RE: Random packet loss using IPsec with AES128-SHA1

2015-12-17 Thread Gabriele Beltrame
el.org Subject: Re: Random packet loss using IPsec with AES128-SHA1 On Wed, Dec 16, 2015 at 10:17:54AM +0100, Gabriele Beltrame wrote: > Hi, > > I'm running a few Strongswan 5.3.* CentOS (Kernel 3.16.7, 4.2.6, > 4.1.*) instances on AWS to terminate VPNs between each other and/or t

Re: Random packet loss using IPsec with AES128-SHA1

2015-12-17 Thread Steffen Klassert
On Thu, Dec 17, 2015 at 04:36:06PM +0100, Gabriele Beltrame wrote: > Hi Steffen, > > I don't think it's IPsec (I can see the outbound packet in tcpdump), not > alone at least but the XEN /AWS Ethernet driver (or multiple things > concurring to the issue) actually.i Well, in this case you should

Random packet loss using IPsec with AES128-SHA1

2015-12-16 Thread Gabriele Beltrame
Hi, I'm running a few Strongswan 5.3.* CentOS (Kernel 3.16.7, 4.2.6, 4.1.*) instances on AWS to terminate VPNs between each other and/or to other devices across the Internet. While investigating some application issues, I've noticed that on every VPNs I have random packet losses (from 1% to 4%

Re: Random packet loss using IPsec with AES128-SHA1

2015-12-16 Thread Steffen Klassert
On Wed, Dec 16, 2015 at 10:17:54AM +0100, Gabriele Beltrame wrote: > Hi, > > I'm running a few Strongswan 5.3.* CentOS (Kernel 3.16.7, 4.2.6, 4.1.*) > instances on AWS to terminate VPNs between each other and/or to other > devices across the Internet. > While investigating some application

Random packet loss using IPsec with AES128-SHA1

2015-12-06 Thread Gabriele Beltrame
Hi, I'm running a few Strongswan 5.3.* CentOS (Kernel 3.16.7, 4.2.6, 4.1.*) instances on AWS to terminate VPNs between each other and/or to other devices across the Internet. While investigating some application issues, I've noticed that on every VPNs I have random packet losses (from 1% to 4%