[strongSwan] Under high load, two IKE initiators send the IKE_SA_INIT requests with the same SPI

Martin Willi martin at strongswan.org
Mon May 26 11:53:12 CEST 2014


hi,

> I think, the we need to use the gcc atomic built-in function
> __sync_fetch_and_add() in get_spi() function (defined in
> src/libcharon/plugins/load_tester/load_tester_ipsec.c)

Such a change has been integrated into the master branch recently and
will be part of 5.2.0, see [1].

Regards
Martin

[1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=7b08063e




More information about the Users mailing list