Re: Can I please get help debugging performance issues with my IPSec configuration?

2008-01-06 Thread Stuart Henderson
On 2008/01/06 10:02, Max Hayden Chiz wrote: > Thank you very much for your swift reply. Using 'scrub on enc0 > max-mss 1310 no-df' immediately solved the problem. > > I have two questions though, since 1310 is smaller than needed, how > do I determine the correct setting to use after max-mss? I

Re: Can I please get help debugging performance issues with my IPSec configuration?

2008-01-06 Thread Max Hayden Chiz
Thank you very much for your swift reply. Using 'scrub on enc0 max-mss 1310 no-df' immediately solved the problem. I have two questions though, since 1310 is smaller than needed, how do I determine the correct setting to use after max-mss? I understand that in theory I want to subtract the leng

Re: Can I please get help debugging performance issues with my IPSec configuration?

2008-01-06 Thread Stuart Henderson
On 2008/01/06 03:10, Max Hayden Chiz wrote: > But, loading very complex websites (yahoo, YouTube) takes so long that > the HTTP connection will reset before the browser is done. I can't > figure out why this is happening and didn't find anything similar when > I searched the archives. Sounds like

Can I please get help debugging performance issues with my IPSec configuration?

2008-01-06 Thread Max Hayden Chiz
I have a Sun Blade 100 with OpenBSD 4.2-current (Dec 18). I'm trying to configure it as a router/access point for my home network. The hardware is as shipped from Sun except that I have added an extra network card and a wireless card (re0 and ral0). I can send a dmesg if anyone thinks it would be