Subject: Re: IPsec performance
To: Secret Asian Man <cchen@nougat.org>
From: None <itojun@iijlab.net>
List: tech-net
Date: 07/20/2000 07:36:43
	dropped extra cc:.

>I'm not quite sure; With DES between two 466Mhz Celerons with 100basetx-fdx betwixt them, I'm only seeing (at best) 1.8MB/sec...
>With CAST-128 I'm seeing around 1.2MB/sec...
>This is using -current, with a FTP transfer which yields 8MB/sec in non-encrypted mode...

	that's strange.  for example, if I use
	- loopback interface
	- DES-CBC, transport mode
		# setkey -c <<EOF
		add 127.0.0.1 127.0.0.1 esp 9999 -E des-cbc "hogehoge";
		spdadd 127.0.0.1 127.0.0.1 any -P out ipsec esp/transport//use;
	- PentiumIII 700MHz (with speedstep and i think it is not 700M actually)
	- NetBSD-current as of yesterday or so

	I get
	- file copy by ftp: ftp(1) reports 28Mbps/30Mbps
	- file copy by ssh is like 8.6Mbps (NOTE: ssh adds extra encryption)

itojun