<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12pt"><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt; mso-bidi-font-size: 11.0pt;"><font face="Calibri">Hi Martin/All,</font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt; mso-bidi-font-size: 11.0pt;"><font face="Calibri">Thanks for your valuable response. Using the atomic
incrementation to avoid this race condition, I am getting better results. It
means all the 250k IPsec tunnels are getting up (with 850+ TPS) except 10-20. Debugged
the issue (why the 10-20 IPsec tunnels are not getting established) and found that, the IKE Initiator sends all the 250k IKE_SA_INIT
requests to its peer. The IKE Responder also receives all these 250k requests
including retransmissions. But it generates 249997 IKE_SA_INIT responses. The
struct receiver_t receives packets from the UDP socket, performs light-weight
parsing and adds them to the job queue. I found, it does not drop IKE_SA_INIT
request due to below stated</font></span></div><div><font face="Times New Roman">
</font></div><ol style="list-style-type: decimal; direction: ltr;"><li style="color: rgb(0, 0, 0); font-size: 12pt; font-style: normal; font-weight: normal;"><div style="color: rgb(0, 0, 0); font-size: 11pt; font-style: normal; font-weight: normal; margin-top: 0in; margin-bottom: 0pt; mso-list: l0 level1 lfo1;"><span style="line-height: 115%; font-size: 12pt; mso-bidi-font-size: 11.0pt;">Because of
cookie/overload checking</span></div></li><li style='color: rgb(0, 0, 0); font-family: "Calibri","sans-serif"; font-size: 12pt; font-style: normal; font-weight: normal;'><div style='color: rgb(0, 0, 0); font-family: "Calibri","sans-serif"; font-size: 11pt; font-style: normal; font-weight: normal; margin-top: 0in; margin-bottom: 0pt; mso-list: l0 level1 lfo1;'><span style="line-height: 115%; font-size: 12pt; mso-bidi-font-size: 11.0pt;">if peer has
too many IKE_SAs half open.</span></div></li><li style='color: rgb(0, 0, 0); font-family: "Calibri","sans-serif"; font-size: 12pt; font-style: normal; font-weight: normal;'><div style='color: rgb(0, 0, 0); font-family: "Calibri","sans-serif"; font-size: 11pt; font-style: normal; font-weight: normal; margin-top: 0in; margin-bottom: 0pt; mso-list: l0 level1 lfo1;'><span style="line-height: 115%; font-size: 12pt; mso-bidi-font-size: 11.0pt;">if global
half open IKE_SA limit reached.</span></div></li><li style='color: rgb(0, 0, 0); font-family: "Calibri","sans-serif"; font-size: 12pt; font-style: normal; font-weight: normal;'><div style='color: rgb(0, 0, 0); font-family: "Calibri","sans-serif"; font-size: 11pt; font-style: normal; font-weight: normal; margin-top: 0in; margin-bottom: 10pt; mso-list: l0 level1 lfo1;'><span style="line-height: 115%; font-size: 12pt; mso-bidi-font-size: 11.0pt;">if job load
acceptable.</span></div></li></ol><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt; mso-bidi-font-size: 11.0pt;"><font face="Calibri"> </font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt; mso-bidi-font-size: 11.0pt;"><font face="Calibri">Can you please suggest what might be the cause behind sending
lesser IKE_SA_INIT responses than received IKE_SA_INIT request? Any hints to
proceed in right direction. </font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt; mso-bidi-font-size: 11.0pt;"><font face="Calibri">Regards,</font></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt;"><span style="line-height: 115%; font-size: 12pt; mso-bidi-font-size: 11.0pt;"><font face="Calibri">Chinmaya </font></span></div><div><font face="Times New Roman">
</font><br></div></div></body></html>