crypto

10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.14 
2. 0.34 4.16
3. 57 99 118 58 80 101
4. 220 448 502 220 452 516
5. 959 1248 1521 967 1226 1499

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      7.99 
2. 0.65 8.04
3. 57 108 156 57 97 150
4. 330 651 745 330 636 728
5. 958 1261 1404 949 1246 1403

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.26      15.55 
2. 1.28 15.78
3. 58 107 174 58 110 172
4. 172 327 397 172 323 387
5. 425 554 642 417 546 630

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.44      0.97 
2. 1.46 0.98
3. 23 64 105 23 49 100
4. 97 259 305 98 260 314
5. 262 342 429 260 335 437

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.77      1.86 
2. 2.81 1.89
3. 23 81 168 23 73 163
4. 157 276 295 159 275 291
5. 243 305 341 222 289 311

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 4.65      3.12 
2. 5.29 3.56
3. 23 87 126 23 81 128
4. 60 105 129 48 105 124
5. 145 176 195 135 169 191

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.80      2.38 
2. 0.81 2.42

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.60      4.79 
2. 1.61 4.81

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.15      9.41 
2. 3.19 9.55

10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.31 
2. 0.27 3.31
3. 49 78 105 49 63 104
4. 168 456 500 163 453 499
5. 590 889 964 594 896 963

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.43 
2. 0.52 6.46
3. 49 95 140 49 57 133
4. 260 607 755 256 602 748
5. 979 1288 1417 964 1277 1421

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.02      12.50 
2. 1.03 12.69
3. 49 83 124 49 75 117
4. 191 428 527 190 424 518
5. 356 484 560 352 480 558

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.10      0.74 
2. 1.19 0.80
3. 23 72 112 23 61 103
4. 92 399 469 97 367 462
5. 287 441 516 293 437 512

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.27      1.53 
2. 2.30 1.54
3. 23 85 150 23 77 150
4. 162 318 350 154 331 383
5. 341 403 494 338 401 492

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.32      2.90 
2. 4.38 2.94
3. 23 81 172 22 70 155
4. 82 158 182 71 161 187
5. 121 181 217 112 144 203

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.68      2.02 
2. 0.68 2.04

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.36      4.05 
2. 1.36 4.07

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.57      7.69 
2. 2.68 8.01

10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.81      10.01 
2. 0.82 10.06
3. 26 66 77 26 63 71
4. 84 319 349 83 304 338
5. 392 495 579 387 492 607

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.54      18.94 
2. 1.56 19.23
3. 25 26 36 25 26 29
4. 57 96 103 49 94 105
5. 126 154 169 115 146 160

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.23      15.12 
2. 1.56 19.23
3. 25 27 35 25 27 34
4. 26 42 50 25 41 46
5. 39 50 55 37 48 52

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.49      1.67 
2. 2.52 1.69
3. 19 58 88 19 35 75
4. 40 146 161 38 144 160
5. 135 190 212 142 191 245

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.54      3.05 
2. 4.61 3.10
3. 19 52 116 19 47 92
4. 62 121 150 56 118 148
5. 161 181 198 111 165 185

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 8.24      5.54 
2. 8.70 5.85
3. 19 45 65 19 50 74
4. 43 60 72 44 60 73
5. 78 99 117 76 99 136

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.71      5.12 
2. 1.73 5.17

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.24      9.70 
2. 3.26 9.75

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.29      12.82 
2. 5.79 17.30

10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.71      8.72 
2. 0.71 8.77
3. 26 72 84 26 68 77
4. 70 324 370 58 314 355
5. 390 575 618 358 567 608

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.37      16.85 
2. 1.40 17.19
3. 26 31 43 26 28 40
4. 77 166 182 71 159 180
5. 167 240 264 155 231 259

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.55      19.13 
2. 1.56 19.23
3. 26 26 34 26 26 30
4. 26 44 53 26 42 50
5. 42 52 59 41 51 55

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.39      1.61 
2. 2.40 1.62
3. 19 75 112 19 35 107
4. 54 179 204 55 179 201
5. 182 218 249 181 212 244

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.43      2.98 
2. 4.54 3.05
3. 19 58 145 19 49 100
4. 73 149 177 68 141 167
5. 173 190 205 107 165 189

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 8.29      5.57 
2. 8.46 5.69
3. 19 49 70 19 42 66
4. 59 72 83 60 75 86
5. 88 107 123 74 95 110

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      4.67 
2. 1.56 4.67

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.99      8.95 
2. 3.02 9.04

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.75      11.20 
2. 5.79 17.30

10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.22      2.72 
2. 0.22 2.74
3. 64 88 113 64 83 111
4. 224 428 559 207 405 541
5. 1341 2077 2889 1404 2223 3173

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.42      5.21 
2. 0.43 5.26
3. 62 114 181 63 102 177
4. 286 626 841 276 629 824
5. 1104 1559 1894 1066 1529 1844

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.84      10.29 
2. 0.85 10.45
3. 63 110 193 62 87 168
4. 250 567 769 246 564 767
5. 706 998 1210 662 920 1116

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.44      0.30 
2. 0.44 0.30
3. 30 55 122 30 55 119
4. 158 465 663 122 452 629
5. 1571 2303 2957 1630 2345 2983

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.79      0.53 
2. 0.79 0.53
3. 28 70 151 28 34 111
4. 297 836 1120 271 818 1174
5. 940 1427 1802 864 1295 1621

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.56      1.05 
2. 1.58 1.06
3. 28 81 198 28 74 188
4. 130 422 638 110 397 622
5. 444 673 868 440 687 863

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.36      1.07 
2. 0.36 1.08

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      1.95 
2. 0.66 1.97

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.28      3.84 
2. 1.30 3.88

10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.19      2.34 
2. 0.19 2.35
3. 54 60 84 54 59 72
4. 137 387 502 138 366 498
5. 1019 1658 2277 1082 1852 2427

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.37      4.52 
2. 0.37 4.56
3. 53 87 143 54 71 104
4. 309 637 856 303 624 826
5. 1155 1665 1996 1132 1642 1958

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.73      8.93 
2. 0.74 9.07
3. 54 97 178 54 77 160
4. 223 541 736 217 532 731
5. 784 1114 1360 798 1143 1390

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.41      0.28 
2. 0.42 0.28
3. 29 49 98 29 48 96
4. 122 399 562 93 373 525
5. 1623 2465 3247 1665 2477 3229

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.75      0.50 
2. 0.75 0.50
3. 27 78 189 27 73 181
4. 278 772 1056 261 754 1039
5. 932 1393 1754 812 1285 1615

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.45      0.97 
2. 1.47 0.99
3. 28 61 121 27 32 107
4. 124 405 645 118 421 677
5. 405 655 843 371 601 806

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.33      0.99 
2. 0.33 1.00

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.60      1.80 
2. 0.61 1.82

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.20      3.58 
2. 1.21 3.63

10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.36      4.40 
2. 0.36 4.42
3. 31 45 92 31 45 90
4. 125 426 627 117 437 588
5. 1675 2485 3345 1697 2541 3395

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.66      8.07 
2. 0.66 8.12
3. 30 44 97 30 44 88
4. 148 588 825 125 560 782
5. 956 1472 1770 892 1371 1660

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.29      15.84 
2. 1.31 16.08
3. 31 42 99 27 34 115
4. 58 282 434 61 294 450
5. 283 444 565 317 466 590

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.51      0.34 
2. 0.52 0.35
3. 25 48 128 25 38 87
4. 137 464 671 102 415 603
5. 1594 2273 2785 1492 2199 2707

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.90      0.60 
2. 0.91 0.61
3. 24 80 209 23 35 150
4. 376 957 1306 328 923 1296
5. 776 1274 1683 715 1243 1645

