[strongSwan] Issues with kernel-libipsec and \32

Tobias Guggemos tobias.guggemos at stud.ifi.lmu.de
Fri Oct 25 19:10:06 CEST 2013


Hy Martin
thanks for your comments.
I want to measure perfomance, because we try to figure out the impact of
IPSec, in case kernel-mode is not available.

The options you described are set!

I will try out RC. Just for awoiding configuration mistakes, attached
please find the config-files.(I'm not sure why they were missing...)
Regards

> Hi Tobias,
>
>> I am working on a research project where we compare performances of a
>> VPN
>> connection with ipsec in kernel space with ipsec in user space.
>
> Just FYI: Such a comparison with kernel-libipsec is probably not that
> meaningful; our libipsec backend is relatively new and didn't yet get
> any performance optimizations. This might have some impact, especially
> with many SAs.
>
>> [wiki.strongswan.org/issues/380] seems to fix that problem. However we
>> still have the same error. We would like to be sure version 5.1.0  got
>> patched.
>
> No, these patches are not part of 5.1.0. Try 5.1.1rc1 [1], it should
> contain all the changes.
>
>> Attached find my configuration files and the charon log.
>
> Seems that they are missing. Anyway, also check that you set the
> appropriate mark options, as seen in the merge commit at [2].
>
> Regards
> Martin
>
> [1]http://download.strongswan.org/strongswan-5.1.1rc1.tar.bz2
> [2]http://git.strongswan.org/?p=strongswan.git;a=commit;h=1ff63f15
>
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipsec_client.conf
Type: application/octet-stream
Size: 927 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20131025/6d8c2405/attachment.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: ipsec_server.conf
Type: application/octet-stream
Size: 887 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20131025/6d8c2405/attachment-0001.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: charon.log
Type: application/octet-stream
Size: 1888 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/users/attachments/20131025/6d8c2405/attachment-0002.obj>


More information about the Users mailing list