Re: Racoon(ipsec-tools) enters sbwait state or 100% CPU utilization quite often on RELENG_1_2

At Mon, 20 Aug 2007 12:43:25 -0400,
Scott Ullrich wrote:

On 8/20/07, VANHULLEBUS Yvan <vanhu_bsd@xxxxxxxxxx> wrote:
I tracked down the problem a few years ago, on FreeBSD 4.11, with
KAME's IPSec stack.

But the problem was not really in the stack itself, but rather in
socket processing (in other words: not in netkey/*, but in
kern/uipc_socket2.c).

And as both IPSec stacks shares some PFKey constraints (for example
one message per entry when dumping SADB / SPD), I guess the same
problem existed in FAST_IPSEC.

But when I had some time a few months ago to start filling a PR for
the problem, I had a look at FreeBSD6 source code, and I noticed that
sbspace macro (which was a quite important part of the problem) has
changed, and I didn't have the required setup to do the test again, so
I just can't be really sure the problem still exists...

But the reported problem really has similar symptoms.....

Thank you Yvan and George!

The PR has been filed and the ID# is

kern/115651


Got it.

I have added some interesting notes that seem to affect NetBSD as well.

We will be happy to work with anyone to get this solved and access to
the machine in question is available if need be.


Your raccoon config, if you could send it to me, would be helpful.

Best,
GEorge
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Relevant Pages