Performance Enhancement for IPsec Processing on Multi-Core Systems
Most of the existing crypto drivers cannot operate effectively over the multi-core systems, resulting in high synchronization overheads. Moreover, the crypto drivers under utilize the full capacity of the hardware device underneath, resulting in low IP-sec throughput. This paper discusses a design methodology that virtualizes the access to the common crypto accelerators across the multiple cores and leverages the existing feature of Linux to design a more balanced system. The new design can utilize the hardware capabilities in a better and efficient way to improve the overall crypto performance on multi-core systems.