FS#53287 - [linux-lts] Enable CONFIG_XFRM_STATISTICS

Attached to Project: Arch Linux
Opened by Noel Kuntze (thermi) - Monday, 13 March 2017, 12:36 GMT
Last edited by Andreas Radke (AndyRTR) - Sunday, 19 March 2017, 09:44 GMT
Task Type Feature Request
Category Packages: Core
Status Closed
Assigned To Tobias Powalowski (tpowa)
Andreas Radke (AndyRTR)
Jan Alexander Steffens (heftig)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

Please enable CONFIG_XFRM_STATISTICS in the kernel configuration, because it enables
users to perform diagnostics in certain scenarios with IPsec tunnel problems.
E.g.
Incompatible HMAC-SHA256 implementations
ESP packet mangling on the network path
Kernel runs out of buffer space and discards packets
This task depends upon

Closed by  Andreas Radke (AndyRTR)
Sunday, 19 March 2017, 09:44 GMT
Reason for closing:  Won't implement
Comment by Andreas Radke (AndyRTR) - Monday, 13 March 2017, 16:44 GMT
It's not even enabled in our stock kernel. Stats and debug options usually slow down the system or produce some memory overhead. So it's nothing for a
distribution kernel expect in some rare cases.

"Help text

This statistics is not a SNMP/MIB specification but shows statistics about transformation error (or almost error) factor at packet processing for developer.

If unsure, say N."

So use abs and to a custom rebuild.

Loading...