Community discussions

MUM Europe 2020
 
User avatar
lordcoke
newbie
Topic Author
Posts: 29
Joined: Thu Jun 10, 2010 10:11 am
Location: Germany
Contact:

IPsec VPN encryption performance

Mon Jul 23, 2012 2:53 pm

Hello,
what is the most effective IPsec encryption algorithm for MIPS 24Kc V7.4 cpu related boards? It seems 3des which is the default setting consumes lots of cpu cycles.
 
poli5681
newbie
Posts: 44
Joined: Fri Jul 03, 2009 11:47 am

Re: IPsec VPN encryption performance

Mon Jul 23, 2012 2:58 pm

Yes it does; But the biggest issue (at least in our case) was the hash-algorithm.
We got 3 times the throughput by switching from sha1 to md5.
Maybe this will help in your case too.
 
JanezFord
Member Candidate
Member Candidate
Posts: 264
Joined: Wed May 23, 2012 10:58 am

Re: IPsec VPN encryption performance

Mon Jul 23, 2012 3:41 pm

Hello,
what is the most effective IPsec encryption algorithm for MIPS 24Kc V7.4 cpu related boards? It seems 3des which is the default setting consumes lots of cpu cycles.
I have recently switched from 3des to aes-128 and md5 on my networks after switching to ftth, because rb751g-2hnd units I have on a few locations with 10mbit/s ftth could not handle more than 6mbit/s over ipsec (100% CPU) in my case, now they can handle 10mbit/s of our typical traffic with about 75% cpu load, so increase in performance is great with aes-128.
Would be nice to see some real tests data with 64/512/1518 byte frames but I couldn't find any. Haven't tried camellia yet, but I believe CPU consumption should be similar to aes.

Who is online

Users browsing this forum: erlinden, gkk, Google [Bot], rioven and 108 guests