diff options
| author | Kristof Provost <kp@FreeBSD.org> | 2022-02-22 09:21:38 +0000 |
|---|---|---|
| committer | Kristof Provost <kp@FreeBSD.org> | 2022-06-28 09:33:10 +0000 |
| commit | ab91feabcc6f9da21d5c75028153af16d06e679a (patch) | |
| tree | a91a2dc0ba7e4b3c294a5dead018f5a6e0b61e29 /sys/kern/kern_jail.c | |
| parent | a25818eb2869ccc56bd711eca14cd7bbbaddd676 (diff) | |
| download | src-ab91feabcc6f9da21d5c75028153af16d06e679a.tar.gz src-ab91feabcc6f9da21d5c75028153af16d06e679a.zip | |
ovpn: Introduce OpenVPN DCO support
OpenVPN Data Channel Offload (DCO) moves OpenVPN data plane processing
(i.e. tunneling and cryptography) into the kernel, rather than using tap
devices.
This avoids significant copying and context switching overhead between
kernel and user space and improves OpenVPN throughput.
In my test setup throughput improved from around 660Mbit/s to around
2Gbit/s.
Sponsored by: Rubicon Communications, LLC ("Netgate")
Differential Revision: https://reviews.freebsd.org/D34340
Diffstat (limited to 'sys/kern/kern_jail.c')
| -rw-r--r-- | sys/kern/kern_jail.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/kern/kern_jail.c b/sys/kern/kern_jail.c index 0521e06ce223..187768b59608 100644 --- a/sys/kern/kern_jail.c +++ b/sys/kern/kern_jail.c @@ -3675,6 +3675,7 @@ prison_priv_check(struct ucred *cred, int priv) case PRIV_NET_GIF: case PRIV_NET_SETIFVNET: case PRIV_NET_SETIFFIB: + case PRIV_NET_OVPN: /* * 802.11-related privileges. |