Hi, We noticed that the packets are fragmented around 332bytes (raw data about 244B). This value is much smaller than what we expected and it affects performance. Is this configurable? I noticed we have a ike-frag option, but that sounds like only apply to IKE, not to IPSEC esp packets. The sender sends packet with size around 1000B.
Thanks, Xinwei
_______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
