Page 1 of 1

IPsec VPN encryption performance

Posted: Mon Jul 23, 2012 2:53 pm
by lordcoke
Hello,
what is the most effective IPsec encryption algorithm for MIPS 24Kc V7.4 cpu related boards? It seems 3des which is the default setting consumes lots of cpu cycles.

Re: IPsec VPN encryption performance

Posted: Mon Jul 23, 2012 2:58 pm
by poli5681
Yes it does; But the biggest issue (at least in our case) was the hash-algorithm.
We got 3 times the throughput by switching from sha1 to md5.
Maybe this will help in your case too.

Re: IPsec VPN encryption performance

Posted: Mon Jul 23, 2012 3:41 pm
by JanezFord
Hello,
what is the most effective IPsec encryption algorithm for MIPS 24Kc V7.4 cpu related boards? It seems 3des which is the default setting consumes lots of cpu cycles.
I have recently switched from 3des to aes-128 and md5 on my networks after switching to ftth, because rb751g-2hnd units I have on a few locations with 10mbit/s ftth could not handle more than 6mbit/s over ipsec (100% CPU) in my case, now they can handle 10mbit/s of our typical traffic with about 75% cpu load, so increase in performance is great with aes-128.
Would be nice to see some real tests data with 64/512/1518 byte frames but I couldn't find any. Haven't tried camellia yet, but I believe CPU consumption should be similar to aes.