Re: Strange IPsec freeze/partial fix

2006-02-13 Thread David S. Miller
From: Olaf Kirch <[EMAIL PROTECTED]> Date: Wed, 8 Feb 2006 12:59:37 +0100 > On Wed, Feb 08, 2006 at 07:46:48AM +1100, Herbert Xu wrote: > > I suggest that we simply bail out always. If the dst decides to die > > on us later on, the packet will be dropped anyway. So there is no > > great urgency

Re: Strange IPsec freeze/partial fix

2006-02-08 Thread Olaf Kirch
On Wed, Feb 08, 2006 at 07:46:48AM +1100, Herbert Xu wrote: > I suggest that we simply bail out always. If the dst decides to die > on us later on, the packet will be dropped anyway. So there is no > great urgency to retry here. Once we have the proper resolution > queueing, we can then do the r

Re: Strange IPsec freeze/partial fix

2006-02-07 Thread Herbert Xu
Olaf Kirch <[EMAIL PROTECTED]> wrote: > > People have been testing with the patch below, which seems to fix the > problem partially. They still see connection hangs however (things > only clear up when they start a new ping or new ssh). So the patch > is obvsiouly not sufficient, and something els

Strange IPsec freeze/partial fix

2006-02-07 Thread Olaf Kirch
Hi, there's a problem with IPsec that has been bugging some of our users for the last couple of kernel revs. Every now and then, IPsec will freeze the machine completely. This is with openswan user land, and with kernels up to and including 2.6.16-rc2. I managed to debug this a little, and what h