I see that the delay is derived from the MAX_PKT_BURST If I decrease it, the delay decreases accordingly. And we always transmit a burst of pkts (==MAX_PKT_BURST) But this behavior is wrong because we should transmit if there are ant pkts ready for tx. I suspect that the delay is in the ipsec_dequeue logic ... Any idea ? Best Regards Avi
> -----Original Message----- > From: Avi Cohen (A) > Sent: Tuesday, 23 January, 2018 5:25 PM > To: '[email protected]' > Subject: IPSEC-SECGW - type no-oofload huge latency > > Hi > I'm running ipsec-secgw with type no-offload (default mode) Clear text pkts > (ping) are recived , encrypted and send to the end tunnel , then it is > decrypted > and send to the other port at the peer. > So everything looks OK - except that I get huge latency of 10s of seconds. > Btw - this application in mode inline-crypto - is working perfect Any idea > why is > the latency ? > Best Regards > Avi
