[strongSwan] 3DES VPN throughput performance drop on 4.6.1

Andreas Steffen andreas.steffen at strongswan.org
Thu Mar 1 08:55:01 CET 2012


AES or 3DES ESP encryption is done by the Linux kernel, so that
strongSwan as a userland daemon does not have any influence on
the IPsec performance.



On 02/29/2012 08:45 PM, Morgan Yang wrote:
> Hi All:
> After examining my logs, 3DES throughput have dropped after moving from
> 4.5.0 to 4.6.1
> When I was using 4.5.0, VPN traffic was stable at 96~97 mbps for both
> AES128 and 3DES
> After installing 4.6.1, VPN traffic for 3DES went down to just 89~90
> mpbs (8~9% decrease) while AES traffic remains stable at 96~97 mpbs
> Nothing else changed on my setup during this time, which prompted me to
> ask if there was a change that could cause this drop in performance.
> Much Thanks
> Morgan Yang

Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)

More information about the Users mailing list