Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S264274AbTKUOY1 (ORCPT ); Fri, 21 Nov 2003 09:24:27 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S264363AbTKUOY1 (ORCPT ); Fri, 21 Nov 2003 09:24:27 -0500 Received: from mx1.redhat.com ([66.187.233.31]:19601 "EHLO mx1.redhat.com") by vger.kernel.org with ESMTP id S264274AbTKUOY0 (ORCPT ); Fri, 21 Nov 2003 09:24:26 -0500 Date: Fri, 21 Nov 2003 09:24:16 -0500 (EST) From: James Morris X-X-Sender: jmorris@thoron.boston.redhat.com To: Steven Davy cc: Linux kernel mailing list Subject: Re: IPsec AH failure over IPv6 In-Reply-To: <200311210909.51836.sdavy@tssg.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 798 Lines: 23 On Fri, 21 Nov 2003, Steven Davy wrote: > Im running performance tests using netperf (patched for ip6) across two > machines, ESP works great but AH works really bad, practally all the packets > are droped. Tcpdump reads the packets but they are not passed on to netperf. > Read somewhere the IPsec Ah doesent like fragmentation over tcp, but im not > sure. Im using manual keying, and the 2.5.75 kernel. Is there a kernel patch > to fix this!! Please try a more recent kernel (like 2.6.0-test9). - James -- James Morris - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/