[ovs-discuss] IPSec + openvswitch poor performance

[Justin Pettit]

On Oct 15, 2010, at 5:00 AM, Maciej Gałkiewicz wrote:

> What is wrong with 4th test? Why the connection is so slow? Both tools uses 100% cpu time during only this trial. My servers have i7-920 (2.67GHz). I have also tried with Linux GRE tunnels (ip_gre). The results were the same. The last idea which came to my mind was openvpn. I set up openvpn in bridge mode also on top of IPSec. The results were only a little worse than the third trial. Any suggestions?

No, not yet.  We've also seen a bad interaction between IPsec and GRE when it comes to performance.  This is something we're planning to investigate in the next few weeks.  I'll follow-up on this thread when we know more.

--Justin