[Swan] Libreswan Performance tests

Paul Wouters paul at nohats.ca
Fri Jan 9 18:28:25 EET 2015


On Fri, 9 Jan 2015, Muenz, Michael wrote:

> So in this test it was:
>        ike=aes256-sha1;modp2048
>        phase2alg=aes256-sha1;modp2048

> This is the output with NETKEY (huge gain with tcp / window 512):
> TCP tests

> [  3]  0.0-10.0 sec  1.05 GBytes   902 Mbits/sec


> This system is only AES-NI capable

> Here's ethtool output:
> Settings for eth0:
>        Speed: 1000Mb/s

So using phase2alg=aes_gcm128-null will be interesting. It might get you
a little closer to 1Gbps provided you are CPU bound. If it remains at
902 Mbit/s your CPU is not your limiting factor.

> Sure, put it on your wiki! :)

Thanks, will do!

Paul


More information about the Swan mailing list