Performance enhancement for IPsec processing on multi-core systems

Most of the existing crypto drivers cannot operate effectively over the multi-core systems, resulting in high synchronization overheads. Moreover, the crypto drivers under utilize the full capacity of the hardware device underneath, resulting in low IPsec throughput. This paper discusses a design methodology that virtualizes the access to the common crypto accelerators across the multiple cores and leverages the existing feature of Linux to design a more balanced system. The new design can utilize the hardware capabilities in a better and efficient way to improve the overall crypto performance on multi-core systems.