Christian, sure - you're so damn right :)
Just for the records, I've used main auth hmac-sha1 enc aes-128 group modp1536 quick auth hmac-sha1 enc aes-128 and just a dumb # iperf -c 172.16.2.1 ------------------------------------------------------------ Client connecting to 172.16.2.1, TCP port 5001 TCP window size: 16.0 KByte (default) ------------------------------------------------------------ [ 3] local 172.16.1.1 port 8600 connected with 172.16.2.1 port 5001 [ ID] Interval Transfer Bandwidth [ 3] 0.0-10.0 sec 72.5 MBytes 60.7 Mbits/sec # Without any testing on UDP or different datagram payloads and so forth. All on OpenBSD flashrd 5.5 build on stable (2014-04-05). Regards, Marco Am 21.01.2015 um 18:01 schrieb Christian Weisgerber: > On 2015-01-21, Marco Prause <marco-obsdm...@prause.eu> wrote: > >> Also when using ipsec in this test-setup, iperf was able to push ~60Mbps >> through the tunnel (ase-128). > ^^^^^^^ > That's pretty useless without specifying which MAC algorithm you > used.