[Openswan Users] Fedora 5, KLIPS ready?

[Agent Smith]

oh, so you could compile openswan to use klips wihtout
redoing the kernel then? I always thought you'd need
to redo the kernel even for klips. 



--- Paul Wouters <paul at xelerance.com> wrote:

> On Tue, 9 May 2006, Butler wrote:
> 
> > I'm new to openswan, want to ask few questions:
> >
> > 1. I installed openswan-2.4.4-1.1.2.1 from rpm of
> FC5 (2.6.15-1.2054_FC5).
> > Is it using KLIPS already?
> 
> No, it comes with NETKEY. You can recompile the rpm
> to build KLIPS, but it
> will not have NAT-T support in the kernel. You would
> need to rebuild the
> kernel for that too.
> 
> > 2. any performance gain with KLIPS?
> 
> Probably not.
> 
> > 3. I'm running openswan on a dual core CPU
> machine, however, I found that
> > only 1 CPU has 90% load however, other are idle.
> Is it normal (my max
> > throughput is 48MBps) ?
> 
> Yes. There is some small tweaking you can do with
> setting nhelpers= but
> it should already spawn one per CPU.
> 
> > 4. if the situation in q3 is normal, any other way
> to improve the
> > performance of openswan apart from increase cpu
> speed?
> 
> Crypto hardware acceleration. Work is currently
> underway to integrate
> all the Open(BSD) Cryptographic Framework (OCF) into
> Openswan.
> 
> Paul
> -- 
> Building and integrating Virtual Private Networks
> with Openswan:
>
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks
> with Openswan: 
>
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
> 


__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com