[Swan] V3.5 and Kernel 3.9 modprobe ipsec failed

[Muenz, Michael]

Am 24.09.2013 16:31, schrieb Paul Wouters:
> On Tue, 24 Sep 2013, Muenz, Michael wrote:
>
>> Am 11.09.2013 15:49, schrieb Paul Wouters:
>>> Nope. I just hope upstream will take in the patch. I didn't hear 
>>> from them at all. Paul 
>>
>> Just for the archive:
>> Runs fine for over a week, 3.9.11 vanilla with Libreswan 3.5, 80 
>> tunnels and 40-60 Mbit throughput.
>> The reason for upgrading was this one: 
>> http://comments.gmane.org/gmane.linux.network/279262 and now it seems 
>> to be fixed.
>
> Thanks for the feedback!
>
> I'd love to see that compared to KLIPS+OCF. It seems to me the padlock
> should be able to go much faster that 60 mbps, though going through two
> ethernet cards might be the real bottleneck.
>
> For reference, KLIPS+OCF on much weaker  Geode LX got 25Mbps throughput
> (traffic going through the machine) and 35Mbps when IPsec traffic was
> terminating on the server (wget -o /dev/null)
>
> The OCF kernel benchmark (modprobe ocf-bench, changed to AES128 SHA1 as
> that's the only one the Geode LX supports) was 43Mbps.
>
> Paul
>
I've got a Soekris vpn1401 OCF Hifn card here, but no yet found the time 
to dive into OCF stuff, will try it the next weeks ...


Michael

-- 
www.muenz-it.de
- Cisco, Linux, Networks