1Gb/s single tunnel IPSEC on X86

RouterOS General
1

Hi,

Does anyone have any experience trying to run 1Gb/s IPSEC on a single tunnel?

We are upgrading our fibre soon from 200Mb/s to 1Gb/s for our wan connection and we need to run line rate for IPSEC over the internet to another site.

Currently running using AES-265 with SHA1, and I can get around 512Mb/s on a XEON E3110 and looking at the single thread performance numbers without factoring in the inclusion of AES instructions into the later generations XEON’s I am looking at having to go with a lastest gen 3.5Ghz CPU to get 1Gb/s? Which means $$$ :frowning:

Any one having any luck on getting good performance on older generation stuff, or cloud core.

Thanks

2

You’d have to search the forum and double check my memory, but IIRC, the CCR is the fastest option currently and I think it does something close to what you are seeing now on a single tunnel. Unless recent updates have improved performance, I think you may end up having to spend some $$$$.