[strongSwan] Packet loss on rekeying

Diego Woitasen diego at woitasen.com.ar
Mon Sep 17 22:23:48 CEST 2012


Hi,
 I'm testing my Strongswan installation and I discover that I have
packet loss on rekeying. I set this values to reproduce the problem:

ikelifetime=60s
lifetime=30s
rekeymargin=20s
rekeyfuzz=0%

And every time a rekey appears in the log file, some packets are lost
(testing with ping -A -c 100 in a infinite loop).

I'm using 4.5.2 from Squeeze Backports.

I have three questions:

1- Is this normal? Shall I expect some packet loss during the rekey?

2- If not, what can I do to debug this?

3- Are there some code added to the latest version that can help on this issue?

Regards,
  Diego

-- 
Diego Woitasen




More information about the Users mailing list