Hi,

I’m trying to figure out what’s the bottleneck of on strongswan machine with 
this network setup:

I have:
* several VPN clients (using vpnc https://www.unix-ag.uni-kl.de/~massar/vpnc/ - 
trying to simulate an iPhone)
* one lighthttp server.
* one strongswan gateway with this options:

…
      i_dont_care_about_security_and_use_aggressive_mode_psk=yes
…
conn ios
      keyexchange=ikev1
      authby=xauthpsk
      xauth=server
      aggressive = yes
      left=10.30.10.213
      leftsubnet=0.0.0.0/0
      right=%any
      rightsourceip=10.30.11.120/29
      rightdns=208.67.220.220
      auto=add
      type=tunnel
      rekey=no


When I fire HTTP requests (using a perf test tool) I get just 100 msg/s whereas 
without VPN it goes up to 6.000 msg/s.
Network traffic on strongswan is just on 800k/s on UDP 4500 no matter of how 
many clients I use.
TOP doesn’t show any process to go above 10%. Increasing number of CPUs also 
doesn’t help.

Can anybody give me a clue of how to find the bottleneck?


Thanks,
Miro

Attachment: signature.asc
Description: Message signed with OpenPGP using GPGMail

*****************************************This email and any files transmitted 
with are confidential and intended solely for the use of the individual or 
entity to whom they are addressed.  If you have received this email in error 
then please delete it and notify the sender. Do not make a copy or forward it 
to anyone.  This footnote also confirms that this email message has been swept 
for the presence of computer viruses. Adaptive Mobile Security Ltd, Ferry 
House, 48 Lower Mount Street, Dublin 2, Ireland Directors: B. Collins, G. 
Maclachlan (UK), N. Grierson (UK), J. Ennis (UK), D. Summers (UK). Registered 
in Ireland, Company No. 370343, VAT 
Reg.No.IE6390343O*****************************************
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to