<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12pt"><div><br><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 0pt 0.25in; mso-add-space: auto;"><span style="color: black; line-height: 115%; font-size: 12pt; mso-bidi-font-family: Arial;"><font face="Calibri">Hi,</font><o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 0pt 0.25in; mso-add-space: auto;"><span style="color: black; line-height: 115%; font-size: 12pt; mso-bidi-font-family: Arial;"><o:p><font face="Calibri"> </font></o:p></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 0pt 0.25in; mso-add-space: auto;"><span style="color: black; line-height: 115%; font-size: 12pt; mso-bidi-font-family: Arial;"><font face="Calibri">Recently during my scalability testing of charon with strongswan
version 5.0.4 and load tester plugin. I </font></span></div><span style="color: black; line-height: 115%; font-size: 12pt; mso-bidi-font-family: Arial;"><div style="margin: 0in 0in 0pt 0.25in; mso-add-space: auto;"><font face="Calibri">observed that after establishment of the tunnels (20,000 IPsec
tunnels), <span style="mso-spacerun: yes;"> </span>if I trigger the #ipsec stop
command, it should suppose to send 20k IKE DELETE INFORMATIONAL <span style="mso-spacerun: yes;"> </span>request messages to its peer. But I find , it
sends 14k messages <span style="mso-spacerun: yes;"> </span>(approximately) only.
</font></div></span><div> </div><div style="margin: 0in 0in 0pt 0.25in; mso-add-space: auto;"><span style="color: black; line-height: 115%; font-size: 12pt; mso-bidi-font-family: Arial;"><o:p><font face="Calibri"> </font></o:p></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 0pt 0.25in; mso-add-space: auto;"><span style="color: black; line-height: 115%; font-size: 12pt; mso-bidi-font-family: Arial;"><font face="Calibri">Note that, with 1000 IPsec tunnels, I do not see this issue. Can
anyone please confirm that, whether it is an issue with strongswan ? If yes, is
there any patch available? Thanks in advance. </font><o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 0pt 0.25in; mso-add-space: auto;"><span style="color: black; line-height: 115%; font-size: 12pt; mso-bidi-font-family: Arial;"><o:p><font face="Calibri"> </font></o:p></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 0pt 0.25in; mso-add-space: auto;"><span style="color: black; line-height: 115%; font-size: 12pt; mso-bidi-font-family: Arial;"><font face="Calibri">Regards,</font><o:p></o:p></span></div><div><font face="Times New Roman">
</font></div><div style="margin: 0in 0in 10pt 0.25in; mso-add-space: auto;"><span style="color: black; line-height: 115%; font-size: 12pt; mso-bidi-font-family: Arial;"><font face="Calibri">Chinmaya</font><o:p></o:p></span></div><div><font face="Times New Roman">
</font></div></div></body></html>