<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12pt"><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Hi All,</font></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">I am running with 200k IPsec tunnels. Although it can bring
up all those tunnels successfully, I find, there are lots of retransmissions in
charon.log. </font></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Jan 1 00:10:29 56[IKE] retransmit 1 of request with message
ID 0 (IKE Initiator)</font></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Jan 1 00:10:45 49[IKE] received retransmit of request with
ID 0, retransmitting response (IKE Responder)</font></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">I know, these are certainly considered to be bad.<span style="mso-spacerun: yes;"> </span>Checked the CPU usage of Charon daemon at IKE
responder end (through top –p <PID of Charon daemon>) and found to be
less than 10% (mostly). Upon profiling it shows that, most of the time it
spends in pthread_mutex_lock ().<span style="mso-spacerun: yes;"> </span>Note, I
have set the retransmit_timeout and retransmit_tries to 60 seconds and 30 times
respectively, which is a quite bug. Can anyone please guide/suggest what might be
the issue?</font></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri"> </font></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Regards,</font></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><font face="Calibri">Chinmaya</font></div><div><font face="Times New Roman">
</font></div></div></body></html>