[LTP] network/stress/ltp_net_stress_ipsec_tcp: problems with IP Payload Compression (comp) transform protocol on VTI

Petr Vorel pvorel@suse.cz
Tue Nov 21 20:13:31 CET 2017


Hi Alexey,

thanks for investigation!

> ipcomp actually works with vti, what doesn't work is the packets that
> are not compressed/transformed (small packets skipped onthreshold)
> and sent as is... and vti doesn't register any hooksfor handling them
> (only ah, esp, comp) + xfrm stats XfrmInNoPols increased.

> As a workaround we could add to ipcomp setup:
> ROD sysctl net.ipv4.conf.$(tst_iface).disable_policy=1

> Though I think the packet should be handled by vti device and the
> proper hook registered... I'll try to prepare the patch for netdev
> and we can continue discussion there about this problem.
Please, CC me.

> Also we could change/add the test-case with a more real-life scenario
> where the packet compressed, then encrypted.
Good idea! Are you planning to do it yourself?


Kind regards,
Petr


More information about the ltp mailing list