On Fri, Jan 17, 2020 at 12:13:07PM +0530, Ayush Sawal wrote: > Hi Herbert, > > On 1/17/2020 11:53 AM, Herbert Xu wrote: > > On Thu, Jan 16, 2020 at 01:27:24PM +0530, Ayush Sawal wrote: > > > The max data limit is 15 sgs where each sg contains data of mtu size . > > > we are running a netperf udp stream test over ipsec tunnel .The ipsec tunnel > > > is established between two hosts which are directly connected > > Are you actually getting 15-element SG lists from IPsec? What is > > generating an skb with 15-element SG lists? > we have established the ipsec tunnel in transport mode using ip xfrm. > and running traffic using netserver and netperf. > > In server side we are running > netserver -4 > In client side we are running > "netperf -H <serverip> -p <port> -t UDP_STREAM -Cc -- -m 21k" > where the packet size is 21k ,which is then fragmented into 15 ip fragments > each of mtu size. I'm lacking a bit of context here, but this should generate 15 IP packets that are encrypted one by one.