On Thu, Nov 6, 2014 at 3:46 PM, Hooman Fazaeli
wrote:
>
> => This permit me to obtain the maximum PPS forwarded by the server.
>>
> May be off-topic: How much PPS and on which hardware?
>
It seems I'm not clear: My question is just "What is the correct
methodology for benching IPSec performance
On 11/6/2014 1:30 PM, Olivier Cochard-Labbé wrote:
How to correctly bench IPSec performance ?
For benching forwarding performance I generate minimum-size packet (2000
flows: 100 different source IP * 20 different destination IP) like with
this netmap's pkt-gen example:
pkt-gen -i ix0 -f tx -n 10
On 06 Nov 2014, at 01:10 , George Neville-Neil wrote:
> On 5 Nov 2014, at 9:20, Alexander V. Chernikov wrote:
>
>> On 05.11.2014 19:39, George Neville-Neil wrote:
>>> Howdy,
>>>
>>> Last night (Pacific Time) I committed a change so that GENERIC, on HEAD has
>>> the netmap
>>> device enabled.
How to correctly bench IPSec performance ?
For benching forwarding performance I generate minimum-size packet (2000
flows: 100 different source IP * 20 different destination IP) like with
this netmap's pkt-gen example:
pkt-gen -i ix0 -f tx -n 10 -l 60 -d 9.1.1.1:2000-9.1.1.100
-s 8.1.1.1:2
George Neville-Neil wrote this message on Wed, Nov 05, 2014 at 17:10 -0800:
> On 5 Nov 2014, at 9:20, Alexander V. Chernikov wrote:
>
> >On 05.11.2014 19:39, George Neville-Neil wrote:
> >>Howdy,
> >>
> >>Last night (Pacific Time) I committed a change so that GENERIC, on
> >>HEAD has the netmap
>
On 5 Nov 2014, at 9:00, Andrey V. Elsukov wrote:
> On 05.11.2014 19:18, Evandro Nunes wrote:
>> On Wed, Nov 5, 2014 at 1:52 PM, Andrey V. Elsukov wrote:
>>
>>> On 05.11.2014 18:39, George Neville-Neil wrote:
Howdy,
Last night (Pacific Time) I committed a change so that GENERIC, on
On 5 Nov 2014, at 9:20, Alexander V. Chernikov wrote:
On 05.11.2014 19:39, George Neville-Neil wrote:
Howdy,
Last night (Pacific Time) I committed a change so that GENERIC, on
HEAD has the netmap
device enabled. This is to increase the breadth of our testing of
that feature prior
to the re
> On Nov 5, 2014, at 9:47 AM, Andrey V. Elsukov wrote:
>
> Sorry, I showed wrong numbers here. IPSEC kernel in this test gives 2.4
> Mpps, but with encryption only 180 kpps.
This is more in-line with what I'd expect, assuming AES-CBC-HMAC.
Improving the situation wrt encryption overhead seem
On 05.11.2014 18:52, Andrey V. Elsukov wrote:
> recently we did some IP forwarding tests and the GENERIC kernel is
> several times faster than GENERIC+IPSEC. Even when IPSEC has no SA.
>
> I didn't do test on vanilla kernel, but our kernel is able forward
> IPv4/IPv6 on rate close to 8.6 Mpps. The
On 05.11.2014 19:39, George Neville-Neil wrote:
Howdy,
Last night (Pacific Time) I committed a change so that GENERIC, on
HEAD has the netmap
device enabled. This is to increase the breadth of our testing of
that feature prior
to the release of FreeBSD 11.
In two weeks I will enable IPSec b
On 05.11.2014 19:18, Evandro Nunes wrote:
> On Wed, Nov 5, 2014 at 1:52 PM, Andrey V. Elsukov wrote:
>
>> On 05.11.2014 18:39, George Neville-Neil wrote:
>>> Howdy,
>>>
>>> Last night (Pacific Time) I committed a change so that GENERIC, on HEAD
>>> has the netmap
>>> device enabled. This is to i
On 05.11.2014 19:06, Eric L. Camachat wrote:
>>> In two weeks I will enable IPSec by default, again in preparation for 11.
>
>> Hi,
>
>> recently we did some IP forwarding tests and the GENERIC kernel is
>> several times faster than GENERIC+IPSEC. Even when IPSEC has no SA.
>
>> I didn't do test
On Wed, Nov 5, 2014 at 1:52 PM, Andrey V. Elsukov wrote:
> On 05.11.2014 18:39, George Neville-Neil wrote:
> > Howdy,
> >
> > Last night (Pacific Time) I committed a change so that GENERIC, on HEAD
> > has the netmap
> > device enabled. This is to increase the breadth of our testing of that
> >
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256
On 11/05/2014 07:52, Andrey V. Elsukov wrote:
> On 05.11.2014 18:39, George Neville-Neil wrote:
>> Howdy,
>>
>> Last night (Pacific Time) I committed a change so that GENERIC, on HEAD
>> has the netmap
>> device enabled. This is to increase the brea
On 05.11.2014 18:39, George Neville-Neil wrote:
> Howdy,
>
> Last night (Pacific Time) I committed a change so that GENERIC, on HEAD
> has the netmap
> device enabled. This is to increase the breadth of our testing of that
> feature prior
> to the release of FreeBSD 11.
>
> In two weeks I will e
Howdy,
Last night (Pacific Time) I committed a change so that GENERIC, on HEAD
has the netmap
device enabled. This is to increase the breadth of our testing of that
feature prior
to the release of FreeBSD 11.
In two weeks I will enable IPSec by default, again in preparation for
11.
Best,
16 matches
Mail list logo
