On 05.11.2014 18:52, Andrey V. Elsukov wrote: > recently we did some IP forwarding tests and the GENERIC kernel is > several times faster than GENERIC+IPSEC. Even when IPSEC has no SA. > > I didn't do test on vanilla kernel, but our kernel is able forward > IPv4/IPv6 on rate close to 8.6 Mpps. The same kernel compiled with IPSEC > can forward only 180 kpps.
Sorry, I showed wrong numbers here. IPSEC kernel in this test gives 2.4 Mpps, but with encryption only 180 kpps. -- WBR, Andrey V. Elsukov
signature.asc
Description: OpenPGP digital signature