In message <20060221174712.E4EAC56534@rebar.astron.com>,
Christos Zoulas writes:
>On Feb 21,  9:34am, jonathan@Pescadero.dsg.stanford.edu,
(Jonathan Stone) wrote:
>:
>-- Subject: Re: IPSEC in GENERIC
>
>| I didn't keep careful records, I found the results too depressing.
>
>I agree here.

Since kre asked for quantitative datapoints...

what I recall is that turning on IPSEC gave roughly a factor of 2 hit
in UDP packets received and delivered to userspace.  I honestly don't
recall if that was FAST_IPSEC, or KAME IPsec.