[strongSwan] Ipsec Connection Limits

[joshua]

I am digging through the logs for errors, and nothing seems to pop out.
Here is some issues with decrypting payloads. But I believe it continues on past that.

Feb 10 18:02:02 03[ENC] invalid HASH_V1 payload length, decryption failed?Feb 10 18:02:02 03[ENC] could not decrypt payloadsFeb 10 18:02:02 03[IKE] message parsing failedFeb 10 18:02:02 03[IKE] ignore malformed INFORMATIONAL requestFeb 10 18:02:02 03[IKE] INFORMATIONAL_V1 request with message ID 3319602500 processing failed




Joshua J. Gross


> Date: Tue, 10 Feb 2015 18:30:28 +0100
> From: noel at familie-kuntze.de
> To: users at lists.strongswan.org
> Subject: Re: [strongSwan] Ipsec Connection Limits
> 
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
> 
> Hello Joshua,
> 
> That is an interesting problem. Do you have any logs of the issue you can provide to us?
> Like authentication failing or a failure during installation of the policies?
> 
> Mit freundlichen Grüßen/Regards,
> Noel Kuntze
> 
> GPG Key ID: 0x63EC6658
> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
> 
> Am 10.02.2015 um 17:55 schrieb joshua:
> > We are running Strongswan 5.04 on Ubuntu 12.04 KVM.
> > The kernel used to be a 3.2-virtual which we upgraded to 3.13-generic.
> >
> > It seems that strongswan only ever gets 20-30 connected users.  Meanwhile we have very similar servers on
> > the public cloud (i.e.: digital ocean) that easily get over 150 connected users.
> >
> > The VM with the issue was built ourselves on a dedicated server.  We checked the majority of
> > OS settings between the two servers and nothing sticks out.
> >
> > Is there any setting on a host or VM that could cause this kind of behavious?
> >
> >
> >
> > -------------------------
> >
> >
> >
> > Joshua J. Gross
> >
> >
> > _______________________________________________
> > Users mailing list
> > Users at lists.strongswan.org
> > https://lists.strongswan.org/mailman/listinfo/users
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
> 
> iQIcBAEBCAAGBQJU2kAyAAoJEDg5KY9j7GZYH5QP/RBe4NfQQSwQQdrdMAz6rX7O
> QjgSx6RY24zEj+RRmQRVOJatgYCcm1td7LAAvja4s9LV/kHFACJLMqgB0vCxv0iA
> R43fJOWuddXVa1Kkv/tvpKi0zLo6pAw/lAw+GP2YN9y9zsIuuDXaafdOeMaGLRSZ
> eW2mF8QEso2kT2jWNnMLnhdVA5B7BwkU+DPaaA/MOollXe8RYR+G7cz+2cgICrQo
> ZmItg/2eNkDlD/KRXw7kNTmXgDfQLOTYpdo0kXYSIq08v4KgUTl8mKq8bXrhZc1w
> xsAFAxv41Hf9NHH0HYM5uNHhmwY8RLX/XDoRnP5/OpPfBmR36Fcev8yleWsbE8HA
> roywWdVDF5XiD5hoUSE6dWtBCCXdMdzTHhs0vkoNqYHN/Yz11xarxp0wEiZ7MxuP
> mHv7LYe6ZYScneWOwVbzrm46zN/0cH2nW5nPF97FPBaIGtJ/403rqB6C5CYmD7Ez
> Pw8xr7+iuJXyii+xrUb5B6Oxy53XJLPKFS26S13ftKU12aSitgbEy3IKtJF3N6T9
> Jmaooa0fV6Tb5mqSex6MSmlbJ8AXrdtnoovwrelqOsBSaMPxyldBEhISX5yYuAPT
> zDbWX/Iq4i4tEenAq/Ep0+SlL5KG01Sr+WkWxmX/IZtARZ3DDihwVokdLSl2dssC
> ZC2GlIoGD/bXoaOTlDxc
> =+9rE
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150210/173769e8/attachment.html>