Re: PPP-over-L2TP kernel support, new patch for review

[jamal <hadi@xxxxxxxxxx>]

On Tue, 2004-09-21 at 21:14, Benjamin LaHaise wrote:
> On Wed, Sep 22, 2004 at 09:07:06AM +1000, Herbert Xu wrote:

> CPU load.  
> The main reason I was forced to revisit L2TP (imo, it's a 
> horrible protocol that suffers from too many bad decisions) was in its 
> role for terminating DSL.  In this case one expects to be able to have 
> tens of thousands of connections terminated by a single box, which 
> means pushing hundreds of megabits of traffic.  The overhead of crypto 
> operations in such a scenario makes it a far too costly choice.

Bad excuse ;->
So use a crypto chip or do less connections and scale by distributing
etc. I have a feeling tehres nothing inherent in your code that stops
you from intergrating into ipsec.

cheers,
jamal