Re: IPsec AH failure over IPv6

From: James Morris
Date: Fri Nov 21 2003 - 09:25:55 EST


On Fri, 21 Nov 2003, Steven Davy wrote:

> Im running performance tests using netperf (patched for ip6) across two
> machines, ESP works great but AH works really bad, practally all the packets
> are droped. Tcpdump reads the packets but they are not passed on to netperf.
> Read somewhere the IPsec Ah doesent like fragmentation over tcp, but im not
> sure. Im using manual keying, and the 2.5.75 kernel. Is there a kernel patch
> to fix this!!

Please try a more recent kernel (like 2.6.0-test9).


- James
--
James Morris
<jmorris@xxxxxxxxxx>


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/