netdev

Open Source and information security mailing list archives

Date:	Tue, 10 Jan 2012 20:23:51 +0530
From:	"Naveen B N (nbn)" <nbn@...co.com>
To:	<netdev@...r.kernel.org>
Subject: RE: CPU usage for IPSec in Linux 2.6.38

Hi All,
I am using linux 2.6.36 kernel and trying to add 6000 Ikev2/ipsec
tunnels at 20 Ikev2 messages per second , I am using netlink socket
which is set to NON_BLOCKING and i am sending XFRM SPD added for every
successful AUTH message received.

But the problem is after the 4000 tunnels are established, CPU usage
goes to > 90%, which will likely cause dropping of few AUTH response
from responder.

NOTE:
But when I disabled adding SPD messaged via netlink sockets using xfrm
messages, I am able to complete 6000 ikev2 SA negotiation successfully.

So the problem i am seeing is when sending XFRM netlink message > 4000.

Any solutions are or analysis different then the above is appreciated.

Thanks and Regards
Naveen
_______________________________________________
IPsec mailing list
IPsec@...f.org
https://www.ietf.org/mailman/listinfo/ipsec
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives