[strongSwan] IPComp in tunnel mode does not work for small packets?

[Martin Willi]

Hi,

> If I am not mistaken, IPComp is applied only if compression is
> meaningful. So will it not work for small packets? I am seeing ping go
> through only for packet size >= 288 bytes

Yes, the kernel does not compress small packets, as it probably would
not save any bytes on the wire. Smaller packets are processed without
compression. I'm not sure how compatible this is to other
implementations, but that's the way things are done in the Linux kernel.

Regards
Martin