Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Atom C2558 IPsec AES-CGM performance… using pfSense 2.2\. Yeah!

    IPsec
    1
    1
    1663
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      miguelgoncalves last edited by

      Just bought two C2558 machines (quad core @ 2.4 GHz) from Supermicro and tested IPsec v2, using AES-NI, configured as follows:

      • Mutual PSK
      • AES256 SHA512 DH4096 for phase1
      • AES256-CGM/auto AES-XCBC PFS16 (4096 bit) for phase 2

      iperf TCP (default settings) LAN-to-LAN over this tunnel gives me 318 Mbps in half-duplex and 162/250 Mbps in full-duplex.

      Regarding plain traffic without IPsec I got around 556 Mbps using one TCP stream and 949 Mbps using 4 streams.

      Pretty happy with this machine!

      (I've uploaded the screenshots with this data to my Flickr account: https://www.flickr.com/photos/miguelbarbosagoncalves/)

      1 Reply Last reply Reply Quote 0
      • First post
        Last post

      Products

      • Platform Overview
      • TNSR
      • pfSense
      • Appliances

      Services

      • Training
      • Professional Services

      Support

      • Subscription Plans
      • Contact Support
      • Product Lifecycle
      • Documentation

      News

      • Media Coverage
      • Press
      • Events

      Resources

      • Blog
      • FAQ
      • Find a Partner
      • Resource Library
      • Security Information

      Company

      • About Us
      • Careers
      • Partners
      • Contact Us
      • Legal
      Our Mission

      We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

      Subscribe to our Newsletter

      Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

      © 2021 Rubicon Communications, LLC | Privacy Policy