[OpenAFS] Re: Openafs vs Red Hat's Netkey

[Andrew Deason]

On Mon, 9 Dec 2013 11:24:55 -0500 (EST)
Steve Gaarder <gaarder1@math.cornell.edu> wrote:

> Any ideas about what is going on?

A colleague pointed me at
<http://www.couyon.net/1/post/2013/02/ipsec-on-rhel6centos6-dont-do-it.html>,
which may be helpful. While that is very light on the technical details
of what is happening, it does indicate that some others have also found
net performance for Linux ipsec to be terrible for RHEL6-ish Linux, and
they found a workaround that worked for at least them. If you see
ksoftirqd using a lot of cpu (or if you can try this on SL5 and it
doesn't happen there), perhaps you are encountering a similar issue.

There's a bug in CentOS about this:
<http://bugs.centos.org/view.php?id=6253>, but I haven't seen anything
indicating that this has been reported to Red Hat.

-- 
Andrew Deason
adeason@sinenomine.net