Subject: Re: [RFC PATCH 0/5] IPsec parallelization

From: Andi Kleen <[email-masked]>
Date: Mon, 01 Dec 2008 12:20:22 +0100

Herbert Xu <[email-masked]> writes:
>
> I still think that you're much better off doing this in the
> crypto layer.  As it stands the only reason why this is attractive
> is because crypto is slow.
>
> Pretty soon processors will start providing crypto support natively
> so this will no longer be the case. 

I'm not sure that's a useful argument.  When cryptography is not
CPU bound anymore it will be memory bandwidth bound. And in this case
you can still get a win out of parallelization if you parallelize
over multiple sockets with own memory controller or own FSB
because that will give you more bandwidth.

-Andi

-- 
[email-masked]