Is there a practical limitation on the number of ipsec tunnels?

« previous next »

Print

Pages: [1]

Author Topic: Is there a practical limitation on the number of ipsec tunnels? (Read 201 times)

bimbar

Sr. Member
Posts: 435
Karma: 25

Is there a practical limitation on the number of ipsec tunnels?

« on: November 06, 2024, 06:52:25 pm »

What the subject says, does an excessive number of ipsec tunnels slow down the firewall, does it lead to memory problems or something similar?
What would the recommended maximum number of ipsec tunnels be?

Logged

Monviech (Cedrik)

Global Moderator
Hero Member
Posts: 1601
Karma: 176

Re: Is there a practical limitation on the number of ipsec tunnels?

« Reply #1 on: November 06, 2024, 07:14:18 pm »

I guess it depends on the hardware since it uses resources. So the better hardware the higher the number of possible tunnels.

https://wiki.strongswan.org/issues/2911

Logged

Hardware:
DEC740

franco

Administrator
Hero Member
Posts: 17661
Karma: 1611

Re: Is there a practical limitation on the number of ipsec tunnels?

« Reply #2 on: November 06, 2024, 07:46:31 pm »

From experience three digit situations should be more than workable. In practice... it depends like Cedrik mentions.

Cheers,
Franco

Logged

bimbar

Sr. Member
Posts: 435
Karma: 25

Re: Is there a practical limitation on the number of ipsec tunnels?

« Reply #3 on: November 06, 2024, 10:20:34 pm »

The customer has 60 IPSec tunnels and reports that performance gets worse over time and recovers after a reboot.

Logged

franco

Administrator
Hero Member
Posts: 17661
Karma: 1611

Re: Is there a practical limitation on the number of ipsec tunnels?

« Reply #4 on: November 07, 2024, 08:07:51 am »

Which version? How much IPsec traffic on average?

Cheers,
Franco

Logged

Print

Pages: [1]

« previous next »