Hardware for 1 gbit/s ipsec

RouterOS Forwarding Protocols
1

Hey guys!


I’ve a dark fiber connection to my backup-datacenter. Currently I have two simple CWDM-converters on both sides. Since I’m transfering sensitive data over this line, I’d like to secure it with IPSEC.

Has anyone experience with IPSEC-Tunnels on MT-devices >= 1 Gbit/s?

Is the MikroTik CloudRouter CCR-1036-12G-4S suitable for this challenge? I’d also like to use the MikroTik S-35/53LC20D instead of the simple CWDM-converters.

Regards,

Wolfgang

2

good question

i will try tomorrow and give feed back

3

I’m not sure if they have implemented the hardware acceleration on the CCR yet. Maybe someone from Mikrotik will respond to let us know or even an ETA.

4

Hello

with SHA1 - MODP2048 - AES256 : max 30000 pps per port

a+
Thierry

5

Thanks wulfgard!

so thats about 345 Mbit/s?


have you monitored the cpu load?