From mboxrd@z Thu Jan 1 00:00:00 1970 From: David Miller Subject: Re: Regression: kernel 4.14 an later very slow with many ipsec tunnels Date: Thu, 13 Sep 2018 10:23:05 -0700 (PDT) Message-ID: <20180913.102305.939671149040995911.davem@davemloft.net> References: <20180913135844.3ut6fxgx67t6ndtu@breakpoint.cc> <3448099.9yk84El3Sa@stwm.de> <20180913163848.ni5xc4gc4d6uusdn@breakpoint.cc> Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Content-Transfer-Encoding: 7bit Cc: linux@stwm.de, netdev@vger.kernel.org, steffen.klassert@secunet.com, linux-kernel@vger.kernel.org, torvalds@linux-foundation.org To: fw@strlen.de Return-path: In-Reply-To: <20180913163848.ni5xc4gc4d6uusdn@breakpoint.cc> Sender: linux-kernel-owner@vger.kernel.org List-Id: netdev.vger.kernel.org From: Florian Westphal Date: Thu, 13 Sep 2018 18:38:48 +0200 > Wolfgang Walter wrote: >> What I can say is that it depends mainly on number of policy rules and SA. > > Thats already a good hint, I guess we're hitting long hash chains in > xfrm_policy_lookup_bytype(). I don't really see how recent changes can influence that. And the bydst hashes have been dynamically sized for a very long time. I might have missed something...