Atom C2558 IPsec AES-CGM performance… using pfSense 2.2\. Yeah!
-
Just bought two C2558 machines (quad core @ 2.4 GHz) from Supermicro and tested IPsec v2, using AES-NI, configured as follows:
- Mutual PSK
- AES256 SHA512 DH4096 for phase1
- AES256-CGM/auto AES-XCBC PFS16 (4096 bit) for phase 2
iperf TCP (default settings) LAN-to-LAN over this tunnel gives me 318 Mbps in half-duplex and 162/250 Mbps in full-duplex.
Regarding plain traffic without IPsec I got around 556 Mbps using one TCP stream and 949 Mbps using 4 streams.
Pretty happy with this machine!
(I've uploaded the screenshots with this data to my Flickr account: https://www.flickr.com/photos/miguelbarbosagoncalves/)