[strongSwan] Big packet loss under load

[Roland Mas]

Roland Mas, 2014-05-15 18:00:11 +0200 :

[...]

>   Using iperf in UDP, I get <0.01% packet loss until 200 Mb/s, then it
> increases to 1-10% (varying across runs) at 300 Mb/s.  However, this
> seems to have no impact on a ping running in parallel.
>
>   Nothing significant in the kernel logs, and there don't seem to be
> anything about conntracking in the netfilters.  nf_conntrack_max is
> set at its default value (65536), so we should be fine from that
> perspective.
>
>   Any other hint?

  For those following at home: it's quite possible that my problem was
due to a misconfiguration of the VMs' MAC addresses; in any case, the
pressing need for something functional (even if less secure) led us to
give up on StrongSwan for now.  I'm sorry about that, but now I know
that StrongSwan is not actually that scary, I'm likely to try again at
some time in the future.

  Thanks for the advice!

Roland.
-- 
Roland Mas

Sauvez les castors, tuez les bûcherons.