[Swan] (no subject)

Ravin Ya ravin.ya90 at gmail.com
Mon Sep 14 00:05:52 UTC 2020


Hello All,

Can someone please advise me on the below.

*Test Setup: *Libreswan Server (Virtual Machine: KVM)
500 IPSec Clients (xAuth using PAM-Auth)

I am running a Libreswan server in a virtual environment (VM hosted on
KVM/oVIRT). The logical network i.e. virtio-net virtual NIC drivers
supports Multiqueue. I have 6 vCPUs configured with 6 RX/TX Queue (1 queue
per vCPU).

The traffic load balancing over XFRM pCPU is flaky. Only 1 (at most 2)
vCPUs get utilized with soft IRQs and the rest go underutilized.

I read an article that said XFRM pCPU only supports RSS NIC and
recently support for vmxnet3 (VMWare) got added. The KVM and virtio
Multiqueue was listed under future ideas and worklist.

Is there a way to work around this limitation? Is this support available on
the Latest version of Kernel and Libreswan? please advise.

Thank You,
-Rav Ya
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20200913/b14cccc7/attachment.html>


More information about the Swan mailing list