Re: [IPSEC] Too many SADs!

To:	netdev@xxxxxxxxxxx
Subject:	Re: [IPSEC] Too many SADs!
From:	Wolfgang Walter <wolfgang.walter@xxxxxxxxxxxxxxxxxxxx>
Date:	Tue, 22 Mar 2005 00:52:52 +0100
Cc:	sfrost@xxxxxxxxxxx
Organization:	Studentenwerk München
Sender:	netdev-bounce@xxxxxxxxxxx
User-agent:	KMail/1.7.2

We had the same problem. Seems to be a limitation of the pfkey-implementation 
of linux.

racoon and setkey both use the pfkey-interface.

We switched to iproute2 and openswan which both use the netfilter-interface. 
Therefor they can handle thousands of SAD and SPD rules.

Greetings,

Wolfgang Walter

<Prev in Thread]	Current Thread	[Next in Thread>
[IPSEC] Too many SADs!, Stephen Frost Re: [IPSEC] Too many SADs!, Wolfgang Walter <= Re: [IPSEC] Too many SADs!, Stephen Frost Re: [IPSEC] Too many SADs!, Michael Richardson Re: [IPSEC] Too many SADs!, Stephen Frost Re: [IPSEC] Too many SADs!, Scott Mcdermott Re: [IPSEC] Too many SADs!, Stephen Frost Re: [IPSEC] Too many SADs!, Scott Mcdermott Re: [IPSEC] Too many SADs!, Stephen Frost Re: [IPSEC] Too many SADs!, jean-mickael guerin Re: [IPSEC] Too many SADs!, KOVACS Krisztian Re: [IPSEC] Too many SADs!, Wolfgang Walter

Previous by Date:	Re: [PATCH] [VIA RHINE] older chips oops on shutdown, Andrew Morton
Next by Date:	Re: [RFC] TCP congestion schedulers, Rick Jones
Previous by Thread:	[IPSEC] Too many SADs!, Stephen Frost
Next by Thread:	Re: [IPSEC] Too many SADs!, Stephen Frost
Indexes:	[Date] [Thread] [Top] [All Lists]