Subject: Re: IPsec performance
To: None <itojun@iijlab.net>
From: Secret Asian Man <cchen@nougat.org>
List: tech-net
Date: 07/19/2000 19:24:21
On Thu, Jul 20, 2000 at 07:36:43AM +0900, itojun@iijlab.net wrote:
> that's strange. for example, if I use
> - loopback interface
> - DES-CBC, transport mode
> # setkey -c <<EOF
> add 127.0.0.1 127.0.0.1 esp 9999 -E des-cbc "hogehoge";
> spdadd 127.0.0.1 127.0.0.1 any -P out ipsec esp/transport//use;
> - PentiumIII 700MHz (with speedstep and i think it is not 700M actually)
> - NetBSD-current as of yesterday or so
>
> I get
> - file copy by ftp: ftp(1) reports 28Mbps/30Mbps
> - file copy by ssh is like 8.6Mbps (NOTE: ssh adds extra encryption)
Actually that's not that strange, because I was seeing around 1.8MBytes/sec with DES-CBC, which is about 14.4Mbps, and I'm single 266Mhz Celerons, through 100basetx-fdx ethernet... I can see how that would be slower.
Anyway, you're seeing about 3.7MBytes/sec...
cc
--
Christopher Kyin-hwa Chen <cchen@nougat.org>
<http://www.nougat.org/~cchen/>
"I'm in love with the world, through the eyes of a girl,
who's still around, the morning after." --Elliott Smith