[strongSwan-dev] ike sa manager taking ~10 seconds to queue IKE delete

[Martin Willi]

Hi,

> charon->controller->terminate_ike(charon->controller,
>                                 ike_sa->get_unique_id(ike_sa),
>                                 controller_cb_empty, NULL, 10000);

> Kindly help us understand why IKE SA manager is taking ~10 seconds to queue
> IKE delete.

terminate_ike() relies on ike_sa_manager->checkout_by_id(). This method
currently uses a linear search, and waits for each IKE_SA to compare the
unique ID. So this has O(n) behavior, and will be rather slow if you
have many IKE_SAs.

Regards
Martin