[Openswan Users] not able to use compression
Jordan Paschalidis
paschalidis at salt.xgroup.de
Wed May 16 13:06:36 EDT 2007
Andy Gay wrote:
> On Tue, 2007-05-15 at 15:54 +0200, Jordan Paschalidis wrote:
>
>>Hello all,
>>
>>can someone tell me the right (Kernel-)settings to use openswan with
>>compression?
[...stuff deleted...]
>>So, could somebody help me to understand this?
>
>
> You may be hitting the bug that Stephan Scholz <sscholz at astaro.com>
> reported in http://bugs.xelerance.com/view.php?id=538
>
> The problem is that the ipcomp proposal is being lost. I posted a patch
> to fix it about 9 months ago, but the Openswan developers haven't seen
> fit to merge it.
>
> IIRC, the bug only happens if your conn includes an esp= entry to
> override the pluto defaults. If you have that in your config, try
> leaving it out.
>
Hello Andy,
you were right, that was the Problem.
I used the patch from the bug-report and it worked.
> IIRC, the bug only happens if your conn includes an esp=
I wanted to use aes-encryption to see if it would lower cpu-load.
But it seems not to make a big difference for cpu-load or compression-ratio.
Thanks a lot,
Jordan
More information about the Users
mailing list