strongSwan KVM Tests / ikev2 / per-cpu-sas
Test ikev2/per-cpu-sas
Description
The two gateways moon and sun are configured to use per-CPU CHILD_SAs in order to improve performance. Using the taskset utility pings are sent from different CPUs triggering the creation of additional SA via the installed trap policy. The first ping triggers the creation of a fallback SA that's used while per-CPU SAs are created for later packets. Note that responses sent from the peer may create per-CPU SAs that are not triggered by local acquires.The updown script automatically inserts iptables-based firewall rules that let pass the tunneled traffic.
