Re: IPsec performance

[Miika Komu <miika@xxxxxx>]

On Tue, 3 May 2005, Patrick McHardy wrote:

> On Mon, 2 May 2005, Miika Komu wrote:
> >> I compared TCP-over-NULL-ESP vs. plain-TCP throughput with "ttcp" tool and
> >> obtained the following results:
> >>
> >> Plain-TCP: 11 megabytes/s
> >> NULL-ESP:  2.5 megabytes/s
> >>
> > I browsed the archives also and found this one:
> >
> > http://oss.sgi.com/archives/netdev/2004-12/msg00801.html
>
> null encryption uses a block size of 1, which causes inefficent handling
> of the data. I'm unsure if some hack for this specific case is worth it
> since its only meant for testing.

Thanks for your response.

However, this does explain why I got only 1.9 megabytes/s with 3DES.

-- 
Miika Komu              miika@xxxxxx          http://www.iki.fi/miika/