[Swan] ipsec packet fragmentation

Xinwei Hong xhong at skytap.com
Tue Mar 21 18:58:31 UTC 2017


Hi,

We noticed that the packets are fragmented around 332bytes (raw data about
244B). This value is much smaller than what we expected and it affects
performance. Is this configurable? I noticed we have a ike-frag option, but
that sounds like only apply to IKE, not to IPSEC esp packets. The sender
sends packet with size around 1000B.

Thanks,
Xinwei
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20170321/fa5201c6/attachment.html>


More information about the Swan mailing list