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.69      1.14 
2. 1.72 1.16
3. 24 82 213 23 76 200
4. 159 430 633 140 412 622
5. 386 646 828 365 621 811

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.45      1.36 
2. 0.47 1.41

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.82      2.45 
2. 0.83 2.49

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.57      4.69 
2. 1.59 4.76

10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.34      4.16 
2. 0.34 4.18
3. 32 49 97 32 43 77
4. 134 423 615 129 427 575
5. 1609 2443 3281 1729 2607 3561

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.61      7.54 
2. 0.62 7.62
3. 31 44 85 30 34 77
4. 167 618 884 157 606 862
5. 1020 1563 1875 926 1416 1728

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.20      14.75 
2. 1.21 14.90
3. 31 41 83 28 34 93
4. 73 318 507 75 324 517
5. 312 494 617 332 513 647

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.50      0.34 
2. 0.51 0.34
3. 25 50 129 25 40 91
4. 174 478 688 163 485 671
5. 1554 2273 2835 1660 2375 3001

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.87      0.58 
2. 0.87 0.59
3. 23 58 184 23 61 178
4. 310 886 1199 237 773 1075
5. 675 1109 1495 658 1149 1510

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.73      1.16 
2. 1.75 1.18
3. 24 46 95 24 41 92
4. 55 192 321 58 209 341
5. 220 410 551 249 453 600

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.43      1.29 
2. 0.45 1.35

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.79      2.35 
2. 0.79 2.38

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.54      4.60 
2. 1.56 4.67

10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.31 
2. 0.35 4.33
3. 57 103 139 57 80 117
4. 212 515 552 204 514 560
5. 1087 1436 1654 1062 1406 1648

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.23 
2. 0.67 8.27
3. 57 107 151 57 98 148
4. 315 627 724 311 621 723
5. 907 1209 1355 902 1205 1352

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.17 
2. 0.67 8.25
3. 57 107 151 57 96 147
4. 318 626 710 319 621 724
5. 941 1246 1378 914 1227 1350

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.78      1.20 
2. 1.80 1.21
3. 23 99 112 23 92 110
4. 62 216 260 58 215 233
5. 305 395 477 301 386 467

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.44      2.31 
2. 3.46 2.32
3. 23 86 170 23 76 136
4. 112 201 230 104 194 228
5. 183 236 258 175 226 253

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.49      2.35 
2. 3.56 2.39
3. 23 104 206 19 84 118
4. 144 243 265 140 232 265
5. 198 253 282 196 252 289

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.90      2.70 
2. 0.91 2.72

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.75      5.24 
2. 1.77 5.29

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.75      5.23 
2. 1.77 5.31

10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.28      3.41 
2. 0.28 3.45
3. 49 95 102 48 90 101
4. 163 451 498 166 453 505
5. 593 877 960 582 893 965

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.54      6.61 
2. 0.54 6.64
3. 48 103 138 48 67 132
4. 303 640 771 304 640 767
5. 962 1316 1444 935 1297 1430

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.56 
2. 0.54 6.63
3. 48 93 137 48 67 133
4. 303 650 771 297 649 770
5. 962 1330 1467 939 1296 1464

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.40      0.94 
2. 1.41 0.95
3. 22 79 116 22 43 114
4. 97 324 342 105 331 353
5. 238 332 432 238 320 431

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.70      1.82 
2. 2.74 1.84
3. 22 100 195 22 88 194
4. 201 318 334 198 313 329
5. 256 329 395 254 323 371

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.75      1.85 
2. 2.78 1.87
3. 22 122 190 22 114 192
4. 190 311 328 192 312 329
5. 259 332 364 252 322 345

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.75      2.24 
2. 0.75 2.25

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.47      4.38 
2. 1.48 4.43

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.46      4.36 
2. 1.47 4.41

10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.91      11.14 
2. 0.91 11.19
3. 25 58 89 25 51 85
4. 93 352 391 87 355 387
5. 355 425 459 356 426 496

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 25 29 40 25 27 41
4. 38 70 75 40 70 75
5. 64 77 83 62 77 81

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 25 30 39 25 29 38
4. 37 70 76 45 68 73
5. 63 78 84 61 76 81

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.61      2.43 
2. 3.65 2.45
3. 19 95 111 19 91 110
4. 37 111 126 39 111 129
5. 150 193 235 151 197 238

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.83      4.59 
2. 7.04 4.73
3. 19 47 70 19 51 70
4. 47 79 95 45 77 94
5. 97 124 145 96 123 142

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 7.08      4.76 
2. 7.19 4.83
3. 19 61 82 19 61 85
4. 58 97 111 56 96 112
5. 109 134 152 108 130 151

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.18      6.53 
2. 2.21 6.60

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.30      12.86 
2. 4.32 12.92

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.35      13.00 
2. 4.39 13.13

10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.77      9.51 
2. 0.78 9.56
3. 26 50 88 26 54 86
4. 105 382 408 88 381 410
5. 457 614 676 466 611 666

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.50      18.46 
2. 1.52 18.64
3. 26 38 48 26 36 48
4. 63 116 127 63 112 126
5. 113 135 144 96 121 128

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.54      18.94 
2. 1.55 19.13
3. 25 39 50 25 38 54
4. 69 108 115 72 107 113
5. 115 136 145 115 133 141

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.44      2.31 
2. 3.45 2.32
3. 19 93 106 19 80 104
4. 39 117 137 39 111 131
5. 183 238 272 187 243 270

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.63      4.46 
2. 6.73 4.52
3. 19 61 105 19 38 62
4. 61 109 128 61 111 132
5. 118 147 170 113 143 164

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.47      4.35 
2. 6.80 4.57
3. 19 61 123 19 24 46
4. 69 108 128 61 105 123
5. 118 143 163 115 140 158

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.98      5.93 
2. 1.99 5.96

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.83      11.44 
2. 3.88 11.61

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.90      11.65 
2. 3.94 11.77

10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.26 
2. 0.35 4.29
3. 58 100 136 58 100 136
4. 210 511 555 210 513 558
5. 1072 1442 1716 1106 1460 1660

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.15 
2. 0.67 8.19
3. 57 107 152 57 95 146
4. 327 641 734 331 641 732
5. 927 1225 1386 923 1224 1380

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.12 
2. 0.66 8.16
3. 57 144 174 57 138 169
4. 300 596 724 298 592 718
5. 853 1112 1214 849 1115 1215

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.68      1.13 
2. 1.69 1.14
3. 23 91 123 23 50 114
4. 67 271 291 74 262 297
5. 254 355 415 248 320 395

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.27      2.20 
2. 3.31 2.22
3. 23 115 180 23 111 182
4. 127 214 260 129 216 262
5. 208 266 300 205 267 302

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.22      2.16 
2. 3.28 2.21
3. 23 137 165 23 129 172
4. 93 194 216 101 199 224
5. 188 231 259 190 240 267

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.88      2.63 
2. 0.88 2.64

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.71      5.12 
2. 1.73 5.17

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.71      5.11 
2. 1.73 5.16

10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.28      3.39 
2. 0.28 3.41
3. 49 92 105 49 64 92
4. 168 470 504 171 466 502
5. 620 895 972 613 903 977

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.56 
2. 0.54 6.59
3. 49 98 152 49 57 147
4. 213 577 704 210 576 703
5. 842 1188 1288 849 1187 1285

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.53 
2. 0.53 6.56
3. 49 110 152 49 95 151
4. 282 630 760 282 626 756
5. 974 1308 1412 959 1296 1390

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.34      0.90 
2. 1.35 0.91
3. 23 97 116 23 66 115
4. 109 291 365 107 283 365
5. 245 353 461 250 359 472

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.63      1.77 
2. 2.66 1.79
3. 23 89 151 23 82 160
4. 150 236 324 127 237 268
5. 257 333 381 270 346 395

