Re: IPsec AH failure over IPv6

[James Morris]

On Fri, 21 Nov 2003, Steven Davy wrote:

> Im running performance tests using netperf (patched for ip6) across two 
> machines, ESP works great but AH works really bad, practally all the packets 
> are droped. Tcpdump reads the packets but they are not passed on to netperf. 
> Read somewhere the IPsec Ah doesent like fragmentation over tcp, but im not 
> sure. Im using manual keying, and the 2.5.75 kernel. Is there a kernel patch 
> to fix this!!

Please try a more recent kernel (like 2.6.0-test9).


- James
-- 
James Morris
<jmorris@xxxxxxxxxx>


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/