I did some IPSec performance tests on the hAP today, sharing results here.
Tests were performed using IPSec in tunnel mode.
Performance tested using iperf in udp mode, routing through the tunnel.
General configuration details:
L2 FastPath used: Yes
L3 FastPath used: No
FastTrack used: No
Firewall rules: 8
NAT used: No
QoS used: no
IPSec P1 settings:
Auth. method: PSK
Exachnge mode: Main
DH Group: modp1024
IPSec P2 settings:
PFS group: modp1024
Results:
Code: Select all
P1 settings P2 settings Throughput
aes128 md5 aes128-cbc md5 35 mbit
aes128 sha1 aes128-cbc md5 35 mbit
aes128 sha1 aes128-cbc sha1 30 mbit
aes256 sha1 aes128-cbc sha1 30 mbit
aes256 sha1 aes256-cbc sha1 20 mbit
aes256 sha512 aes256-cbc sha256 18 mbit
aes256 sha512 aes256-cbc sha512 14 mbit