From fc81134a26458a8358483b0d2908a6b83afb7f11 Mon Sep 17 00:00:00 2001 From: Neale Ranns Date: Fri, 26 Feb 2021 10:35:33 +0000 Subject: ipsec: Submit fuller async frames Type: improvement In the current scheme an async frame is submitted each time the crypto op changes. thus happens each time a different SA is used and thus potentially many times per-node. thi can lead to the submision of many partially filled frames. change the scheme to construct as many full frames as possible in the node and submit them all at the end. the frame owner ship is passed to the user so that there can be more than one open frame per-op at any given time. Signed-off-by: Neale Ranns Change-Id: Ic2305581d7b5aa26133f52115e0cd28ba956ed55 --- src/vnet/ipsec/ipsec.h | 1 + 1 file changed, 1 insertion(+) (limited to 'src/vnet/ipsec/ipsec.h') diff --git a/src/vnet/ipsec/ipsec.h b/src/vnet/ipsec/ipsec.h index 7ca15866a14..15de80764a8 100644 --- a/src/vnet/ipsec/ipsec.h +++ b/src/vnet/ipsec/ipsec.h @@ -102,6 +102,7 @@ typedef struct vnet_crypto_op_t *chained_crypto_ops; vnet_crypto_op_t *chained_integ_ops; vnet_crypto_op_chunk_t *chunks; + vnet_crypto_async_frame_t **async_frames; } ipsec_per_thread_data_t; typedef struct -- cgit 1.2.3-korg