denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
20,067 Commits 1 Branch 0 Tags
main
Commit Graph
4 Commits
Author SHA1 Message Date
Tobias Brunner 9d5e619e19 ha: Make receive buffer size for the HA socket configurable 
If there are lots of SAs to be synced, the default might be too low
and messages and SAs get dropped.  The new default is already 8 MiB,
which should work fine for lots of SAs.  The code mirrors the one in
the kernel-netlink plugin (but with a guard around SO_RCVBUFFORCE, even
though this plugin is mostly used on Linux as well).
 2026-07-21 10:21:51 +02:00
Noel Kuntze a20daaa336 conf: Fix typo for ha plugin's buffer size option 
Fixes: ce048c30ff ("ha: Double receive buffer size for HA messages and make it configurable")
Closes strongswan/strongswan#832
 2022-01-03 10:20:08 +01:00
Tobias Brunner ce048c30ff ha: Double receive buffer size for HA messages and make it configurable 
With IKEv1 we transmit both public DH factors (used to derive the initial
IV) besides the shared secret.  So these messages could get significantly
larger than 1024 bytes, depending on the DH group (modp2048 just about
fits into it).  The new default of 2048 bytes should be fine up to modp4096
and for larger groups the buffer size may be increased (an error is
logged should this happen).
 2018-02-14 14:52:18 +01:00
Tobias Brunner 828815b0d8 conf: Options of all plugins documented 
Some options are still missing descriptions though.
 2014-02-12 14:34:34 +01:00