From owner-freebsd-net@FreeBSD.ORG  Tue Nov 23 17:15:37 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 7034E16A4CE
	for <freebsd-net@freebsd.org>; Tue, 23 Nov 2004 17:15:37 +0000 (GMT)
Received: from ebb.errno.com (ebb.errno.com [66.127.85.87])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 3415843D31
	for <freebsd-net@freebsd.org>; Tue, 23 Nov 2004 17:15:37 +0000 (GMT)
	(envelope-from sam@errno.com)
Received: from [66.127.85.91] ([66.127.85.91])
	(authenticated bits=0)
	by ebb.errno.com (8.12.9/8.12.6) with ESMTP id iANHFaWi046442
	(version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NO);
	Tue, 23 Nov 2004 09:15:36 -0800 (PST)
	(envelope-from sam@errno.com)
From: Sam Leffler <sam@errno.com>
Organization: Errno Consulting
To: freebsd-net@freebsd.org
Date: Tue, 23 Nov 2004 09:23:38 -0800
User-Agent: KMail/1.7
References: <41A2FD30.3080301@roq.com>
In-Reply-To: <41A2FD30.3080301@roq.com>
MIME-Version: 1.0
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Message-Id: <200411230923.38227.sam@errno.com>
cc: Michael Vince <mv@roq.com>
Subject: Re: FAST_IPSEC vs IPSEC performanc
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 23 Nov 2004 17:15:37 -0000

On Tuesday 23 November 2004 01:04 am, Michael Vince wrote:
> Hey all.
>
> I have been googling around the Internet for information about IPSEC and
> FAST_IPSEC for freebsd on the Internet and wondered what gives best
> performance
> when I came across this  http://people.freebsd.org/~pjd/netperf/
> It has some nice graphs / figures on performance of IPSEC and FAST_IPSEC
> via gigabit ethernet devices and as long as I am seeing this correctly
> it appears the regular IP_SEC is a fair bit faster in some areas then
> FAST_IPSEC.
> Does any one know if  this information correct?
> Anyone done there own benchmarks?

My Usenix paper has performancomparisons from a while ago:

http://www.usenix.org/publications/library/proceedings/bsdcon03/tech/full_papers/leffler_ipsec/leffler_ipsec_html/ce