George V. Neville-Neil 26882b4239 Turning on IPSEC used to introduce a slight amount of performance ... degradation (7%) for host host TCP connections over 10Gbps links, even when there were no secuirty policies in place. There is no change in performance on 1Gbps network links. Testing GENERIC vs. GENERIC-NOIPSEC vs. GENERIC with this change shows that the new code removes any overhead introduced by having IPSEC always in the kernel. Differential Revision: D3993 MFC after: 1 month Sponsored by: Rubicon Communications (Netgate)		2015-10-27 00:42:15 +00:00
..
ah_var.h
ah.h
esp_var.h
esp.h
ipcomp_var.h
ipcomp.h
ipsec6.h
ipsec_input.c
ipsec_mbuf.c
ipsec_output.c	Take extra reference to security policy before calling crypto_dispatch().	2015-09-30 08:16:33 +00:00
ipsec.c	Turning on IPSEC used to introduce a slight amount of performance	2015-10-27 00:42:15 +00:00
ipsec.h
key_debug.c	Make IPsec work with AES-GCM and AES-ICM (aka CTR) in OCF... IPsec	2015-08-04 17:47:11 +00:00
key_debug.h
key_var.h
key.c	Make IPsec work with AES-GCM and AES-ICM (aka CTR) in OCF... IPsec	2015-08-04 17:47:11 +00:00
key.h
keydb.h	Make IPsec work with AES-GCM and AES-ICM (aka CTR) in OCF... IPsec	2015-08-04 17:47:11 +00:00
keysock.c
keysock.h
xform_ah.c	Take extra reference to security policy before calling crypto_dispatch().	2015-09-30 08:16:33 +00:00
xform_esp.c	Take extra reference to security policy before calling crypto_dispatch().	2015-09-30 08:16:33 +00:00
xform_ipcomp.c	Take extra reference to security policy before calling crypto_dispatch().	2015-09-30 08:16:33 +00:00
xform_tcp.c
xform.h