> I think you get the best throughput with OpenSWAN because IPsec uses > symmetric > ciphers like AES. A quite old performance estimation link is: >
Agreed! We have been using AES for years because a long time ago I read that it is a lighter weight algorithm, so it provides strong encryption using fewer CPU cycles. That saves us on hardware because we can stack more tunnels on the same device than we could if we were using 3DES. > http://www.freeswan.org/freeswan_trees/freeswan-2.06/doc/performance.htm l > I saw that benchmark not long ago. Still very good information. --Eric Disclaimer - August 10, 2011 This email and any files transmitted with it are confidential and intended solely for mi...@schwartzkopff.org,LinuxVirtualServer.org users mailing list.. If you are not the named addressee you should not disseminate, distribute, copy or alter this email. Any views or opinions presented in this email are solely those of the author and might not represent those of Physicians' Managed Care or Physician Select Management. Warning: Although Physicians' Managed Care or Physician Select Management has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments. This disclaimer was added by Policy Patrol: http://www.policypatrol.com/ _______________________________________________ Please read the documentation before posting - it's available at: http://www.linuxvirtualserver.org/ LinuxVirtualServer.org mailing list - lvs-users@LinuxVirtualServer.org Send requests to lvs-users-requ...@linuxvirtualserver.org or go to http://lists.graemef.net/mailman/listinfo/lvs-users