Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 8 Oct 2019 22:05:37 +0300
From:      Victor Gamov <vit@otcnet.ru>
To:        freebsd-net@freebsd.org
Subject:   ipsec on multicore VM
Message-ID:  <b2d9de74-294d-9a9c-cd8f-8b294776a7f3@otcnet.ru>

next in thread | raw e-mail | index | archive | help
Hi All

I have FreeBSD 11.2-STABLE #0 r343863 VM with 2 CPU and vxnet3 NIC. 
This host uses many if_ipsec and strongswan-5.7.2 to make site-to-site 
ipsec connections.

When I use `tcpdump -nn -i <ext_iface> src <site1_ext_ip> and esp` then 
I got many reordered IPsec packets.

Does tcpdump give me a real picture and I have reordering somewhere "on 
the wire" or packets may be reordered due more then one CPU read 
packets from NIC ?

-- 
CU,
Victor Gamov



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?b2d9de74-294d-9a9c-cd8f-8b294776a7f3>