<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Interesting!<br><br>Let me try that out after Christmas!<br><br>Regards<br><br><div>> Date: Thu, 18 Dec 2014 17:15:07 +0100<br>> From: schwarz@gaertner.de<br>> To: olivier_pelerin@hotmail.com<br>> CC: avalentin@marcant.net; users@lists.strongswan.org<br>> Subject: Re: [strongSwan] Strongswan using VTI<br>> <br>> Hi,<br>> >>>>> "OP" == Olivier PELERIN <olivier_pelerin@hotmail.com> writes:<br>> <br>> OP> Tried to follow this kernel commit - it does not work<br>> <br>> OP> https://lists.ubuntu.com/archives/kernel-team/2013-November/034116.html<br>> <br>> OP> It seems utterly broken<br>> <br>> OP> From: olivier_pelerin@hotmail.com<br>> OP> To: avalentin@marcant.net; users@lists.strongswan.org<br>> OP> Date: Thu, 18 Dec 2014 10:11:23 +0100<br>> OP> Subject: Re: [strongSwan] Strongswan using VTI<br>> <br>> OP> Will try it out<br>> <br>> OP> When I strace my ping I'm getting (Resource temporarily unavailable) when we receive the echo-reply<br>> <br>> OP> sendmsg(3, {msg_name(16)={sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("10.0.0.2")}, msg_iov(1)=[{"\10\0\312\350Y\362\00096\231\222T\0\0\0\0K+\0\0\0\0\0\0\20\21\22\23\24\25\26\27"..., 64}], msg_controllen=32, {cmsg_len=28, cmsg_level=SOL_IP, cmsg_type=, ...}, msg_flags=0}, 0) = 64<br>> OP> recvmsg(3, 0x7fff93401680, 0) = -1 EAGAIN (Resource temporarily unavailable)<br>> OP> gettimeofday({1418893623, 10985}, NULL) = 0<br>> OP> gettimeofday({1418893623, 11029}, NULL) = 0<br>> <br>> check your kernel parameter xfrm4_gc_thresh with:<br>> <br>> cat /proc/sys/net/ipv4/xfrm4_gc_thresh<br>> <br>> if you see 1024 or even 2048 as the result, it's way to low. bump it<br>> up with:<br>> <br>> echo 262144 > /proc/sys/net/ipv4/xfrm4_gc_thresh<br>> <br>> and check your ping/traceroute again. if you succseed, make your<br>> setting permanet and add<br>> <br>> net.ipv4.xfrm4_gc_thresh = 262144<br>> <br>> to /etc/sysctl.conf.<br>> kind regards, schwarz<br>> <br>> -- <br>> Gärtner Datensysteme GmbH & Co. KG Komplementärin:<br>> Gärtner Datensysteme<br>> Hamburger Str. 273a Tel. (0531) 2 33 55 55 Verwaltungs GmbH<br>> 38114 Braunschweig Fax (0531) 2 33 55 56<br>> Amtsgericht Braunschweig<br>> Amtsgericht Braunschweig HRA 200 848 HRB 202 115<br>> <br>> GmbH-Geschäftsführung:<br>> Christine Müller Martin Neitzel Ulrich Schwarz Dr. Stefan Gärtner<br></div> </div></body>
</html>