Hi Ronny, > thank you for the switft reply. > > freeswan is the old bering 2.4.18 box, openswan is the new bering uclibc > 2.4.32 box > > > i am testing with iperf: freeswan to freeswan see 7-8 Mbits/sec that's > close to max available across the remote wireless link. freeswan to > openswan i see 3-4 Mbits/sec about half of what i expected. > > i see nothing out of the ordinary in var/logs/*. shorewall hits shows > nothing that's from any of the internal networks or my public ip's. only > hits i see are from the background noise of the net. > > my auth.log on the new openswan contains > <snip> > > i read this as "works as expected", > Me too ;)
> in shorewall zones i did ipsec ipv4 i did _NOT_ do ipsec ipsec > > Since that gave me a error about policy match support in the kernel. > could this couse the slowdown ? > I don't think so... <snip> > same config (- version 2.0) works fine in a freeswan to freeswan setup. > > > hope someone have a clue to what's cousing this. thanks > Did you test the Bering-uClibc setup (openswan to freeswan) and the second Bering (freeswan to freeswan) setup on the same hardware? It could be a NIC issue. Someone else on the list with an openswan setup that can do some performance testing? Eric Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/
