Calculating expected IPsec performance based on processor specs

[w0rmy]

Hi All,

Is there a method of calculating expected IPsec performance based off processor specifications?

I ask this as we have 2 pfSense devices, directly connected via 1Gb interfaces that we are using for testing. We are currently only getting around 48Mbits throughput (testing with iperf3) and were expecting more. I believe at this point the limitation is the hardware and not the configuration.

I know the processors are not ideal for IPsec, however I was expecting greater performance than what we are seeing, so was wondering if theres a method to calculate expected throughput based on the CPU specs. This would help I know it wont be exact, as latency etc plays a part, but an indicative calculation method would help us spec hardware based on our throughput requirements.

The CPU's on the 2 pfSense devices are:
Atom D525 @ 1.80GHz
Atom D2550 @ 1.86GHz

[kiokoman]

i think there is but there is always someone else that can do it for you :)

               AES Performance per CPU core for TLS v1.2 Ciphers
               (Higher is Better, Speeds in Megabytes per Second)

               ChaCha20  AES-128-GCM  AES-256-GCM  AES-128-CBC  AES-256-CBC  Total Score

AMD Ryzen 7 1800X   573       3006         2642         1513         1101        = 8835
Intel W-2125        565       2808         2426         1698         1235        = 8732
Intel i7-6700       585       2607         2251         1561         1131        = 8135
Intel i5-6500       410       1729         1520         1078          783        = 5520
Intel i7-4750HQ     369       1556         1353          688          499        = 4465
AMD FX 8350         367       1453         1278          716          514        = 4328
AMD FX 8150         347       1441         1273          716          515        = 4292
Intel E5-2650 v4    404       1479         1286          652          468        = 4289
Intel i7-2700K      382       1353         1212          763          552        = 4262
Intel i7-3840QM     373       1279         1143          725          520        = 4040
Intel i5-2500K      358       1274         1140          728          522        = 4022
AMD FX 6100         326       1344         1186          671          481        = 4008
AMD A10-7850K       321       1303         1176          685          499        = 3984
AMD A8-7600 Kaveri  306       1246         1108          648          470        = 3778
Intel E5-2640 v3    303       1286         1126          585          419        = 3719
AMD Opteron 6380    293       1203         1063          589          423        = 3571
AMD Opteron 6378    282       1138          986          561          406        = 3373
AMD Opteron 6274    232       1054          926          524          376        = 3112
Intel Xeon E5-2630  247        962          864          541          394        = 3008
Intel Xeon E5645    262        817          717          727          524        = 3047
Intel i7-2635QM     151        989          881          564          404        = 2989
Intel Xeon L5630    225        701          610          626          450        = 2612
Intel E5-2603 v4    236        866          754          382          274        = 2512
AMD Opteron 2382    249        651          485          215          150        = 1750
Intel i7-950        401        256          218          358          257        = 1490
AMD Phenom 965      404         84           63          282          198        = 1031
Intel Core2 Q9300   231        126          133          221          161        =  872
AMD X4 610e         225         59           44          198          139        =  665
Intel Core2 Q6600   173        141           79          108           77        =  578
Intel P4 3Ghz Will  109         26           23           55           43        =  256
Intel ATOM D525      98         51           43           28           20        =  240
Snapdragon S4 Pro   131         41            -            -            -        =  172
ARM Cortex A9        73         24            -            -            -        =   97

Testing Notes: 
  LibreSSL 2.5.0 ( ~ OpenSSL 1.0.2d) 
  FreeBSD 11 ; Clang LLVM compiler
  AES-NI acceleration enabled if allowed by the CPU
  Speeds in megabytes per second (MB/s) per real cpu core
  8192 byte blocks
  Five(5) test runs, the average speed reported
  Snapdragon and ARM Cortex values reported by Google Developers