上一节完成了vpp-sswan基本环境的安装部署,接下来搭建环境来验证ike协商及转发功能,下图是基本环境配置组网情况: 接下来配置VPP1和VPP2基础网络环境,在vpp配置文件strartup.conf中unix 配置项分别加入"exec /etc/vpp/ipsec1.conf"及"exec /etc/vpp/ipsec2.conf",重启vpp之后,将自动生成上面组网环境。 创建/etc/...
1. 易于使用:vpp-sswan遵循strongswan charon规范编写,并提供有用的脚本来编译和安装插件。给定自定义的strongswan安装,用户只需要运行单个命令或手动将编译好的vpp-sswan插件和配置文件复制到特定的strongswan位置,重启strongswan服务即可。 2. 性能:vpp-sswan利用了高度优化的VPP I/O和IPsec协议栈。这意味着网络vp...
called only if you want to see how many packets and bytes were processed by each SA, and the function was embedded in vpp, and there is no changes in sswan plugin. Can I ask you to try a different version of sswan (5.9.5 or 5.9.6) to see the issue still remains. regards Kai ...
I used the plugin resided in `extras/vpp_sswan` on both 5.9.8 and 5.8.2 Strongswan versions. All functionalities are working great but after Child SAs are established, there's a constant memory growth in charon process( Reaching from 20MB RSS to 46MB RSS in 4 days, but this growth i...
Links: You receive all messages sent to this group. View/Reply Online (#22342):https://lists.fd.io/g/vpp-dev/message/22342Mute This Topic:https://lists.fd.io/mt/95641379/21656Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe:https://lists.fd.io/g/vpp-dev/leave/1480452/21656/631...
We haven’t ever tried DPD features with sswan plugin, so I don’t have any info. I think we need to investigated and reproduce this memory growth issue in our end, I will keep you posted. regards Kai -=-=-=-=-=-=-=-=-=-=-=- ...