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.66      1.78 
2. 2.70 1.81
3. 23 118 171 23 104 173
4. 174 293 319 102 205 272
5. 243 333 372 243 329 363

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.73      2.18 
2. 0.74 2.20

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.44      4.29 
2. 1.45 4.34

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.42      4.25 
2. 1.44 4.32

10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.88      10.81 
2. 0.89 10.92
3. 26 43 65 26 31 57
4. 66 334 352 51 330 354
5. 336 422 455 337 424 458

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 25 44 51 25 43 51
4. 46 83 88 45 83 88
5. 69 78 85 70 80 90

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 25 39 48 25 39 49
4. 34 77 82 36 79 84
5. 69 81 90 71 87 95

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.29      2.21 
2. 3.32 2.23
3. 19 85 105 19 37 103
4. 50 121 144 42 112 145
5. 122 157 194 124 162 208

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.15      4.13 
2. 6.50 4.37
3. 19 53 74 19 52 73
4. 71 124 141 70 121 138
5. 114 143 168 114 142 164

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.31      4.24 
2. 6.54 4.39
3. 19 37 55 19 37 52
4. 56 107 123 60 108 124
5. 97 122 140 100 124 146

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 2.05      6.13 
2. 2.07 6.19

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 4.08      12.19 
2. 4.14 12.37

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.92      11.73 
2. 3.96 11.85

10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.76      9.34 
2. 0.76 9.39
3. 26 47 72 26 34 68
4. 119 349 383 104 346 375
5. 449 604 658 447 600 657

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.51      18.57 
2. 1.52 18.67
3. 26 33 41 26 34 44
4. 64 116 124 60 116 124
5. 132 153 168 121 142 152

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.51      18.54 
2. 1.52 18.72
3. 26 43 52 26 42 54
4. 73 120 131 74 122 138
5. 125 144 151 125 145 153

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.12      2.10 
2. 3.17 2.13
3. 19 53 95 19 25 68
4. 43 125 142 39 129 147
5. 164 208 247 167 212 251

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 5.99      4.02 
2. 6.11 4.10
3. 19 44 60 19 41 53
4. 50 93 121 52 90 104
5. 96 120 138 94 116 133

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.01      4.04 
2. 6.07 4.08
3. 19 84 120 19 94 129
4. 77 117 138 67 106 128
5. 121 155 180 115 147 171

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.86      5.56 
2. 1.88 5.62

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.68      10.99 
2. 3.71 11.10

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.67      10.96 
2. 3.70 11.07

10ge2p1vic1227-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.14 
2. 0.34 4.18
3. 58 100 118 58 87 100
4. 216 483 537 207 463 514
5. 1026 1324 1593 1032 1332 1607

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      8.04 
2. 0.66 8.08
3. 57 110 168 57 101 154
4. 312 600 699 313 597 694
5. 912 1187 1302 898 1171 1308

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.26      15.46 
2. 1.27 15.63
3. 58 94 115 58 94 115
4. 118 191 224 117 191 226
5. 381 508 583 376 501 576

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.47      0.99 
2. 1.50 1.00
3. 23 67 99 23 46 88
4. 72 235 282 65 234 285
5. 281 376 417 298 363 430

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.86      1.92 
2. 2.90 1.95
3. 23 67 145 23 59 128
4. 142 262 304 137 258 301
5. 232 305 367 222 296 335

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.47      3.67 
2. 5.66 3.81
3. 23 34 48 23 43 60
4. 58 105 124 58 106 125
5. 178 222 267 136 170 192

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.81      2.43 
2. 0.82 2.46

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.60      4.77 
2. 1.62 4.84

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.13      9.38 
2. 3.18 9.52

10ge2p1vic1227-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.32 
2. 0.27 3.33
3. 49 69 99 49 69 98
4. 166 460 499 164 453 499
5. 587 888 949 582 887 950

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.44 
2. 0.53 6.50
3. 49 130 150 49 116 148
4. 210 580 685 206 578 684
5. 846 1171 1333 843 1162 1331

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.01      12.40 
2. 1.02 12.54
3. 49 76 167 49 77 170
4. 142 377 454 138 376 447
5. 337 471 545 339 470 547

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.21      0.81 
2. 1.22 0.82
3. 23 69 103 23 48 92
4. 82 328 417 88 330 420
5. 254 394 466 274 391 484

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.32      1.56 
2. 2.35 1.58
3. 22 67 164 22 59 153
4. 157 292 318 150 289 315
5. 318 383 450 307 381 436

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.54      3.05 
2. 4.66 3.13
3. 23 91 138 23 87 147
4. 64 139 159 63 146 171
5. 196 219 250 178 202 220

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.68      2.05 
2. 0.69 2.06

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.37      4.08 
2. 1.38 4.12

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.65      7.91 
2. 2.68 8.02

10ge2p1vic1227-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.82      10.12 
2. 0.83 10.22
3. 26 45 83 26 42 74
4. 100 384 414 79 365 399
5. 446 584 661 438 565 653

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 25 38 50 25 37 52
4. 64 99 109 65 97 106
5. 94 121 129 88 115 122

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.52      18.66 
2. 1.56 19.23
3. 25 30 41 25 30 40
4. 27 42 49 28 41 47
5. 37 45 50 36 46 51

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.63      1.77 
2. 2.63 1.77
3. 19 71 111 19 37 105
4. 73 131 179 41 117 169
5. 138 197 219 148 204 236

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.78      3.21 
2. 4.90 3.30
3. 19 65 93 19 71 92
4. 86 129 160 78 123 140
5. 149 177 198 138 169 186

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 8.90      5.98 
2. 9.60 6.45
3. 19 23 33 19 28 40
4. 42 66 79 43 67 80
5. 85 104 119 78 99 116

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.76      5.26 
2. 1.78 5.34

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.33      9.96 
2. 3.40 10.16

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.67      10.98 
2. 5.79 17.30

10ge2p1vic1227-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.72      8.80 
2. 0.72 8.85
3. 26 48 77 26 42 69
4. 88 394 421 65 388 414
5. 471 658 705 466 647 703

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.40      17.24 
2. 1.42 17.42
3. 26 31 48 26 30 45
4. 58 135 156 56 134 153
5. 152 208 222 146 199 213

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.50      18.47 
2. 1.56 19.23
3. 26 31 42 26 30 42
4. 26 47 53 26 46 51
5. 43 50 57 41 49 54

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.52      1.69 
2. 2.53 1.70
3. 19 80 102 19 73 96
4. 38 146 169 37 138 152
5. 180 226 274 180 217 251

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.63      3.11 
2. 4.71 3.17
3. 19 88 120 19 90 129
4. 71 138 155 73 138 155
5. 161 183 203 144 171 195

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 9.01      6.06 
2. 9.20 6.18
3. 19 45 72 19 41 75
4. 44 80 91 42 76 96
5. 95 111 125 79 104 122

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.63      4.86 
2. 1.64 4.91

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.13      9.35 
2. 3.14 9.40

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.02      12.01 
2. 5.79 17.30

10ge2p1vic1227-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.22 
2. 0.34 4.24
3. 58 115 134 58 115 133
4. 203 504 540 208 507 545
5. 1076 1432 1711 1096 1463 1706

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.16 
2. 0.67 8.20
3. 57 128 172 57 115 166
4. 344 643 726 343 639 732
5. 951 1244 1394 938 1235 1390

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.83      10.18 
2. 0.83 10.27
3. 57 84 141 57 86 136
4. 108 403 471 110 401 470
5. 427 593 658 409 571 638

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.61      1.08 
2. 1.63 1.10
3. 23 86 129 23 48 119
4. 108 254 319 102 220 302
5. 257 336 424 269 337 428

