len (peer->rewrite)); + + /* copy only ip6 and udp header; wireguard header not needed */ + clib_memcpy (hdr6, peer->rewrite, sizeof (ip6_udp_header_t)); hdr6->udp.length = clib_host_to_net_u16 (b0->current_length - sizeof (ip6_header_t)); -- cgit 1.2.3-korg