Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 02 Sep 2002 21:31:27 +1000
From:      Christopher Smith <csmith@its.uq.edu.au>
To:        <freebsd-questions@freebsd.org>
Subject:   Re: IPSec performance
Message-ID:  <B999892F.2C315%csmith@its.uq.edu.au>
In-Reply-To: <20020902074849.GA43188@xor.obsecurity.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2/9/02 5:48 PM, "Kris Kennaway" <kris@obsecurity.org> wrote:

> On Mon, Sep 02, 2002 at 01:26:25PM +1000, Christopher Smith wrote:
>> I've been doing some experiments with IPSec between some FreeBSD hosts and
>> have been quite disappointed by performance.  I've followed the howto at
>> Daemon News and experimented with a few different algorithms but I can't
>> seem to get more than about 5MB/sec over the wire.  Both machines are Dell
>> 1650s connected via a crossover cable on their GB ethernet ports.
>> Non-encrypted speed is around the 30MB/sec mark.
> 
> Encryption is by definition very CPU-intensive.

I'm aware of that.  However, I would have thought a pair of 1.13GHz P3s
would be capable of shuffling more than 5MB/sec over the wire.

-- 
+- Christopher Smith, Systems Administrator ------------------------------+
|  Server & Security Group, Information Technology Services               |
|  The University of Queensland, Brisbane, Australia, 4072                |
+- Ph +61 7 3365 4046 | email csmith@its.uq.edu.au | Fax +61 7 3365 4065 -+



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B999892F.2C315%csmith>