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.13      2.10 
2. 3.18 2.14
3. 23 118 199 23 88 193
4. 142 231 282 132 227 297
5. 229 301 339 222 289 328

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 4.25      2.85 
2. 4.30 2.89
3. 23 35 131 23 38 128
4. 55 94 117 50 94 115
5. 126 160 184 142 173 200

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.85      2.54 
2. 0.85 2.55

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.69      5.05 
2. 1.72 5.16

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.11      6.31 
2. 2.15 6.44

10ge2p1vic1227-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.36 
2. 0.27 3.38
3. 49 71 88 49 71 88
4. 169 466 503 169 467 509
5. 632 913 980 634 912 975

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.52 
2. 0.54 6.59
3. 48 92 137 48 81 136
4. 312 664 793 312 661 785
5. 1008 1328 1522 1000 1325 1558

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.66      8.14 
2. 0.67 8.23
3. 48 70 113 48 66 113
4. 121 473 547 117 475 544
5. 543 900 1034 551 899 1046

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.29      0.86 
2. 1.31 0.88
3. 23 102 117 23 91 115
4. 58 291 370 50 297 379
5. 270 387 516 275 395 524

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.50      1.68 
2. 2.54 1.71
3. 22 91 157 22 83 154
4. 150 270 302 139 262 299
5. 274 357 415 266 344 381

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 3.40      2.28 
2. 3.42 2.30
3. 22 62 135 22 59 133
4. 63 164 196 59 161 202
5. 149 215 245 143 206 242

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.71      2.13 
2. 0.72 2.14

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.42      4.25 
2. 1.43 4.29

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.75      5.24 
2. 1.79 5.34

10ge2p1vic1227-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.86      10.52 
2. 0.86 10.63
3. 26 43 71 26 33 63
4. 105 374 411 83 370 395
5. 420 535 636 420 536 642

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 25 36 51 25 31 50
4. 55 90 101 54 87 94
5. 83 108 115 77 98 105

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 25 26 31 25 26 29
4. 26 42 49 25 39 44
5. 40 49 54 38 49 53

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.04      2.04 
2. 3.11 2.09
3. 19 83 118 19 36 103
4. 23 153 193 25 151 190
5. 156 228 302 161 224 298

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.48      3.68 
2. 5.59 3.76
3. 19 58 80 19 57 76
4. 76 138 151 76 138 149
5. 127 167 190 119 160 186

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 7.98      5.36 
2. 8.32 5.59
3. 19 52 86 19 25 71
4. 76 88 95 53 88 97
5. 68 93 107 76 98 117

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.93      5.77 
2. 1.96 5.86

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.66      10.95 
2. 3.72 11.11

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.98      11.89 
2. 5.24 15.66

10ge2p1vic1227-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.74      9.09 
2. 0.74 9.13
3. 26 43 61 26 28 37
4. 153 394 426 149 389 418
5. 498 650 705 473 637 705

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.46      17.91 
2. 1.46 18.00
3. 26 44 53 26 43 52
4. 57 131 146 54 127 144
5. 146 192 210 130 176 196

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 26 31 47 26 30 46
4. 26 52 59 26 52 59
5. 46 60 66 46 58 64

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.90      1.95 
2. 2.93 1.97
3. 19 74 113 19 35 89
4. 41 154 165 45 154 177
5. 158 208 262 149 210 262

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.49      3.69 
2. 5.60 3.77
3. 19 50 82 19 66 88
4. 80 143 156 86 142 160
5. 139 172 192 130 165 185

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 7.58      5.09 
2. 7.84 5.27
3. 19 24 69 19 20 37
4. 19 39 59 19 29 42
5. 75 100 113 81 109 130

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.77      5.29 
2. 1.79 5.35

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.39      10.15 
2. 3.45 10.31

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.21      12.58 
2. 4.69 14.03

10ge2p1vic1227-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.23 
2. 0.35 4.27
3. 57 95 119 57 95 116
4. 212 465 512 220 471 515
5. 970 1219 1469 997 1238 1479

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.21 
2. 0.67 8.25
3. 57 100 147 57 95 145
4. 244 560 653 242 560 637
5. 829 1075 1210 822 1077 1220

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.14 
2. 0.67 8.23
3. 57 106 144 57 111 152
4. 208 504 563 311 623 709
5. 630 905 988 926 1226 1353

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.66      1.12 
2. 1.68 1.13
3. 23 83 111 23 67 109
4. 38 245 263 43 243 263
5. 239 307 384 235 301 346

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.18      2.13 
2. 3.24 2.18
3. 23 95 125 22 91 123
4. 78 167 204 82 160 201
5. 162 217 252 157 208 250

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.10      2.08 
2. 3.12 2.10
3. 23 58 101 23 64 148
4. 43 159 191 101 221 272
5. 131 187 201 218 269 290

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.86      2.59 
2. 0.87 2.60

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.73      5.17 
2. 1.74 5.22

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.72      5.15 
2. 1.74 5.20

10ge2p1vic1227-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.38 
2. 0.28 3.40
3. 49 79 105 49 62 79
4. 163 452 492 160 451 497
5. 606 887 951 612 894 962

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.54      6.58 
2. 0.54 6.62
3. 48 94 139 48 68 134
4. 308 659 782 300 657 777
5. 968 1300 1428 959 1291 1414

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.54 
2. 0.54 6.61
3. 48 86 120 48 68 134
4. 174 507 588 298 636 745
5. 639 947 1077 957 1323 1466

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.32      0.89 
2. 1.34 0.90
3. 22 71 114 22 36 92
4. 109 279 357 81 279 361
5. 245 359 469 246 359 462

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.56      1.72 
2. 2.59 1.74
3. 22 91 192 22 88 191
4. 124 241 280 115 246 277
5. 272 352 389 262 339 374

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.60      1.75 
2. 2.64 1.77
3. 22 51 148 22 86 186
4. 64 173 226 114 243 272
5. 166 243 264 263 337 385

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.73      2.17 
2. 0.73 2.18

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.44      4.32 
2. 1.46 4.36

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.43      4.29 
2. 1.45 4.35

10ge2p1vic1227-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.87      10.70 
2. 0.88 10.80
3. 25 47 83 25 29 71
4. 102 360 388 80 358 383
5. 383 453 537 378 457 557

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 25 32 42 25 31 44
4. 46 82 89 56 79 86
5. 73 91 97 70 88 93

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.55      19.13 
2. 1.56 19.23
3. 25 27 36 25 29 43
4. 26 51 56 45 80 86
5. 46 58 64 69 87 93

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.23      2.17 
2. 3.26 2.19
3. 19 83 114 19 69 112
4. 52 120 159 21 121 130
5. 117 162 191 121 157 198

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.87      3.95 
2. 5.99 4.03
3. 18 95 115 19 80 125
4. 54 103 118 50 110 126
5. 119 151 174 114 148 175

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.50      3.70 
2. 5.61 3.77
3. 19 23 33 19 62 83
4. 39 97 110 84 141 156
5. 77 105 115 117 157 174

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.01      6.02 
2. 2.04 6.11

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.89      11.63 
2. 3.95 11.81

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.04      12.07 
2. 4.10 12.25

10ge2p1vic1227-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.75      9.25 
2. 0.76 9.29
3. 26 48 81 26 33 73
4. 96 387 411 76 394 419
5. 492 668 720 472 646 707

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.49      18.39 
2. 1.51 18.53
3. 26 51 58 26 51 57
4. 58 119 129 65 120 142
5. 128 149 158 116 139 148

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.49      18.35 
2. 1.51 18.53
3. 26 29 39 26 39 56
4. 42 92 99 65 119 135
5. 75 105 111 120 143 155

