From owner-freebsd-questions Mon Sep 2 14:25: 7 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D845B37B405 for ; Mon, 2 Sep 2002 14:25:01 -0700 (PDT) Received: from yowie.cc.uq.edu.au (yowie.cc.uq.edu.au [130.102.2.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9F93543E4A for ; Mon, 2 Sep 2002 14:25:00 -0700 (PDT) (envelope-from csmith@its.uq.edu.au) Received: from [130.102.152.71] (tomsk.its.uq.edu.au [130.102.152.71]) by yowie.cc.uq.edu.au (8.9.3/8.9.3) with ESMTP id HAA13816 for ; Tue, 3 Sep 2002 07:24:58 +1000 (GMT+1000) User-Agent: Microsoft-Entourage/10.1.0.2006 Date: Mon, 02 Sep 2002 21:31:27 +1000 Subject: Re: IPSec performance From: Christopher Smith To: Message-ID: In-Reply-To: <20020902074849.GA43188@xor.obsecurity.org> Mime-version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-transfer-encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On 2/9/02 5:48 PM, "Kris Kennaway" wrote: > On Mon, Sep 02, 2002 at 01:26:25PM +1000, Christopher Smith wrote: >> I've been doing some experiments with IPSec between some FreeBSD hosts and >> have been quite disappointed by performance. I've followed the howto at >> Daemon News and experimented with a few different algorithms but I can't >> seem to get more than about 5MB/sec over the wire. Both machines are Dell >> 1650s connected via a crossover cable on their GB ethernet ports. >> Non-encrypted speed is around the 30MB/sec mark. > > Encryption is by definition very CPU-intensive. I'm aware of that. However, I would have thought a pair of 1.13GHz P3s would be capable of shuffling more than 5MB/sec over the wire. -- +- Christopher Smith, Systems Administrator ------------------------------+ | Server & Security Group, Information Technology Services | | The University of Queensland, Brisbane, Australia, 4072 | +- Ph +61 7 3365 4046 | email csmith@its.uq.edu.au | Fax +61 7 3365 4065 -+ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message