<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<tt>Hi there,</tt><tt><br>
</tt><tt><br>
</tt><tt>I am using Strongswan 5.1.3 tool for a site-site scenario
described in the following link.</tt><tt><br>
</tt><tt><br>
</tt><tt><a class="moz-txt-link-freetext" href="http://www.strongswan.org/uml/testresults/ikev2/net2net-psk/">http://www.strongswan.org/uml/testresults/ikev2/net2net-psk/</a></tt><tt><br>
</tt><tt><br>
</tt><tt>So my config files resemble to the example files given in
the above links (except just the IP addresses).</tt><tt><br>
</tt><tt><br>
</tt><tt>I am trying to do Benchmark on unidirectional traffic so
each Ipsec GW will either process on encryption/decryption. I am
sending UDP traffic which is being encrypted as ESP payload in an
Intel server whose CPU is 12 core 2.0 GHz.</tt><tt><br>
</tt><tt><br>
</tt><tt>By stressing with traffic it seems I can achieve maximum
43% line rate for larger Pkt size (1400b) and only 28% line rate
for smaller packet size (256b).</tt><tt><br>
</tt><tt><br>
</tt><tt>Looking at the top output it seems that only 1 core is
occupied and reaches to 100% of consumption. </tt><tt><br>
</tt><tt><br>
</tt><tt>encryptor:</tt><tt><br>
</tt><tt>top - 15:17:49 up 2 days, 5:55, 3 users, load average:
0.82, 0.74, 0.60</tt><tt><br>
</tt><tt>Tasks: 190 total, 2 running, 188 sleeping, 0 stopped,
0 zombie</tt><tt><br>
</tt><tt>Cpu0 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa,
0.0%hi, 0.0%si, 0.0%st</tt><tt><br>
</tt><tt>Cpu1 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa,
0.0%hi, 0.0%si, 0.0%st</tt><tt><br>
</tt><tt>Cpu2 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa,
0.0%hi, 0.0%si, 0.0%st</tt><tt><br>
</tt><tt>Cpu3 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa,
0.0%hi, 0.0%si, 0.0%st</tt><tt><br>
</tt><tt>Cpu4 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa,
0.0%hi, 0.0%si, 0.0%st</tt><tt><br>
</tt><tt>Cpu5 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa,
0.0%hi, 0.0%si, 0.0%st</tt><tt><br>
</tt><tt>Cpu6 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa,
0.0%hi, 0.0%si, 0.0%st</tt><tt><br>
</tt><tt>Cpu7 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa,
0.0%hi, 0.0%si, 0.0%st</tt><tt><br>
</tt><tt>Cpu8 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa,
0.0%hi, 0.0%si, 0.0%st</tt><tt><br>
</tt><tt>Cpu9 : 0.0%us, 0.0%sy, 0.0%ni, 98.7%id, 0.0%wa,
0.0%hi, 1.3%si, 0.0%st</tt><tt><br>
</tt><tt>Cpu10 : 0.0%us, 0.0%sy, 0.0%ni, 0.0%id, 0.0%wa,
0.0%hi,<font color="#cc0000"><b>100.0%si,</b></font> 0.0%st</tt><tt><br>
</tt><tt>Cpu11 : 0.0%us, 0.0%sy, 0.0%ni,100.0%id, 0.0%wa,
0.0%hi, 0.0%si, 0.0%st</tt><tt><br>
</tt><tt>Mem: 8138304k total, 728788k used, 7409516k free,
189608k buffers</tt><tt><br>
</tt><tt>Swap: 8191992k total, 0k used, 8191992k free,
338440k cached</tt><tt><br>
</tt><tt><br>
</tt><tt> PID USER PR NI VIRT RES SHR S %CPU %MEM
TIME+
COMMAND </tt><tt><br>
</tt><tt> 33 root 39 19 0 0 0 R <font
color="#cc0000"><b>99.9</b></font> 0.0 89:15.55
ksoftirqd/10 </tt><tt><br>
</tt><tt> 1 root 15 0 10348 692 584 S 0.0 0.0
0:04.69
init </tt><tt><br>
</tt><tt> 2 root RT -5 0 0 0 S 0.0 0.0
0:00.70 migration/0 </tt><tt><br>
</tt><tt><br>
</tt><tt>Can you please let us know this is so? How should we make
sure that all CPU are engaged in this packet processing(encryption
or decryption). Is there any configuration to be tuned?</tt><tt><br>
</tt><tt><br>
</tt><tt>Thanks,</tt><br>
<pre class="moz-signature" cols="72">--
Shahreen Noor Ahmed
Network Support Department
Adax Europe Ltd
url: <a class="moz-txt-link-abbreviated" href="http://www.adax.com">www.adax.com</a>
e-mail: <a class="moz-txt-link-abbreviated" href="mailto:sahmed@adax.co.uk">sahmed@adax.co.uk</a>
Direct line: +44(0)118 952 2804</pre>
</body>
</html>