2003-11-21 09:07:21

by Steven Davy

Subject: IPsec AH failure over IPv6

Im running performance tests using netperf (patched for ip6) across two
machines, ESP works great but AH works really bad, practally all the packets
are droped. Tcpdump reads the packets but they are not passed on to netperf.
Read somewhere the IPsec Ah doesent like fragmentation over tcp, but im not
sure. Im using manual keying, and the 2.5.75 kernel. Is there a kernel patch
to fix this!!


regards
steven

TSSG WIT Waterford

2003-11-21 14:24:27

by James Morris

Subject: Re: IPsec AH failure over IPv6

On Fri, 21 Nov 2003, Steven Davy wrote:

> Im running performance tests using netperf (patched for ip6) across two
> machines, ESP works great but AH works really bad, practally all the packets
> are droped. Tcpdump reads the packets but they are not passed on to netperf.
> Read somewhere the IPsec Ah doesent like fragmentation over tcp, but im not
> sure. Im using manual keying, and the 2.5.75 kernel. Is there a kernel patch
> to fix this!!

Please try a more recent kernel (like 2.6.0-test9).


- James
--
James Morris
<[email protected]>