From owner-freebsd-net  Fri Jul 14 23:37:46 2000
Delivered-To: freebsd-net@freebsd.org
Received: from coconut.itojun.org (coconut.itojun.org [210.160.95.97])
	by hub.freebsd.org (Postfix) with ESMTP
	id B7D1E37C414; Fri, 14 Jul 2000 23:37:42 -0700 (PDT)
	(envelope-from itojun@itojun.org)
Received: from kiwi.itojun.org (localhost.itojun.org [127.0.0.1])
	by coconut.itojun.org (8.9.3+3.2W/3.7W/smtpfeed 1.06) with ESMTP id PAA07695;
	Sat, 15 Jul 2000 15:37:40 +0900 (JST)
To: Mike Silbersack <silby@silby.com>
Cc: ARIGA Seiji <say@sfc.wide.ad.jp>, freebsd-net@FreeBSD.ORG,
	lconrad@Go2France.com, kris@FreeBSD.ORG
In-reply-to: silby's message of Fri, 14 Jul 2000 18:02:40 EST.
      <Pine.BSF.4.21.0007141800280.11600-100000@achilles.silby.com>
X-Template-Reply-To: itojun@itojun.org
X-Template-Return-Receipt-To: itojun@itojun.org
X-PGP-Fingerprint: F8 24 B4 2C 8C 98 57 FD  90 5F B4 60 79 54 16 E2
Subject: Re: IPsec Performance (Re: Merge of KAME code)
From: itojun@iijlab.net
Date: Sat, 15 Jul 2000 15:37:40 +0900
Message-ID: <7693.963643060@coconut.itojun.org>
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org


>> And the results are about,
>> 
>>   TCP STREAM TEST   UDP STREAM TEST
>>     NONE:   60Mbps    NONE:   94Mbps
>>     AH:     23Mbps    AH:     30Mbps
>>     ESP:    11Mbps    ESP:    11Mbps
>>     AH+ESP:  8Mbps    AH+ESP:  9Mbps
>> 
>> P.S. The same tests with IPv6 produced almost the same results.
>> 
>> // ARIGA Seiji
>
>Question.  Is the time spent in the IPSec layer accounted to the user
>processor, or just thrown in with kernel time?

	the current IPsec code does encryption (like actual DES/3DES encryption
	of the packet) in the kernel, so it will appear as kernel time.

itojun


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message