Date: Thu, 13 Jul 2000 02:27:15 +0900 From: ARIGA Seiji <say@sfc.wide.ad.jp> To: freebsd-net@FreeBSD.ORG Cc: lconrad@Go2France.com, kris@FreeBSD.ORG Subject: IPsec Performance (Re: Merge of KAME code) Message-ID: <20000713022715E.say@decoy.sfc.keio.ac.jp> In-Reply-To: <Pine.BSF.4.21.0007111506110.88886-100000@freefall.freebsd.org> References: <4.3.2.7.2.20000711174522.03075a20@mail.Go2France.com> <Pine.BSF.4.21.0007111506110.88886-100000@freefall.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi,
On Tue, 11 Jul 2000 15:07:22 -0700 (PDT),
Kris Kennaway <kris@FreeBSD.ORG> wrote,
: > Has anybody benchmarked or simulated how many tunnels and bits/sec one
: > software-only FreeBSD IPsec server can support?
: My P120 can do about 2.5MBps :-)
I used to benchmarked IPsec performance on following platform with netperf.
- PentiumIII 500MHz
- 256MB Memory
- Intel Ether Express Pro 100 (100Mbps)
- FreeBSD 2.2.8
- KAME 19990809 stable
- connect two machines directly
- IPv4
- IPsec transport mode
- ESP with 3DES-CBC
- AH with HMAC-SHA1
And the results are about,
TCP STREAM TEST UDP STREAM TEST
NONE: 60Mbps NONE: 94Mbps
AH: 23Mbps AH: 30Mbps
ESP: 11Mbps ESP: 11Mbps
AH+ESP: 8Mbps AH+ESP: 9Mbps
P.S. The same tests with IPv6 produced almost the same results.
// ARIGA Seiji
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000713022715E.say>