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.07      2.06 
2. 3.10 2.08
3. 19 73 110 19 34 103
4. 23 147 185 26 145 190
5. 149 188 231 161 207 266

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.70      3.83 
2. 5.79 3.89
3. 19 34 66 19 27 44
4. 64 110 134 61 109 137
5. 122 149 168 113 143 161

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.03      4.05 
2. 6.13 4.12
3. 19 71 97 19 103 137
4. 61 103 116 70 118 146
5. 88 114 131 127 157 177

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.85      5.53 
2. 1.86 5.55

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.58      10.72 
2. 3.64 10.88

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.60      10.78 
2. 3.66 10.94

10ge2p1vic1227-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.13 
2. 0.34 4.15
3. 58 100 115 58 80 101
4. 212 502 548 208 507 553
5. 1030 1381 1673 1038 1368 1641

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      8.02 
2. 0.65 8.06
3. 57 108 155 57 76 150
4. 335 641 735 339 637 739
5. 969 1259 1435 972 1270 1434

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.29      15.87 
2. 1.30 16.03
3. 58 91 128 57 88 121
4. 200 371 435 198 368 425
5. 463 580 658 453 567 649

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.39      0.94 
2. 1.42 0.95
3. 23 59 83 23 42 76
4. 65 232 295 71 263 297
5. 268 343 424 271 354 439

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.68      1.80 
2. 2.72 1.83
3. 23 66 145 23 58 158
4. 152 209 297 145 228 253
5. 218 290 329 209 273 321

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 4.94      3.32 
2. 5.11 3.43
3. 23 42 86 20 37 60
4. 63 119 148 60 119 147
5. 146 183 203 134 173 193

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.80      2.38 
2. 0.80 2.39

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.57      4.69 
2. 1.60 4.78

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.07      9.19 
2. 3.17 9.47

10ge2p1vic1227-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.31 
2. 0.27 3.32
3. 49 73 93 49 73 91
4. 173 434 491 172 427 486
5. 625 902 989 605 889 977

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.43 
2. 0.52 6.46
3. 49 107 155 49 87 141
4. 317 650 743 307 647 740
5. 1028 1335 1547 1021 1340 1536

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.02      12.54 
2. 1.05 12.86
3. 49 77 130 49 61 129
4. 196 430 519 193 427 513
5. 325 428 510 326 427 511

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.16      0.78 
2. 1.17 0.79
3. 23 41 54 23 35 49
4. 53 298 376 58 311 376
5. 248 379 460 254 384 469

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.17      1.46 
2. 2.23 1.50
3. 23 51 75 23 31 58
4. 116 227 290 113 227 266
5. 253 355 407 243 315 392

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.21      2.83 
2. 4.27 2.87
3. 23 99 151 23 60 148
4. 88 137 154 92 141 159
5. 127 175 208 123 153 197

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.67      2.00 
2. 0.68 2.02

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.35      4.02 
2. 1.36 4.06

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.60      7.79 
2. 2.66 7.95

10ge2p1vic1227-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.81      9.94 
2. 0.82 10.04
3. 26 51 84 26 50 76
4. 125 391 421 120 371 413
5. 454 591 671 447 586 658

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.55      19.03 
2. 1.55 19.13
3. 25 28 41 25 27 39
4. 59 108 118 68 103 112
5. 115 143 156 101 129 143

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.46      17.92 
2. 1.56 19.23
3. 25 27 31 25 27 31
4. 29 42 51 26 41 48
5. 39 49 55 38 48 53

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.37      1.59 
2. 2.42 1.62
3. 19 77 104 19 70 99
4. 37 130 150 40 128 150
5. 150 189 235 157 194 248

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.32      2.90 
2. 4.52 3.04
3. 19 67 153 19 43 106
4. 73 149 175 68 138 161
5. 171 188 204 160 178 190

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 7.98      5.36 
2. 8.23 5.53
3. 19 45 69 19 36 52
4. 51 67 77 42 59 73
5. 77 99 112 64 83 103

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.65      4.92 
2. 1.66 4.97

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.11      9.29 
2. 3.15 9.43

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.20      12.56 
2. 5.79 17.30

10ge2p1vic1227-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.69      8.55 
2. 0.71 8.71
3. 26 67 77 26 66 76
4. 73 336 366 73 337 357
5. 431 621 676 422 611 661

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.37      16.91 
2. 1.39 17.08
3. 26 47 60 26 43 56
4. 83 169 186 78 165 182
5. 168 240 265 156 230 261

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.34      16.46 
2. 1.56 19.23
3. 26 27 34 26 27 32
4. 30 47 55 28 46 53
5. 42 51 59 41 50 57

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.30      1.54 
2. 2.31 1.55
3. 19 52 93 19 31 72
4. 48 143 164 42 139 156
5. 168 218 257 138 199 254

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.18      2.81 
2. 4.18 2.81
3. 19 58 149 19 43 142
4. 85 159 172 63 159 171
5. 113 182 214 109 170 210

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 7.93      5.33 
2. 8.05 5.41
3. 19 59 78 19 41 66
4. 54 71 84 39 52 65
5. 85 106 119 77 99 118

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.55      4.62 
2. 1.55 4.65

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.82      8.43 
2. 2.89 8.64

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.24      12.68 
2. 5.61 16.78

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.15 
2. 0.34 4.17
3. 62 104 109 63 83 102
4. 214 509 532 216 508 531
5. 774 953 1019 780 947 1018

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      8.02 
2. 0.66 8.06
3. 63 143 160 63 93 154
4. 211 498 546 157 493 507
5. 689 864 980 682 863 975

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.29      15.92 
2. 1.30 16.00
3. 63 100 122 63 97 118
4. 181 313 361 178 318 373
5. 373 474 550 369 467 543

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.48      0.99 
2. 1.49 1.00
3. 26 43 65 26 32 39
4. 73 254 298 44 253 289
5. 197 263 300 211 263 304

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.87      1.93 
2. 2.92 1.96
3. 26 95 168 26 84 142
4. 132 252 270 133 252 272
5. 229 297 387 213 278 363

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.32      3.58 
2. 5.40 3.63
3. 26 94 127 26 97 131
4. 99 155 164 64 122 134
5. 146 175 192 143 172 187

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.81      2.43 
2. 0.82 2.45

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.61      4.83 
2. 1.63 4.87

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.16      9.45 
2. 3.21 9.59

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.32 
2. 0.27 3.34
3. 54 79 105 54 65 106
4. 159 401 430 159 401 427
5. 515 840 910 504 837 907

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.45 
2. 0.53 6.48
3. 54 101 145 54 63 139
4. 304 641 719 310 639 706
5. 975 1266 1508 953 1253 1414

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.04      12.76 
2. 1.05 12.89
3. 54 86 117 54 81 110
4. 194 412 511 190 407 509
5. 329 448 514 329 447 519

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.21      0.81 
2. 1.21 0.81
3. 26 78 100 22 30 34
4. 77 317 374 75 316 379
5. 270 381 450 272 378 446

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.33      1.57 
2. 2.36 1.58
3. 25 65 110 25 47 86
4. 119 255 324 112 262 315
5. 292 366 437 272 361 430

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.42      2.97 
2. 4.51 3.03
3. 26 75 173 25 69 91
4. 91 168 186 93 168 189
5. 191 211 223 164 202 219

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.68      2.05 
2. 0.69 2.06

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.36      4.06 
2. 1.36 4.06

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.68      8.01 
2. 2.70 8.09

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.81      9.93 
2. 0.82 10.12
3. 31 53 80 31 49 76
4. 79 371 389 60 365 383
5. 424 551 610 416 545 600

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 30 31 42 31 32 39
4. 66 102 114 65 100 107
5. 92 118 129 86 109 116

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 36 44 31 35 45
4. 32 47 52 31 45 51
5. 42 52 56 43 52 57

