From owner-freebsd-questions Sun Sep 1 20:26:32 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2143E37B400 for ; Sun, 1 Sep 2002 20:26:31 -0700 (PDT) Received: from yowie.cc.uq.edu.au (yowie.cc.uq.edu.au [130.102.2.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 083B443E65 for ; Sun, 1 Sep 2002 20:26:30 -0700 (PDT) (envelope-from csmith@its.uq.edu.au) Received: from [130.102.152.71] (tomsk.its.uq.edu.au [130.102.152.71]) by yowie.cc.uq.edu.au (8.9.3/8.9.3) with ESMTP id NAA26772 for ; Mon, 2 Sep 2002 13:26:28 +1000 (GMT+1000) User-Agent: Microsoft-Entourage/10.1.0.2006 Date: Mon, 02 Sep 2002 13:26:25 +1000 Subject: IPSec performance From: Christopher Smith To: Message-ID: Mime-version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-transfer-encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG I've been doing some experiments with IPSec between some FreeBSD hosts and have been quite disappointed by performance. I've followed the howto at Daemon News and experimented with a few different algorithms but I can't seem to get more than about 5MB/sec over the wire. Both machines are Dell 1650s connected via a crossover cable on their GB ethernet ports. Non-encrypted speed is around the 30MB/sec mark. Is this performance level normal ? What options do I have to increase speed ? Which algorithsm are the best to use for highest performance ? Greatest security ? Entry-level documentation on this topic seems to be fairly thin on the ground - does anyone have any links to intro/howto stuff on IPSec ? -- +- Christopher Smith, Systems Administrator ------------------------------+ | Server & Security Group, Information Technology Services | | The University of Queensland, Brisbane, Australia, 4072 | +- Ph +61 7 3365 4046 | email csmith@its.uq.edu.au | Fax +61 7 3365 4065 -+ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message