Ipsec Performance on Soekris 6501-50

  • I am using the Soekris 6501-50 series board (Atom 1Ghz, 1Gb DDR2) with PFSense 2.0.3.

    I am testing IPsec throughput and I am getting about 30mbps @ about 50% CPU utilization on a single tunnel (AES128 SHA1).  I have tuned my tunnel (disabled "prefer old IPsec SAs", set MSS size to 1300) as best as I believe I can at this point, and I think this is the best performance I can hope for over IPsec.  The same test done without using IPsec gets as high as 250mbps @ 35% CPU utilization

    From what I can tell, this is probably about right for the capabilities of the hardware/processor, but I am curious as to others experience with this hardware and it's performance with IPsec.

    If anyone has experience with this hardware and using IPsec, I would be happy to hear about your experience in regards to performance.

Log in to reply