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.59      1.74 
2. 2.61 1.75
3. 22 66 97 22 61 94
4. 67 148 175 44 109 148
5. 116 185 195 125 183 193

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.69      3.15 
2. 4.86 3.26
3. 21 81 115 21 92 121
4. 57 115 142 55 110 139
5. 79 98 113 68 87 102

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 8.94      6.01 
2. 8.98 6.04
3. 22 34 71 20 36 53
4. 36 68 77 37 68 79
5. 78 96 107 61 82 102

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.73      5.17 
2. 1.75 5.23

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.33      9.97 
2. 3.35 10.02

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.71      8.72 
2. 0.72 8.81
3. 31 64 76 31 65 74
4. 85 330 363 81 328 355
5. 417 581 622 409 563 599

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.41      17.32 
2. 1.42 17.49
3. 31 38 53 31 34 52
4. 62 129 144 62 128 143
5. 139 185 205 131 177 197

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 32 39 31 32 39
4. 32 49 54 32 51 59
5. 45 55 61 47 56 63

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.43      1.64 
2. 2.45 1.64
3. 22 63 85 22 55 84
4. 27 130 160 25 126 160
5. 140 172 190 139 167 190

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.60      3.09 
2. 4.71 3.17
3. 22 56 74 22 40 61
4. 44 68 83 50 72 89
5. 137 156 169 120 144 159

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 8.89      5.97 
2. 8.93 6.00
3. 23 61 86 20 46 62
4. 42 70 81 41 68 82
5. 72 98 115 64 76 96

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.60      4.78 
2. 1.61 4.81

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.11      9.30 
2. 3.14 9.39

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.22      2.72 
2. 0.22 2.74
3. 69 90 115 69 86 115
4. 226 477 586 216 471 599
5. 1174 1793 2455 1166 1946 2483

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.43      5.25 
2. 0.43 5.28
3. 68 151 216 68 151 215
4. 299 743 971 290 733 966
5. 1043 1592 1984 1008 1562 1962

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.85      10.44 
2. 0.85 10.49
3. 68 107 177 68 103 178
4. 235 549 732 233 537 731
5. 627 897 1086 621 893 1086

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.45      0.30 
2. 0.45 0.30
3. 32 62 131 32 52 92
4. 160 488 662 153 501 655
5. 1441 2195 2843 1355 2063 2809

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.79      0.53 
2. 0.80 0.54
3. 31 93 220 31 44 169
4. 277 768 1076 244 735 996
5. 814 1263 1604 841 1311 1689

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.52      1.02 
2. 1.53 1.03
3. 31 87 223 31 68 202
4. 119 417 619 109 393 588
5. 410 644 798 405 633 771

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.36      1.07 
2. 0.36 1.08

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      1.97 
2. 0.67 1.99

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.27      3.79 
2. 1.28 3.83

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.19      2.33 
2. 0.19 2.34
3. 60 65 88 60 65 75
4. 179 409 525 179 400 517
5. 990 1574 2049 983 1736 2209

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.37      4.58 
2. 0.37 4.60
3. 59 118 177 59 100 178
4. 353 752 983 321 747 993
5. 1068 1561 1936 1073 1579 1948

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.73      8.98 
2. 0.73 9.02
3. 59 98 172 59 90 163
4. 179 522 709 175 523 712
5. 706 1005 1215 739 1066 1286

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.42      0.28 
2. 0.43 0.29
3. 32 55 105 32 54 105
4. 181 438 601 166 435 580
5. 1759 2495 3005 1748 2511 2949

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.76      0.51 
2. 0.77 0.51
3. 31 91 215 31 45 131
4. 257 733 1039 221 767 1098
5. 877 1337 1669 916 1421 1771

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.42      0.96 
2. 1.44 0.96
3. 31 89 208 30 36 142
4. 139 453 677 119 433 657
5. 371 630 798 338 591 762

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.33      1.00 
2. 0.33 1.00

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.62      1.85 
2. 0.62 1.86

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.22      3.66 
2. 1.23 3.69

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.36      4.43 
2. 0.36 4.45
3. 36 52 97 36 47 74
4. 133 425 625 121 427 583
5. 1610 2383 3081 1678 2427 2983

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.65      8.00 
2. 0.66 8.08
3. 35 51 96 35 39 82
4. 151 587 802 146 603 869
5. 891 1362 1632 904 1419 1716

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.24      15.32 
2. 1.25 15.37
3. 35 40 68 35 39 59
4. 66 311 485 62 298 463
5. 286 472 594 277 431 538

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.52      0.35 
2. 0.52 0.35
3. 27 48 129 27 40 100
4. 160 453 668 158 482 663
5. 1755 2465 2917 1736 2431 2931

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.90      0.60 
2. 0.90 0.61
3. 26 81 216 26 73 212
4. 218 717 1030 194 672 945
5. 624 1072 1382 592 1062 1387

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.74      1.17 
2. 1.75 1.17
3. 27 64 165 26 50 126
4. 119 349 537 107 338 529
5. 343 567 738 343 561 728

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.47      1.42 
2. 0.48 1.42

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.82      2.45 
2. 0.83 2.48

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.63      4.88 
2. 1.65 4.93

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.34      4.20 
2. 0.34 4.20
3. 37 45 90 37 44 82
4. 96 351 541 100 366 533
5. 1575 2191 2723 1598 2233 2747

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.62      7.63 
2. 0.62 7.68
3. 36 48 68 35 43 66
4. 121 525 794 114 506 769
5. 889 1415 1751 821 1317 1682

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.17      14.41 
2. 1.18 14.48
3. 36 48 106 36 40 97
4. 77 330 532 67 308 491
5. 314 523 649 269 442 561

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.50      0.34 
2. 0.51 0.34
3. 28 47 120 28 46 122
4. 122 446 644 123 465 647
5. 1677 2391 2899 1582 2363 2879

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.89      0.60 
2. 0.89 0.60
3. 26 59 141 25 30 101
4. 178 613 923 176 694 1020
5. 733 1223 1657 708 1210 1628

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.73      1.16 
2. 1.74 1.17
3. 27 58 131 26 31 119
4. 106 335 498 107 345 522
5. 320 541 702 327 534 677

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.46      1.37 
2. 0.46 1.38

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.80      2.38 
2. 0.80 2.40

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.59      4.76 
2. 1.61 4.81

10ge2p1x520-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.31 
2. 0.35 4.35
3. 63 115 136 63 115 136
4. 203 496 541 203 493 536
5. 811 975 1052 808 970 1048

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.24 
2. 0.67 8.28
3. 62 148 174 62 148 174
4. 367 668 730 374 668 744
5. 838 1111 1277 841 1109 1278

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.25 
2. 0.67 8.29
3. 62 148 175 62 149 174
4. 366 664 736 369 664 746
5. 842 1109 1276 837 1113 1284

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.83      1.23 
2. 1.85 1.24
3. 25 92 121 25 78 115
4. 53 257 275 57 252 275
5. 217 287 320 218 296 322

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.65      2.45 
2. 3.67 2.46
3. 25 91 190 25 91 186
4. 126 219 250 134 221 253
5. 192 257 287 193 258 287

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.68      2.47 
2. 3.70 2.48
3. 25 94 191 25 96 147
4. 123 218 246 126 218 250
5. 188 251 280 188 253 279

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.91      2.73 
2. 0.92 2.74

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.76      5.25 
2. 1.77 5.31

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.77      5.28 
2. 1.78 5.31

10ge2p1x520-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.28      3.43 
2. 0.28 3.45
3. 54 90 104 54 75 102
4. 113 464 486 115 444 475
5. 570 867 922 545 860 921

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.54      6.59 
2. 0.54 6.62
3. 54 136 154 54 136 153
4. 310 639 720 322 638 724
5. 899 1219 1353 897 1218 1366

