Re: Regression: kernel 4.14 an later very slow with many ipsec tunnels

[Florian Westphal]

Wolfgang Walter <linux@xxxxxxx> wrote:
> I'll try that but this isn't that easy as the router image does not contain 
> perf. I also have to do that on our production router. I try to do that 
> tomorrow evening.

No need if its too difficult.

> What I can say is that it depends mainly on number of policy rules and SA.

Thats already a good hint, I guess we're hitting long hash chains in
xfrm_policy_lookup_bytype().