<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Поможет? -<br>
</p>
<p>-------- Forwarded Message --------</p>
<table class="moz-email-headers-table" cellspacing="0"
cellpadding="0" border="0">
<tbody>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Subject: </th>
<td>Re: [strongSwan] Packet loss in ipsec tunnel</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">Date: </th>
<td>Mon, 12 Oct 2020 16:44:30 +0200</td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">From: </th>
<td>Tobias Brunner <a class="moz-txt-link-rfc2396E" href="mailto:tobias@strongswan.org"><tobias@strongswan.org></a></td>
</tr>
<tr>
<th valign="BASELINE" nowrap="nowrap" align="RIGHT">To: </th>
<td>wax g. <a class="moz-txt-link-rfc2396E" href="mailto:waxitau@gmail.com"><waxitau@gmail.com></a>,
<a class="moz-txt-link-abbreviated" href="mailto:users@lists.strongswan.org">users@lists.strongswan.org</a></td>
</tr>
</tbody>
</table>
<br>
<br>
Hi,<br>
<br>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">* When is replay-window stats increased ?
</pre>
</blockquote>
<br>
Whenever a packet arrives with a sequence number that's lower than
the<br>
lower end of the replay window (i.e. with seq <
highest_received_seq -<br>
window). Could be an actually delayed packet but might also be
because<br>
the window is simply too small for your line speed and traffic
pattern,<br>
e.g. because packets arrive so fast and in quick succession that the<br>
window is moved constantly and too quickly so slightly delayed (or<br>
perhaps larger) packets have to be dropped.<br>
<br>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">* I've noticed that on devices not experiencing packet losses over the
ipsec tunnel all the stats = 0 (replay-window, replay & fail).
</pre>
</blockquote>
<br>
Yes, those stats indicate errors, so it's good if everything is 0
there.<br>
<br>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">* I'm suspecting a replay window issue for received ipsec packets that
are dropped..
</pre>
</blockquote>
<br>
Did you configure a replay window size<br>
(connections.<conn>.children.<child>.replay_window in
swanctl.conf)?<br>
The default is 32, which is pretty low.<br>
<br>
Regards,<br>
<p>Tobias</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 14.12.2020 15:41, Gregory Edigarov
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:fad4b46d-19df-c1d7-bcd3-1f438da68507@qarea.com">
<pre class="moz-quote-pre" wrap="">Всем привет,
при копировании большого файла обнаружилась проблема.
mss/mtu - вроде все сделали, но все равно медленно.
1Mбит на 100Mбит канале....
что может быть причиной?
_______________________________________________
uanog mailing list
<a class="moz-txt-link-abbreviated" href="mailto:uanog@uanog.kiev.ua">uanog@uanog.kiev.ua</a>
<a class="moz-txt-link-freetext" href="https://mailman.uanog.kiev.ua/mailman/listinfo/uanog">https://mailman.uanog.kiev.ua/mailman/listinfo/uanog</a></pre>
</blockquote>
<pre class="moz-signature" cols="72">--
Volodymyr Litovka
"Vision without Execution is Hallucination." -- Thomas Edison</pre>
</body>
</html>