[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Via C3 IPSec test result
- To: misc_(_at_)_openbsd_(_dot_)_org
- Subject: Re: Via C3 IPSec test result
- From: Mike <mhend1_(_at_)_tampabay_(_dot_)_rr_(_dot_)_com>
- Date: Thu, 04 Aug 2005 18:37:34 -0400
On Wed, 2005-08-03 at 15:29 +0200, Massimo wrote:
> I've made up a test LAN built on two mini-ITX Via C3 based board to test
> the AES encryption functionality of this CPU on a real setup.
> I've used flashboot 0.7.2 from Damien simply for a matter of time (I've
> some flash card already configured) and since it seems to me a very good
> product, the kernel is GENERIC-MD
I made a similar post recently . One difference was that I was using
> Now the result.
> Iperf with 3DES suite show a 6.7Mbit/s with AES suit 16.8Mbit/s
> The LAN with no IPSec, just routing show a 86Mbit/s, the two OBSD boxe
> wired together show up to 94Mbit/s
> During tests, top shows from 70% to 80% of system CPU usage and here are
> the vmstat output:
I showed similar performance numbers.
I got a suggestion off-list to try a current release because this could
be related to the hlt hlt bug. I installed a snapshot from 31 July but
it didn't improve things. I changed my quick mode transforms from AES
SHA to BLF MD5 and improved IPSec performance to about 35Mbps.
I also tried the OpenVPN 2.0 package and got around 45Mbps doing AES
SHA. Something that didn't make sense to me was disabling
kern.usercrypto had no impact on OpenVPN performance.
I'd appreciate any suggestions about mistakes I might have made or
things to try.
Visit your host, monkey.org