misc@:
I've been asked by several users offlist about expected speeds of
hardware accelerated IPSec VPNs. Rather than reply to each individually,
I put together the following matrix.
I created several VPNs on my 100Mb LAN, using a 2.4GHz Intel system[1]
as the iperf "server", and a 1.0GHz PadlockACE VIA[2] and a 266MHz
net4801[3] as the clients. I also added a Soekris vpn1411 to the VIA[4]
and net4801[5] systems. All systems were running OpenBSD 4.0-RELEASE,
and all VPNs were host-to-host and manually-keyed. Only one VPN was
running at a time.
net4801 VIA
VPN net4801 vpn1411 VIA vpn1411
None 32.1Mb/s 32.1Mb/s 92.7Mb/s 92.7Mb/s
MD5/3DES 3.5 10.0 17.9 39.7
SHA1/AES 6.3 10.1 67.3 65.4
SHA2/AES 5.2 5.2 40.1 40.1
Regards,
Greg
[1] http://firewallworks.com/archive/misc/20061113/hp_dmesg.txt
[2] http://firewallworks.com/archive/misc/20061113/via_dmesg.txt
[3] http://firewallworks.com/archive/misc/20061113/net4801_dmesg.txt
[4] http://firewallworks.com/archive/misc/20061113/via_vpn1411_dmesg.txt
[5] http://firewallworks.com/archive/misc/20061113/net4801_vpn1411_dmesg.txt
\|/ ___ \|/ [EMAIL PROTECTED] +----- 2048R/38BD6CAB -----+
@~./'O o`\.~@ | 02BD EF81 91B3 1B33 64C2 |
/__( \___/ )__\ | 3247 6722 7006 38BD 6CAB |
`\__`U_/' +--------------------------+
