PfSense – WireGuard Returns as Experimental Package

Re:PfSense – WireGuard Returns as Experimental Package by SigmundA on Sunday May 09, 2021 @05:57PM (#27100217)

I thought interrupt mode reduced performance, that was the tradeoff, is the throughput your quoting in interrupt or polling mode?

Good numbers either way, but you again much more limited hardware support since the drivers need to be DPDK specific.

[ Parent | on HN ]

Re:PfSense – WireGuard Returns as Experimental Package by gonzo on Sunday May 09, 2021 @11:04PM (#27102276)

You can also run VPP over AF_PACKET (slower, but faster than the kernel) of AF_XDP (almost as fast as DPDK interrupt mode.)

But Wireguard is still crypto-limited, the AES-GCM result proves it.

[ Parent | on HN ]

Re:PfSense – WireGuard Returns as Experimental Package by SigmundA on Monday May 10, 2021 @08:30AM (#27105249)

Wireguard isn't doing to bad considering its not hardware accelerated like AES-GCM.

Also looks like AF_PACKET and AF_XDP are basically an alternative to DPDK with similar functionality but built into the kernel using kernel drivers, new to me.

[ Parent | on HN ]