[strongSwan] Strongswan with Pcrypt - Drops @ XfrmInStateProtoError for small size UDP packets at high rate.

[Arivudainambi A]

Hello,

I am using strongswan on ubuntu 4.4.x.x kernel. I have IPSEC transport mode
enabled  with AES256GCM16.When I send small packets (128 byte UDP packet
@ 100K packets per second) I see significant amount of drops(around 10 to
15%).
Has anyone faced this problem?

If i remove pcrypt things are working fine. Any input is highly appreciated.

Thanks,
Nambi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170629/5172ea82/attachment.html>