Subject: Re: IPsec performance
To: Jun-ichiro itojun Hagino <>
From: Secret Asian Man <>
List: tech-kern
Date: 07/19/2000 12:16:40
On Wed, Jul 19, 2000 at 08:51:02PM +0900, Jun-ichiro itojun Hagino wrote:
> >> 	basically, blowfish uses very big intermediate data and we cant
> >> 	hold it on the stack.  we endup using static memory pool and
> >> 	hence we need spl locks.  we'll try to correct it.
> >Thats specific to blowfish?
> 	yes.

I'm not quite sure; With DES between two 466Mhz Celerons with 100basetx-fdx betwixt them, I'm only seeing (at best) 1.8MB/sec...

With CAST-128 I'm seeing around 1.2MB/sec...

This is using -current, with a FTP transfer which yields 8MB/sec in non-encrypted mode...


Christopher Kyin-hwa Chen <>
"Hail to the king, baby." --Ash