[strongSwan] max number of SAs

[Miroslav Kubiczek]

Hi All,

I'm trying to find out max number of secure associations (SA) one VPN gateway is able to handle.
I've built strongswan with the load-tester plugin and can't get more then 4500 SAs:

ipsec status | head -1
Security Associations (4595 up, 587 connecting)

Is there a way to get more? What's the main blocker?
I have already set block_threshold = 0 on the server.
Also tried multiple clients.

Thanks for any help,
Miro
*****************************************This email and any files transmitted with are confidential and intended solely for the use of the individual or entity to whom they are addressed.  If you have received this email in error then please delete it and notify the sender. Do not make a copy or forward it to anyone.  This footnote also confirms that this email message has been swept for the presence of computer viruses. Adaptive Mobile Security Ltd, Ferry House, 48 Lower Mount Street, Dublin 2, Ireland Directors: B. Collins, G. Maclachlan (UK), N. Grierson (UK), J. Ennis (UK), D. Summers (UK). Registered in Ireland, Company No. 370343, VAT Reg.No.IE6390343O*****************************************