SXT LTE ipsec performance

Hardware MikroTik hardware general
1

Hi,

I’m really liking the look of the SXT LTE, it may be the answer to a number of problems I have.

Can anyone hazard a guess that the potential throughput capability of the device if I’m running an IPsec tunnel that terminates on the device? I’m in control of both ends so can choose encryption and digest standards (but it does need to be encrypted, so aes-128 probably)

I notice no hardware acceleration and a relatively slow CPU, 40Mbps and up would make it viable?

(It’s possible I could terminate the tunnel on a more powerful device, but it would make it more complex, so I’d like to keep it at a single device if possible)

Thanks,

Lee.

2

I notice no hardware acceleration and a relatively slow CPU, 40Mbps and up would make it viable?

I highly doubt this unit could do more than 15-20Mbps of ipsec.

For actual, hardware-accelerated ipsec (128-AES) you have to go to either RB850Gx2 (hardware version 2) or RB1100AHx2.

For a reference, an RB2011 will cope with 20-30Mbps of ipsec traffic.

The most powerful non-hardware accelerated unit I have tested is RB953, see http://forum.mikrotik.com/t/finally-rb953gs-5hnt-is-available/78176/13 ; it coped with 40Mbps+ of ipsec traffic.

However a rb3011 could be a better suit depending on your scenario, this unit should do 40+ Mbps without doubt, and it has hardware accelerator support on the works.