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.54      6.59 
2. 0.54 6.65
3. 54 136 140 54 99 140
4. 325 660 735 323 650 728
5. 891 1214 1346 895 1218 1342

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.43      0.96 
2. 1.44 0.97
3. 25 82 102 25 51 86
4. 91 300 319 93 302 319
5. 226 326 402 219 311 423

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.85      1.92 
2. 2.88 1.94
3. 25 87 184 25 82 184
4. 140 265 294 146 270 294
5. 241 303 399 245 305 329

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.73      1.83 
2. 2.75 1.85
3. 25 76 113 25 75 111
4. 149 265 277 144 260 274
5. 224 298 331 214 292 320

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.75      2.25 
2. 0.76 2.27

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.46      4.38 
2. 1.48 4.42

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.46      4.38 
2. 1.48 4.42

10ge2p1x520-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.91      11.25 
2. 0.92 11.30
3. 30 54 90 30 46 89
4. 113 343 367 104 342 367
5. 338 395 417 336 390 408

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 30 34 47 30 33 48
4. 32 73 76 32 73 76
5. 66 78 84 66 77 83

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 30 31 45 30 31 42
4. 37 73 79 42 71 75
5. 68 80 86 65 78 82

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.85      2.59 
2. 3.87 2.60
3. 21 77 106 21 57 102
4. 40 104 122 23 104 120
5. 108 131 153 110 132 157

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 7.35      4.94 
2. 7.39 4.97
3. 22 59 74 22 59 75
4. 46 96 111 50 98 117
5. 98 122 144 97 121 146

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 7.39      4.97 
2. 7.43 4.99
3. 21 58 71 21 60 79
4. 44 91 110 45 93 109
5. 92 114 132 91 114 131

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.23      6.66 
2. 2.25 6.73

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.32      12.93 
2. 4.39 13.12

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.21      12.59 
2. 4.25 12.72

10ge2p1x520-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.78      9.63 
2. 0.79 9.68
3. 31 62 85 31 57 81
4. 88 381 398 70 371 394
5. 453 598 658 451 591 646

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.52      18.75 
2. 1.54 18.94
3. 31 47 56 31 47 56
4. 73 110 116 74 113 124
5. 102 125 134 108 127 133

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.55      19.03 
2. 1.56 19.23
3. 31 52 58 31 52 58
4. 60 114 119 70 112 116
5. 111 134 143 110 133 141

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.57      2.40 
2. 3.62 2.43
3. 22 82 111 22 67 109
4. 42 126 144 45 127 145
5. 107 138 158 108 140 157

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.96      4.68 
2. 7.00 4.70
3. 22 83 98 22 91 105
4. 59 103 122 52 103 119
5. 98 121 137 99 120 137

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.98      4.69 
2. 7.01 4.71
3. 22 77 95 18 70 104
4. 56 98 113 47 96 112
5. 101 126 143 101 125 141

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.02      6.03 
2. 2.03 6.06

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.92      11.72 
2. 3.94 11.78

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.92      11.73 
2. 3.94 11.79

10ge2p1x520-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.26 
2. 0.35 4.28
3. 63 139 142 63 106 109
4. 205 501 521 206 501 520
5. 784 954 1026 785 955 1028

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.16 
2. 0.67 8.20
3. 63 92 113 63 93 112
4. 269 581 617 270 581 619
5. 809 1090 1233 783 1061 1220

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.18 
2. 0.67 8.22
3. 63 150 155 63 110 155
4. 370 692 741 373 691 737
5. 851 1113 1283 871 1174 1289

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.74      1.17 
2. 1.76 1.18
3. 26 83 107 26 62 104
4. 67 223 240 68 219 239
5. 236 316 381 241 328 389

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.42      2.30 
2. 3.45 2.32
3. 26 85 142 26 88 145
4. 108 208 234 108 208 235
5. 206 260 293 205 260 295

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.48      2.34 
2. 3.49 2.35
3. 26 82 119 26 68 119
4. 81 146 185 81 146 195
5. 168 211 248 162 209 236

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.89      2.65 
2. 0.89 2.67

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.72      5.15 
2. 1.73 5.17

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.72      5.13 
2. 1.73 5.18

10ge2p1x520-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.28      3.40 
2. 0.28 3.42
3. 54 83 104 54 83 105
4. 156 448 496 158 447 496
5. 569 872 920 562 873 925

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.57 
2. 0.53 6.57
3. 54 116 157 54 77 139
4. 234 553 596 232 556 595
5. 850 1158 1215 859 1163 1242

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.57 
2. 0.54 6.60
3. 54 124 154 54 120 154
4. 279 582 652 277 588 652
5. 922 1182 1256 934 1183 1251

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.38      0.93 
2. 1.39 0.93
3. 26 91 105 26 66 102
4. 84 275 299 89 234 303
5. 244 360 418 246 334 420

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.73      1.83 
2. 2.76 1.85
3. 26 70 128 26 66 128
4. 190 309 321 195 316 328
5. 223 296 326 223 298 329

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.75      1.85 
2. 2.78 1.87
3. 26 57 78 26 52 78
4. 74 185 201 75 184 200
5. 169 218 263 169 216 265

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.74      2.21 
2. 0.74 2.22

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.43      4.28 
2. 1.45 4.32

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.43      4.28 
2. 1.45 4.32

10ge2p1x520-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.89      10.94 
2. 0.89 11.00
3. 31 50 78 31 41 71
4. 75 351 370 69 346 365
5. 357 418 449 352 415 442

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 39 50 31 37 49
4. 48 80 86 48 79 83
5. 74 88 94 71 84 91

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 37 51 31 36 50
4. 47 78 84 46 77 81
5. 72 85 89 69 82 88

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.47      2.33 
2. 3.50 2.35
3. 22 59 74 22 45 70
4. 35 131 143 36 123 143
5. 102 136 147 106 135 155

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.56      4.41 
2. 6.60 4.43
3. 22 34 48 22 26 44
4. 42 94 110 46 95 111
5. 96 121 146 101 123 141

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.67      4.48 
2. 6.81 4.57
3. 22 55 94 22 32 78
4. 49 91 108 49 91 115
5. 114 136 146 111 135 144

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 2.09      6.25 
2. 2.10 6.28

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 4.10      12.27 
2. 4.14 12.39

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 4.11      12.30 
2. 4.17 12.48

10ge2p1x520-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.75      9.27 
2. 0.76 9.32
3. 31 55 87 31 61 83
4. 114 380 392 75 382 399
5. 453 609 651 470 621 669

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.51      18.62 
2. 1.52 18.71
3. 31 48 58 31 48 59
4. 76 120 130 77 122 137
5. 114 135 142 115 137 145

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.52      18.67 
2. 1.52 18.76
3. 31 38 50 31 37 50
4. 72 121 130 76 120 136
5. 119 145 152 113 136 144

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.27      2.20 
2. 3.31 2.22
3. 22 76 103 22 63 94
4. 44 127 149 45 121 147
5. 121 150 174 126 152 180

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.24      4.19 
2. 6.33 4.25
3. 22 62 80 22 63 83
4. 69 118 137 70 119 137
5. 110 139 153 113 139 154

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.32      4.25 
2. 6.45 4.33
3. 22 36 49 22 36 48
4. 59 108 126 58 109 126
5. 91 110 126 90 111 127

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.90      5.69 
2. 1.91 5.71

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.67      10.96 
2. 3.72 11.13

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.72      11.12 
2. 3.76 11.23

10ge2p1x520-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.16 
2. 0.34 4.18
3. 63 98 132 63 98 132
4. 208 391 441 208 389 446
5. 708 874 963 701 865 941

