Subject: Re: IPsec performance
To: None <itojun@iijlab.net>
From: Secret Asian Man <cchen@nougat.org>
List: tech-net
Date: 07/19/2000 19:24:21
On Thu, Jul 20, 2000 at 07:36:43AM +0900, itojun@iijlab.net wrote:
> 	that's strange.  for example, if I use
> 	- loopback interface
> 	- DES-CBC, transport mode
> 		# setkey -c <<EOF
> 		add 127.0.0.1 127.0.0.1 esp 9999 -E des-cbc "hogehoge";
> 		spdadd 127.0.0.1 127.0.0.1 any -P out ipsec esp/transport//use;
> 	- PentiumIII 700MHz (with speedstep and i think it is not 700M actually)
> 	- NetBSD-current as of yesterday or so
> 
> 	I get
> 	- file copy by ftp: ftp(1) reports 28Mbps/30Mbps
> 	- file copy by ssh is like 8.6Mbps (NOTE: ssh adds extra encryption)

Actually that's not that strange, because I was seeing around 1.8MBytes/sec with DES-CBC, which is about 14.4Mbps, and I'm single 266Mhz Celerons, through 100basetx-fdx ethernet... I can see how that would be slower.

Anyway, you're seeing about 3.7MBytes/sec...

cc

-- 
Christopher Kyin-hwa Chen <cchen@nougat.org>
<http://www.nougat.org/~cchen/>
"I'm in love with the world, through the eyes of a girl,
who's still around, the morning after." --Elliott Smith