[Openswan Users] IPSec L2tpv3 throughput low using Netkey kernel stack

[Vasanth Ragavendran]

Hi all,

My setup is as below I've two MPC8315E board from freescale connected as
below

PC1 ---- mpc board1 --- mpc board 2 ----- PC2.

I've installed openswan on the mpc boards for encrypting the data sent over
the link between mpc boards using IPSEC. I've l2tpv3 bridge between the mpc
boards so that both PC's can be in the same subnet. Now using l2tpv3 and
Ipsec the thruput is only 14.4Mbps tested using iperf and in tcp mode. I am
using the NETKEY kernel stack during Ipsec configuration, using a PSK method
and AES256-SHA1 cipher. I've complied the AES and SHA crypto API into the
kernel running the mpc boards. the kernel version being 2.6.37.6. And it
looks like the hardware accelerator is not getting used or how do I check if
the hardware accelerator is getting used? Why is the thru put so low? With
just the l2tpv3 and no IPSec betn the boards i am able to get a thruput of
40Mbps with the rest of the settings being the same. I read somewhere that
OCF cannot be used with NETKEY and would the thruput be more if i use KLIPS?
if so how do i patch up the kernel with KLIPS. Also I had patched up the SEC
driver from the freescale website

http://www.freescale.com/webapp/sps/site/prod_summary.jsp?code=MPC8315E&nodeId=018rH3Jk191439&fpsp=1&tab=Design_Tools_Tab

<http://www.freescale.com/webapp/sps/site/prod_summary.jsp?code=MPC8315E&nodeId=018rH3Jk191439&fpsp=1&tab=Design_Tools_Tab>but
when the Sec driver is configured as module into the kernel the module
doesn;t get inserted gives segmentation fault and if the Sec driver is
configured as non-module type the kernel doesn't bootsup at all! How do i
solve this situation? I'm desperately in need of some help as i've been
working on it to increase the thruput for a long time. Kindly help. Thanks a
lot in advance.


-- 
Thanks and Regards
R.Vasanth Ragavendran
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20110516/0fdbb388/attachment-0001.html