[strongSwan] strongswan poor performance

[Miroslav Kubiczek]

Hi,

I’m trying to figure out what’s the bottleneck of on strongswan machine with this network setup:

I have:
* several VPN clients (using vpnc https://www.unix-ag.uni-kl.de/~massar/vpnc/ - trying to simulate an iPhone)
* one lighthttp server.
* one strongswan gateway with this options:

…
      i_dont_care_about_security_and_use_aggressive_mode_psk=yes
…
conn ios
      keyexchange=ikev1
      authby=xauthpsk
      xauth=server
      aggressive = yes
      left=10.30.10.213
      leftsubnet=0.0.0.0/0
      right=%any
      rightsourceip=10.30.11.120/29
      rightdns=208.67.220.220
      auto=add
      type=tunnel
      rekey=no


When I fire HTTP requests (using a perf test tool) I get just 100 msg/s whereas without VPN it goes up to 6.000 msg/s.
Network traffic on strongswan is just on 800k/s on UDP 4500 no matter of how many clients I use.
TOP doesn’t show any process to go above 10%. Increasing number of CPUs also doesn’t help.

Can anybody give me a clue of how to find the bottleneck?


Thanks,
Miro

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140728/f1b7ff1d/attachment.pgp>
-------------- next part --------------
*****************************************This email and any files transmitted with are confidential and intended solely for the use of the individual or entity to whom they are addressed.  If you have received this email in error then please delete it and notify the sender. Do not make a copy or forward it to anyone.  This footnote also confirms that this email message has been swept for the presence of computer viruses. Adaptive Mobile Security Ltd, Ferry House, 48 Lower Mount Street, Dublin 2, Ireland Directors: B. Collins, G. Maclachlan (UK), N. Grierson (UK), J. Ennis (UK), D. Summers (UK). Registered in Ireland, Company No. 370343, VAT Reg.No.IE6390343O*****************************************
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140728/f1b7ff1d/attachment.html>