Re: IPsec performance over UDP

[Rick Jones <rick.jones2@xxxxxx>]

Michael Iatrou wrote:
> Hi,
>
> I did some testing for IPsec performance over UDP. I used two identical PCs, 
> connected back-to-back, with Intel Xeon 2.8GHz (SMP/SMT disabled), 512MB RAM, 
> e1000 (82546EB), running Linux 2.6.11.7.  
>
> I tested AES {128,192,256}, DES, 3DES, SHA, MD5 and various combinations of 
> them for ESP and AH.
>
> Network performance:
> http://members.hellug.gr/iatrou/udp-throughput.png
>
> CPU utilization:
> http://members.hellug.gr/iatrou/udp-cpu.png
>
> The "unexpected" result is that there is 30% idle time even if the network is 
> not saturated! 

Perhaps the sending side got intra-stack flow-controlled?

rick jones