[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-announce
Subject:    Re: [strongSwan-dev] [strongSwan] A bug of nat-virtua-ip ?
From:       Martin Willi <martin () strongswan ! org>
Date:       2012-06-01 12:10:11
Message-ID: 1338552611.2233.45.camel () martin
[Download RAW message or body]

Hi,

> moon :
>     cpu: 333 MHz PowerPC

> Then the client alice  send  the udp packets of 100 bytes length every
> 10 microseconds with about 10 threads at one time.  Under these
> circumstances,  the idle of moon's CPU would be less than 10%, even
> 0% .

10 * 100 bytes / 0.00001s = 100MB/s

If you are really sending this much traffic, your embedded CPU is
clearly overloaded, I don't think it can handle 100MB/s IPsec traffic.

> The second experiment, I used the same hardware platform to set up a
> environment which just set up the NAT and  open the ip_forward in the
> moon. And the udp packets of alice sent out to the gateway sun only
> through the NAT of moon. The result is  that  the  idle of moon's CPU
> would be  more than 95% all the time

Did you have any IPsec processing in the first or second experiment? Are
you sure that you have measured this correctly? I don't think that your
CPU can handle much more than 1MB/s with 5% CPU load...

Regards
Martin



_______________________________________________
Dev mailing list
Dev@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/dev
[prev in list] [next in list] [prev in thread] [next in thread]