My apologies. I should have looked before I asked. It is in the Bering
modules, right where it should be.
Roger
-=-=-=--=-=-=-=-=-=-=-=
Charles,
I'd love to run the tests. Where can I find the ipsec_aes.o module for
Bering 1.2?
Roger
Charles Steinkuehler <charles
@steinkuehler.net>
04/13/2004 04:13 PM
To: Roger E McClurg/CEG/[EMAIL PROTECTED]
cc: [EMAIL PROTECTED]
Subject: Re: [leaf-user] Bering 1.2 Throughput Test Results
Roger E McClurg wrote:
<snip>
> The next test was to FTP from the PC connected to the OpenBrick E to the
> PC connected to a 500 Mhz P III running Bering 1.2. The transfer rate
was
> only 12.67 Mb/sec. The 3DES IPSEC encryption was certainly taking it's
> toll.
>
> Next we replaced both Bering machines with Nortel Contivity 1500 VPN
> devices. The Contivity is a popular VPN concentrator for small branch
> offices. It was designed specifically for the purpose of a VPN
> concentrator. Imagine our surprise when the Contivity transfer rate was
> only 4.45 Mb/sec. The Bering boxes were running weblet, shorewall,
> dnscache, dhcpd, ssh, sshd, sftp, snmp, and snmpd in addition to IPSEC,
> and yet they were almost three times faster than commercial VPN
> concentrators.
If you want to have a bit more fun, switch your IPSec links to the new
AES (ipsec_aes.o) encryption algorithm. Designed to be more friendly to
modern CPU's with wide registers and SIMD (Single Instruction Multiple
Data) instruction sets (3DES is optimized for hardware, and doesn't
translate nicely into a byte/word oriented general-purpose CPU
algorithm), you should see a substantial increase in your transfer rates.
3DES is usually not much of a bottleneck (even with the 'slow' Nortel
devices), as usually the upstream WAN link is substantially slower than
the potential CPU throughput when compressing, but if you've got fast
pipes, you'll notice a drastic difference by choosing an alternate
encryption scheme.
--
Charles Steinkuehler
[EMAIL PROTECTED]
-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
