[strongSwan] Maximizing throughput / kernel bottlenecks

[Luka Logar]

Hi,

I believe you should achieve a full gbit throughput on any half decent 
x64 hardware.
We've done some throughput tests using Spirent TestCenter packet 
generator and
achieved 1750 mbit/s (full duplex) using IMIX traffic.

The hw was i7-4790T CPU and Intel I350 NIC running custom x64 linux and 
using
aes128gcm for esp. We've also ran some iperf tests using aes in cbc and 
ctr modes (and sha256),
with and without pcrypt and also achieved full wire speed at (if I 
remember correctly) packets
greater than 500 or so bytes.

Regards
Luka