Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Atom C2558 IPsec AES-CGM performance… using pfSense 2.2\. Yeah!

    Scheduled Pinned Locked Moved IPsec
    1 Posts 1 Posters 2.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      miguelgoncalves
      last edited by

      Just bought two C2558 machines (quad core @ 2.4 GHz) from Supermicro and tested IPsec v2, using AES-NI, configured as follows:

      • Mutual PSK
      • AES256 SHA512 DH4096 for phase1
      • AES256-CGM/auto AES-XCBC PFS16 (4096 bit) for phase 2

      iperf TCP (default settings) LAN-to-LAN over this tunnel gives me 318 Mbps in half-duplex and 162/250 Mbps in full-duplex.

      Regarding plain traffic without IPsec I got around 556 Mbps using one TCP stream and 949 Mbps using 4 streams.

      Pretty happy with this machine!

      (I've uploaded the screenshots with this data to my Flickr account: https://www.flickr.com/photos/miguelbarbosagoncalves/)

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.