From owner-freebsd-net@freebsd.org  Tue Oct  8 19:05:49 2019
Return-Path: <owner-freebsd-net@freebsd.org>
Delivered-To: freebsd-net@mailman.nyi.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.nyi.freebsd.org (Postfix) with ESMTP id 59727133D81
 for <freebsd-net@mailman.nyi.freebsd.org>;
 Tue,  8 Oct 2019 19:05:49 +0000 (UTC) (envelope-from vit@otcnet.ru)
Received: from mail.otcnet.ru (mail.otcnet.ru [194.190.78.3])
 by mx1.freebsd.org (Postfix) with ESMTP id 46nmyh0Cjsz4P39
 for <freebsd-net@freebsd.org>; Tue,  8 Oct 2019 19:05:47 +0000 (UTC)
 (envelope-from vit@otcnet.ru)
Received: from MacBook-Gamov.local (unknown [195.91.148.145])
 by mail.otcnet.ru (Postfix) with ESMTPSA id 657808A133
 for <freebsd-net@freebsd.org>; Tue,  8 Oct 2019 22:05:37 +0300 (MSK)
To: freebsd-net@freebsd.org
From: Victor Gamov <vit@otcnet.ru>
Subject: ipsec on multicore VM
Organization: OstankinoTelecom
Message-ID: <b2d9de74-294d-9a9c-cd8f-8b294776a7f3@otcnet.ru>
Date: Tue, 8 Oct 2019 22:05:37 +0300
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.13; rv:68.0)
 Gecko/20100101 Thunderbird/68.1.1
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8; format=flowed
Content-Language: en-US
Content-Transfer-Encoding: 7bit
X-Rspamd-Queue-Id: 46nmyh0Cjsz4P39
X-Spamd-Bar: -----
Authentication-Results: mx1.freebsd.org; dkim=none; dmarc=none;
 spf=pass (mx1.freebsd.org: domain of vit@otcnet.ru designates 194.190.78.3 as
 permitted sender) smtp.mailfrom=vit@otcnet.ru
X-Spamd-Result: default: False [-5.52 / 15.00]; ARC_NA(0.00)[];
 RCVD_VIA_SMTP_AUTH(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0];
 FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+a:mail.otcnet.ru];
 TO_MATCH_ENVRCPT_ALL(0.00)[]; MIME_GOOD(-0.10)[text/plain];
 PREVIOUSLY_DELIVERED(0.00)[freebsd-net@freebsd.org];
 TO_DN_NONE(0.00)[]; RCPT_COUNT_ONE(0.00)[1];
 HAS_ORG_HEADER(0.00)[]; DMARC_NA(0.00)[otcnet.ru];
 NEURAL_HAM_LONG(-1.00)[-1.000,0];
 IP_SCORE(-3.32)[ip: (-8.75), ipnet: 194.190.78.0/24(-4.38), asn: 50822(-3.50),
 country: RU(0.01)]; RCVD_NO_TLS_LAST(0.10)[];
 FROM_EQ_ENVFROM(0.00)[]; R_DKIM_NA(0.00)[];
 MIME_TRACE(0.00)[0:+];
 ASN(0.00)[asn:50822, ipnet:194.190.78.0/24, country:RU];
 MID_RHS_MATCH_FROM(0.00)[]; RCVD_COUNT_TWO(0.00)[2]
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net/>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-net>,
 <mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 08 Oct 2019 19:05:49 -0000

Hi All

I have FreeBSD 11.2-STABLE #0 r343863 VM with 2 CPU and vxnet3 NIC. 
This host uses many if_ipsec and strongswan-5.7.2 to make site-to-site 
ipsec connections.

When I use `tcpdump -nn -i <ext_iface> src <site1_ext_ip> and esp` then 
I got many reordered IPsec packets.

Does tcpdump give me a real picture and I have reordering somewhere "on 
the wire" or packets may be reordered due more then one CPU read 
packets from NIC ?

-- 
CU,
Victor Gamov