Re: low bandwidth results with IPSEC enabled between two PC Engines APU2C2

2019-05-05 Thread Radek
> There is a longstanding bug there that causes the ikeds to lose > synchronization. Is this bug fixed or not in 6.5? On Wed, 9 Nov 2016 15:19:49 + (UTC) Christian Weisgerber wrote: > On 2016-11-09, "Comète" wrote: > > > I've made some bandwidth tests (on 6.0 stable - amd64) between two

Re: low bandwidth results with IPSEC enabled between two PC Engines APU2C2

2016-11-10 Thread Comète
10 novembre 2016 12:50 "Stefan Sperling" a écrit: > Yes, that is worth trying as a workaround if you don't have > clients that require IKEv2. If you control both ends of the > tunnel then there's absolutely no reason not to try IKEv1. > > I have never seen such a problem with

Re: low bandwidth results with IPSEC enabled between two PC Engines APU2C2

2016-11-10 Thread Stefan Sperling
On Thu, Nov 10, 2016 at 10:42:13AM +, Comète wrote: > Now, I can ask the question differently: > > If I don't want the connection to be > reset every half gigabyte, should I better choose isakmpd ? Yes, that is worth trying as a workaround if you don't have clients that require IKEv2. If you

Re: low bandwidth results with IPSEC enabled between two PC Engines APU2C2

2016-11-10 Thread Comète
10 novembre 2016 11:00 "Stefan Sperling" a écrit: > On Thu, Nov 10, 2016 at 09:00:07AM +, Comète wrote: > >> Oh, should I understand that IKEv2 is unusable on production ? > > This question is counter-productive because it demotivates volunteers. My goal wasn't to

Re: low bandwidth results with IPSEC enabled between two PC Engines APU2C2

2016-11-10 Thread Stefan Sperling
On Thu, Nov 10, 2016 at 09:00:07AM +, Comète wrote: > Oh, should I understand that IKEv2 is unusable on production ? This question is counter-productive because it demotivates volunteers. Developers may help you out of kindness, or they may help you indirectly because the problem affects

Re: low bandwidth results with IPSEC enabled between two PC Engines APU2C2

2016-11-10 Thread Comète
9 novembre 2016 16:40 "Stuart Henderson" a écrit: > On 2016-11-09, =?utf-8?B?Q29tw6h0ZQ==?= wrote: > >> Hi, >> >> I've made some bandwidth tests (on 6.0 stable - amd64) between two APU2C >> boxes connected with an Ethernet cable and an IPSEC VPN using

Re: low bandwidth results with IPSEC enabled between two PC Engines APU2C2

2016-11-10 Thread Comète
9 novembre 2016 16:40 "Christian Weisgerber" a écrit: > On 2016-11-09, "Comète" wrote: > >> I've made some bandwidth tests (on 6.0 stable - amd64) between two APU2C >> boxes connected with an Ethernet cable and an IPSEC VPN using IKEDv2. I get a >> maximum

Re: low bandwidth results with IPSEC enabled between two PC Engines APU2C2

2016-11-09 Thread Christian Weisgerber
On 2016-11-09, "Comète" wrote: > I've made some bandwidth tests (on 6.0 stable - amd64) between two APU2C > boxes connected with an Ethernet cable and an IPSEC VPN using IKEDv2. I get a > maximum bandwidth of 66 Avg Mbps when IPSEC is enable which is, I think, very > low for

Re: low bandwidth results with IPSEC enabled between two PC Engines APU2C2

2016-11-09 Thread Stuart Henderson
On 2016-11-09, =?utf-8?B?Q29tw6h0ZQ==?= wrote: > Hi, > > I've made some bandwidth tests (on 6.0 stable - amd64) between two APU2C > boxes connected with an Ethernet cable and an IPSEC VPN using IKEDv2. I get a > maximum bandwidth of 66 Avg Mbps when IPSEC is enable which is, I

low bandwidth results with IPSEC enabled between two PC Engines APU2C2

2016-11-09 Thread Comète
Hi, I've made some bandwidth tests (on 6.0 stable - amd64) between two APU2C boxes connected with an Ethernet cable and an IPSEC VPN using IKEDv2. I get a maximum bandwidth of 66 Avg Mbps when IPSEC is enable which is, I think, very low for an AES-NI enabled processor. And about 30 seconds after