Subject: Re: ipsec pcb/socket passing
To: None <jonathan@DSG.Stanford.EDU>
From: Jun-ichiro itojun Hagino <itojun@itojun.org>
List: tech-net
Date: 08/25/2003 08:48:22
> > - kame code shares all sys/netinet6 among all operating systems.
> > therefore, if we make changes specific to netbsd (like hashes and
> > CIRCLEQ) it will result in #ifdef hell.
>
> Yikes! But on the other hand, not having a hash-table and resorting to
> a linear scan on each and every pcb lookup, means that KAME v6 is (no
> slur intended, here) rather a bit of toy-system? At least by
> contemporary standards: one could not really deploy any IPv6 without
> hashtables in the heavy-duty environments where *BSD IP/TCP is
> currently deployed with hundreds or thousands of simultaneous [ipv4]
> connections, at least unless you are willing to acecpt lower
> performance levels. Is that a fair comment?
>
> NB, I'm not complaining: I'm just asking. It does seem a clear
> conseqence of comments you've made here, both recently and over the
> past few years, consequences which had not really sunk in yet (at
> least not for me, assuming too that my inference is valid.).
then all 4.4BSD-based systems (i.e. without hash lookup) are toy-system.
i don't think hashed inpcb lookup alone can classify operating system
between toy-system and non-toy-system. i don't see why you bother
to make a comment like this.
itojun