09.10.2019 2:05, Victor Gamov wrote:
> I have FreeBSD 11.2-STABLE #0 r343863 VM with 2 CPU and vxnet3 NIC. This host
> uses many if_ipsec and strongswan-5.7.2 to make site-to-site ipsec
> connections.
>
> When I use `tcpdump -nn -i src and esp` then I got
> many reordered IPsec packets.
>
> Does tcpdump give me a real picture and I have reordering somewhere "on the
> wire" or packets may be reordered due more then one CPU read packets from NIC
> ?
You may easily verify your suspiction disabling SMP inside the guest system
temporary:
nextboot -k kernel
echo kern.smp.disabled=1 >> /boot/nextboot.conf
shutdown -r now
This way, the system will perform one-time boot with all cores but one disabled.
Should it experience any problems booting this way, another reset of the VM
will boot it normally,
otherwise try running tcpdump while single CPU is used by kernel.
___
freebsd-net@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"