Date: Sat, 15 Jul 2000 15:37:40 +0900 From: itojun@iijlab.net To: Mike Silbersack <silby@silby.com> Cc: ARIGA Seiji <say@sfc.wide.ad.jp>, freebsd-net@FreeBSD.ORG, lconrad@Go2France.com, kris@FreeBSD.ORG Subject: Re: IPsec Performance (Re: Merge of KAME code) Message-ID: <7693.963643060@coconut.itojun.org> In-Reply-To: silby's message of Fri, 14 Jul 2000 18:02:40 EST. <Pine.BSF.4.21.0007141800280.11600-100000@achilles.silby.com>
next in thread | previous in thread | raw e-mail | index | archive | help
>> And the results are about, >> >> TCP STREAM TEST UDP STREAM TEST >> NONE: 60Mbps NONE: 94Mbps >> AH: 23Mbps AH: 30Mbps >> ESP: 11Mbps ESP: 11Mbps >> AH+ESP: 8Mbps AH+ESP: 9Mbps >> >> P.S. The same tests with IPv6 produced almost the same results. >> >> // ARIGA Seiji > >Question. Is the time spent in the IPSec layer accounted to the user >processor, or just thrown in with kernel time? the current IPsec code does encryption (like actual DES/3DES encryption of the packet) in the kernel, so it will appear as kernel time. itojun To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?7693.963643060>