Re: Flapping VPN under load on Soekris

2009-06-05 Thread Markus Wernig
Mikolaj Kucharski wrote: Another scenario. When all VPNs are up and stable (traffic is low) and one of the clients is rebooted at boot time when ipsecctl -f /etc/ipsec.conf is executed it's tunell is setup and _all_ other tunnels are immediately dropped. Am I right to assume that only those

Re: Flapping VPN under load on Soekris

2009-06-03 Thread Stuart Henderson
On 2009-06-03, Mikolaj Kucharski miko...@kucharski.name wrote: Can anyone give me example of embedded system (Soekris-like) which is known to handle PF traffic + VPN traffic at MBit/s throughput, and packets per second level, generated by home users browsing web, skyping, playing games on-line

Re: Flapping VPN under load on Soekris

2009-06-03 Thread Lordsporkton
-- From: Mikolaj Kucharski miko...@kucharski.name Sent: Tuesday, June 02, 2009 5:56 PM To: misc@openbsd.org Cc: miko...@kucharski.name Subject: Re: Flapping VPN under load on Soekris Can anyone give me example of embedded system (Soekris-like

Re: Flapping VPN under load on Soekris

2009-06-03 Thread Stuart Henderson
On 2009-06-03, Lordsporkton lordspork...@gmail.com wrote: I have a p2 at 400mhz with 128ram that can push 5+ megs of aes256 traffic and I don't notice any problems, and I have no offload card I know this isnt embedded but its overall system specs are similar to a soakris 400MHz P2 is a

Flapping VPN under load on Soekris

2009-06-02 Thread Mikolaj Kucharski
Hi, Soekris is a VPN gateway for 11 clients. All those 12 machines are running OpenBSD. 10 of client machines are connected to the VPN via wireless and all of those 10 machines are behind NAT (they share the same external ip). 1 host is at remote location connected via wire. Afer all machine are

Re: Flapping VPN under load on Soekris

2009-06-02 Thread Stuart Henderson
you're probably overloading the CPU. try -current, sis(4) has MCLGETI now which should mitigate things a bit. still, that's a lot of load you're putting on a little 486 which will almost certainly be restricting your throughput. On 2009-06-02, Mikolaj Kucharski miko...@kucharski.name wrote: Hi,

Re: Flapping VPN under load on Soekris

2009-06-02 Thread Mikolaj Kucharski
Can anyone give me example of embedded system (Soekris-like) which is known to handle PF traffic + VPN traffic at MBit/s throughput, and packets per second level, generated by home users browsing web, skyping, playing games on-line (low latency), at the same time. *Fanless* and which can run