From: Timo Teräs <timo.teras@iki.fi>
Date: Wed, 7 Apr 2010 00:30:05 +0000 (+0000)
Subject: xfrm: cache bundles instead of policies for outgoing flows
X-Git-Tag: v2.6.35-rc1~473^2~548
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=80c802f3073e84c956846e921e8a0b02dfa3755f;p=pandora-kernel.git

xfrm: cache bundles instead of policies for outgoing flows

__xfrm_lookup() is called for each packet transmitted out of
system. The xfrm_find_bundle() does a linear search which can
kill system performance depending on how many bundles are
required per policy.

This modifies __xfrm_lookup() to store bundles directly in
the flow cache. If we did not get a hit, we just create a new
bundle instead of doing slow search. This means that we can now
get multiple xfrm_dst's for same flow (on per-cpu basis).

Signed-off-by: Timo Teras <timo.teras@iki.fi>
Signed-off-by: David S. Miller <davem@davemloft.net>
---

Reading git-diff-tree failed