[redhat-lspp] FYI: labeled ipsec w/ racoon test results

Joy Latten latten at austin.ibm.com
Sat Sep 23 14:52:22 UTC 2006


A stress test sending continuous streams of tcp and udp packets over 
a labeled ipsec connection,  using racoon with latest patch,
completed a successful 17-hour run. This test's purpose was to
ensure no regression.

Configuration:
-2 pseries power5 machines
-ipsec in transport mode,
 ipsec policy contained following security context, 
	system_u:object_r:unlabeled_t:s0:c0
 esp protocol with authentication enabled
- kernel, 2.6.17-1.2617.2.1.fc6, from rawhide
- mls policy, permissive mode
- role, sysadm_r

Regards,
Joy Latten




More information about the redhat-lspp mailing list