[strongSwan] 3DES VPN throughput performance drop on 4.6.1

[Andreas Steffen]

Hi,

AES or 3DES ESP encryption is done by the Linux kernel, so that
strongSwan as a userland daemon does not have any influence on
the IPsec performance.

Regards

Andreas

On 02/29/2012 08:45 PM, Morgan Yang wrote:
> Hi All:
>
> After examining my logs, 3DES throughput have dropped after moving from
> 4.5.0 to 4.6.1
>
> When I was using 4.5.0, VPN traffic was stable at 96~97 mbps for both
> AES128 and 3DES
>
> After installing 4.6.1, VPN traffic for 3DES went down to just 89~90
> mpbs (8~9% decrease) while AES traffic remains stable at 96~97 mpbs
>
> Nothing else changed on my setup during this time, which prompted me to
> ask if there was a change that could cause this drop in performance.
>
>
> Much Thanks
> Morgan Yang

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==