[strongSwan] Maximizing throughput / kernel bottlenecks

Luka Logar luka.logar at iname.com
Thu Mar 31 23:06:32 CEST 2016


I believe you should achieve a full gbit throughput on any half decent 
x64 hardware.
We've done some throughput tests using Spirent TestCenter packet 
generator and
achieved 1750 mbit/s (full duplex) using IMIX traffic.

The hw was i7-4790T CPU and Intel I350 NIC running custom x64 linux and 
aes128gcm for esp. We've also ran some iperf tests using aes in cbc and 
ctr modes (and sha256),
with and without pcrypt and also achieved full wire speed at (if I 
remember correctly) packets
greater than 500 or so bytes.


More information about the Users mailing list