An offloaded tunnel's counts, from the connections' statistics messages, 2026-10-25
761: the XGS 3300's driver took what a
tunnel's connections in hardware carried - packets the host never sees - from the engine with
SA_GET_STATS, and handed it to the kernel's association, whose byte lifetime and rekey run on it.
SFOS 23's coprocessor software answers that command with 0 bytes and 0 packets for an association that
has carried millions (SFOS 21's on the XGS 136 does the same; the ARMADA driver never used it). Since
octep.ko 80925b28 the driver takes those counts from the coprocessor's statistics messages instead,
which bring every connection's counts once a second, unasked, on all three versions: each direction's
growth is added to the association its microflow names (octep_ipsec_flow_count), and the once-a-second
poll hands the totals to the kernel with no command at all. SA_GET_STATS is read once only, at an
install, where it is also the test that the coprocessor answers.
The whole page, with how it was taken and what it does not show: An offloaded tunnel's counts, from the connections' statistics messages, 2026-10-25.
The discussion of this page is held in the project's GitHub Discussions. Showing it here loads giscus from giscus.app and GitHub, and writing in it needs a GitHub account - what that means.