netdev
[Top] [All Lists]

Re: IPsec performance

To: Miika Komu <miika@xxxxxx>
Subject: Re: IPsec performance
From: Patrick McHardy <kaber@xxxxxxxxx>
Date: Tue, 3 May 2005 02:55:16 +0200 (CEST)
Cc: netdev@xxxxxxxxxxx
In-reply-to: <Pine.GSO.4.58.0505022204090.25766@kekkonen.cs.hut.fi>
References: <Pine.GSO.4.58.0505022117190.25766@kekkonen.cs.hut.fi> <Pine.GSO.4.58.0505022204090.25766@kekkonen.cs.hut.fi>
Sender: netdev-bounce@xxxxxxxxxxx
On Mon, 2 May 2005, Miika Komu wrote:
I compared TCP-over-NULL-ESP vs. plain-TCP throughput with "ttcp" tool and
obtained the following results:

Plain-TCP:      11 megabytes/s
NULL-ESP:       2.5 megabytes/s

I browsed the archives also and found this one:

http://oss.sgi.com/archives/netdev/2004-12/msg00801.html

null encryption uses a block size of 1, which causes inefficent handling of the data. I'm unsure if some hack for this specific case is worth it since its only meant for testing.

Regards
Patrick


<Prev in Thread] Current Thread [Next in Thread>