[strongSwan] Visibility on usage of a strongswan/ipsec server

[Andrew Foss]

It has 4 cores all show really idle, was expecting ipsec to show up as 
Sys time instead of user, but they all show < 1%.

What makes me wonder is we also have an app running on the same machine 
and it has a 4 second watchdog timer event and we get a log message if 
that timer takes more than 6 seconds to fire and when ipsec is that busy 
the watchdog is taking 6-10 seconds, yet when we look at top the machine 
looks idle. The app does very little, 90% of the work on that is ipsec, 
but seems like our app is getting little runtime, just not obvious who 
is occupying the cpu, but logically it is ipsec...

andrew

On 5/4/15 7:14 AM, Michael Schwartzkopff wrote:
> Am Montag, 4. Mai 2015, 07:10:09 schrieb Andrew Foss:
>> Folks,
>>
>> I am pushing a ~200mb/s though my ipsec server, but when I look at cpu
>> with top or load average with uptime, the machine looks like it is idle.
>> I am guessing that the work is being done in the kernel, but I still
>> need to measure how much of the machine's capacity is being used by ipsec.
>>
>> Is there some other better place to look to see how much of the system
>> strongswan/ipsec is occupying?
>>
>> andrew
> what does the top program give in the CPU output line? How many cores does
> your machine have?
>
>
> Mit freundlichen Grüßen,
>
> Michael Schwartzkopff
>
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150504/7c77a1ac/attachment.html>