Subject: Re: IPsec performance
To: Secret Asian Man <cchen@nougat.org>
From: None <itojun@iijlab.net>
List: tech-net
Date: 07/20/2000 07:36:43
dropped extra cc:.
>I'm not quite sure; With DES between two 466Mhz Celerons with 100basetx-fdx betwixt them, I'm only seeing (at best) 1.8MB/sec...
>With CAST-128 I'm seeing around 1.2MB/sec...
>This is using -current, with a FTP transfer which yields 8MB/sec in non-encrypted mode...
that's strange. for example, if I use
- loopback interface
- DES-CBC, transport mode
# setkey -c <<EOF
add 127.0.0.1 127.0.0.1 esp 9999 -E des-cbc "hogehoge";
spdadd 127.0.0.1 127.0.0.1 any -P out ipsec esp/transport//use;
- PentiumIII 700MHz (with speedstep and i think it is not 700M actually)
- NetBSD-current as of yesterday or so
I get
- file copy by ftp: ftp(1) reports 28Mbps/30Mbps
- file copy by ssh is like 8.6Mbps (NOTE: ssh adds extra encryption)
itojun