[Swan] Libreswan Performance tests
Paul Wouters
paul at nohats.ca
Fri Jan 9 18:28:25 EET 2015
On Fri, 9 Jan 2015, Muenz, Michael wrote:
> So in this test it was:
> ike=aes256-sha1;modp2048
> phase2alg=aes256-sha1;modp2048
> This is the output with NETKEY (huge gain with tcp / window 512):
> TCP tests
> [ 3] 0.0-10.0 sec 1.05 GBytes 902 Mbits/sec
> This system is only AES-NI capable
> Here's ethtool output:
> Settings for eth0:
> Speed: 1000Mb/s
So using phase2alg=aes_gcm128-null will be interesting. It might get you
a little closer to 1Gbps provided you are CPU bound. If it remains at
902 Mbit/s your CPU is not your limiting factor.
> Sure, put it on your wiki! :)
Thanks, will do!
Paul
More information about the Swan
mailing list