Linear search of SA/SP in xfrm_find_acq_byseq() causes CPU spike

Solution In Progress - Updated -

Issue

  • The performance of __xfrm_find_acq_byseq.isra.11 degrades when the IPSec SAD/SPD count grows
  • Linear search of SA/SP in xfrm_find_acq_byseq() causes CPU spike

Environment

  • Red Hat Enterprise Linux 7
  • Red Hat Enterprise Linux 8

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In