From owner-freebsd-questions Mon Sep 2 0:49:41 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 86F4A37B400 for ; Mon, 2 Sep 2002 00:49:36 -0700 (PDT) Received: from obsecurity.dyndns.org (adsl-64-169-104-37.dsl.lsan03.pacbell.net [64.169.104.37]) by mx1.FreeBSD.org (Postfix) with ESMTP id 51CA043E7B for ; Mon, 2 Sep 2002 00:49:02 -0700 (PDT) (envelope-from kris@obsecurity.org) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id B57E666B8A; Mon, 2 Sep 2002 00:48:49 -0700 (PDT) Date: Mon, 2 Sep 2002 00:48:49 -0700 From: Kris Kennaway To: Christopher Smith Cc: freebsd-questions@freebsd.org Subject: Re: IPSec performance Message-ID: <20020902074849.GA43188@xor.obsecurity.org> References: Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="LZvS9be/3tNcYl/X" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG --LZvS9be/3tNcYl/X Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Mon, Sep 02, 2002 at 01:26:25PM +1000, Christopher Smith wrote: > I've been doing some experiments with IPSec between some FreeBSD hosts and > have been quite disappointed by performance. I've followed the howto at > Daemon News and experimented with a few different algorithms but I can't > seem to get more than about 5MB/sec over the wire. Both machines are Dell > 1650s connected via a crossover cable on their GB ethernet ports. > Non-encrypted speed is around the 30MB/sec mark. Encryption is by definition very CPU-intensive. Kris --LZvS9be/3tNcYl/X Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQE9cxfgWry0BWjoQKURAglBAKDiUy6+MMwCell3dLvN0y9GQ6P4wACfdKtH Qs4moB4jsYYxSfEqS3kjQTw= =Fqfq -----END PGP SIGNATURE----- --LZvS9be/3tNcYl/X-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message