[Openswan Users] not able to use compression

Jordan Paschalidis paschalidis at salt.xgroup.de
Wed May 16 13:06:36 EDT 2007


Andy Gay wrote:
> On Tue, 2007-05-15 at 15:54 +0200, Jordan Paschalidis wrote:
> 
>>Hello all,
>>
>>can someone tell me the right (Kernel-)settings to use openswan with 
>>compression?
[...stuff deleted...]
>>So, could somebody help me to understand this?
> 
> 
> You may be hitting the bug that Stephan Scholz <sscholz at astaro.com>
> reported in http://bugs.xelerance.com/view.php?id=538
> 
> The problem is that the ipcomp proposal is being lost. I posted a patch
> to fix it about 9 months ago, but the Openswan developers haven't seen
> fit to merge it.
> 
> IIRC, the bug only happens if your conn includes an esp= entry to
> override the pluto defaults. If you have that in your config, try
> leaving it out.
> 

Hello Andy,

you were right, that was the Problem.

I used the patch from the bug-report and it worked.

 > IIRC, the bug only happens if your conn includes an esp=
I wanted to use aes-encryption to see if it would lower cpu-load.
But it seems not to make a big difference for cpu-load or compression-ratio.


Thanks a lot,

Jordan



More information about the Users mailing list