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.06 
2. 0.66 8.10
3. 63 145 154 63 136 154
4. 385 676 725 385 679 727
5. 867 1146 1333 850 1125 1317

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.30      15.95 
2. 1.31 16.11
3. 63 99 129 63 100 129
4. 194 362 425 193 361 427
5. 383 478 546 379 491 571

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.52      1.02 
2. 1.53 1.03
3. 26 85 107 26 81 106
4. 52 234 271 59 241 276
5. 224 313 336 223 305 327

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.90      1.95 
2. 3.02 2.03
3. 26 66 130 26 63 123
4. 101 207 239 86 208 245
5. 205 266 295 177 228 272

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.75      3.86 
2. 5.89 3.96
3. 26 52 101 26 54 99
4. 64 119 136 60 120 142
5. 143 175 204 123 154 179

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.83      2.47 
2. 0.83 2.49

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.64      4.89 
2. 1.65 4.94

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.24      9.69 
2. 3.27 9.79

10ge2p1x520-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.33 
2. 0.27 3.34
3. 54 65 91 54 66 88
4. 98 382 453 98 383 451
5. 583 823 884 586 819 879

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.45 
2. 0.53 6.51
3. 54 137 141 54 137 141
4. 260 563 657 241 564 653
5. 831 1109 1268 840 1146 1276

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.05      12.86 
2. 1.05 12.93
3. 54 90 132 54 88 118
4. 186 413 504 181 407 501
5. 323 427 495 321 428 505

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.23      0.83 
2. 1.24 0.83
3. 25 77 104 25 73 103
4. 55 344 412 57 330 407
5. 253 389 452 256 379 455

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.41      1.62 
2. 2.43 1.64
3. 25 67 94 25 51 82
4. 124 272 306 118 270 310
5. 254 312 352 239 301 329

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.66      3.13 
2. 4.75 3.20
3. 25 103 130 25 108 144
4. 67 142 161 77 153 175
5. 176 197 213 165 191 206

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.69      2.08 
2. 0.70 2.09

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.38      4.12 
2. 1.39 4.16

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.74      8.18 
2. 2.76 8.27

10ge2p1x520-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.84      10.29 
2. 0.84 10.34
3. 31 63 77 31 62 76
4. 141 334 361 129 335 356
5. 401 494 526 397 485 508

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 41 50 31 39 46
4. 65 97 104 70 95 102
5. 87 111 122 84 106 115

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 32 42 31 32 43
4. 31 43 49 31 44 49
5. 42 52 55 43 52 57

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.76      1.85 
2. 2.80 1.88
3. 22 92 111 22 83 105
4. 62 175 183 71 176 185
5. 130 171 214 135 167 191

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.13      3.45 
2. 5.20 3.49
3. 22 97 115 22 88 105
4. 57 100 117 49 103 118
5. 85 104 119 76 97 113

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.08      6.77 
2. 10.23 6.88
3. 22 59 74 21 35 64
4. 49 74 81 46 75 86
5. 84 101 112 78 97 113

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.82      5.43 
2. 1.82 5.46

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.41      10.21 
2. 3.47 10.37

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x520-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.72      8.88 
2. 0.73 8.93
3. 31 56 75 31 41 66
4. 127 337 364 95 334 354
5. 429 606 655 438 600 658

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 Minimal rate loss fraction 5.555555555555555e-07 does not reach target 0.0. 
3 packets lost.

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 33 40 31 33 39
4. 31 47 53 31 49 56
5. 45 56 59 47 58 64

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.65      1.78 
2. 2.65 1.78
3. 22 55 74 22 43 69
4. 47 92 132 52 70 86
5. 147 193 216 157 195 226

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.92      3.30 
2. 5.07 3.40
3. 22 39 57 22 33 54
4. 60 106 124 51 113 128
5. 123 155 175 112 145 163

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 9.66      6.49 
2. 9.75 6.55
3. 22 23 35 19 23 34
4. 33 51 62 34 53 65
5. 87 105 125 81 97 113

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.65      4.93 
2. 1.66 4.96

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.21      9.61 
2. 3.25 9.71

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x520-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.22 
2. 0.35 4.25
3. 63 106 128 63 107 125
4. 221 513 540 221 524 544
5. 798 970 1048 804 967 1051

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.17 
2. 0.67 8.22
3. 63 150 157 63 143 158
4. 387 672 735 388 640 744
5. 861 1138 1321 854 1128 1311

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.33      16.30 
2. 1.33 16.38
3. 63 99 138 63 99 130
4. 187 317 369 187 317 355
5. 369 448 512 358 437 502

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.66      1.12 
2. 1.69 1.13
3. 26 86 119 26 74 115
4. 76 255 294 78 249 294
5. 244 310 365 256 310 375

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.21      2.16 
2. 3.29 2.21
3. 26 95 195 26 90 193
4. 127 223 249 127 223 251
5. 217 280 308 210 271 301

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 6.29      4.22 
2. 6.44 4.33
3. 26 62 76 26 66 93
4. 76 133 148 83 141 158
5. 134 162 186 136 164 188

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.86      2.57 
2. 0.86 2.58

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.71      5.12 
2. 1.72 5.15

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.38      10.11 
2. 3.43 10.26

10ge2p1x520-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.36 
2. 0.27 3.38
3. 54 77 103 54 77 104
4. 136 444 486 136 443 476
5. 582 878 928 574 873 920

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.53 
2. 0.54 6.60
3. 54 82 163 54 75 162
4. 305 706 736 304 669 732
5. 920 1238 1386 917 1235 1395

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.06      13.05 
2. 1.07 13.18
3. 54 84 131 54 84 129
4. 164 386 462 160 380 455
5. 350 473 535 347 471 534

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.33      0.89 
2. 1.34 0.90
3. 25 65 80 25 56 75
4. 47 288 314 49 279 309
5. 266 347 394 253 346 392

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.60      1.75 
2. 2.62 1.76
3. 25 88 181 25 85 140
4. 134 219 297 100 217 233
5. 234 299 336 227 291 330

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 5.09      3.42 
2. 5.19 3.49
3. 25 83 155 25 74 154
4. 81 142 166 81 150 178
5. 162 193 209 157 192 212

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.72      2.14 
2. 0.72 2.15

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.44      4.29 
2. 1.44 4.32

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.84      8.48 
2. 2.88 8.61

10ge2p1x520-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.86      10.63 
2. 0.87 10.69
3. 31 46 83 31 39 71
4. 109 365 386 75 358 374
5. 398 462 523 384 448 520

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 30 39 52 30 38 54
4. 52 88 96 63 86 94
5. 80 98 107 79 98 105

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 30 31 40 30 31 37
4. 31 45 50 31 43 49
5. 41 51 55 42 51 55

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.22      2.16 
2. 3.29 2.21
3. 22 95 115 22 74 107
4. 46 145 159 49 134 154
5. 131 168 202 135 166 213

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.99      4.02 
2. 6.20 4.17
3. 22 72 89 22 71 88
4. 61 119 132 55 116 130
5. 126 155 172 116 150 174

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.56      7.77 
2. 11.85 7.96
3. 22 53 63 22 32 67
4. 39 60 67 39 60 73
5. 66 81 95 75 98 127

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.98      5.91 
2. 2.00 5.97

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.83      11.46 
2. 3.87 11.57

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x520-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.74      9.14 
2. 0.75 9.18
3. 31 60 88 31 41 79
4. 109 385 406 61 376 394
5. 481 639 676 477 629 668

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.47      18.05 
2. 1.48 18.23
3. 31 47 58 31 47 59
4. 59 126 135 57 124 136
5. 133 166 187 124 158 175

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 32 39 31 32 37
4. 31 50 56 31 50 58
5. 45 54 59 46 55 61

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.08      2.07 
2. 3.13 2.10
3. 22 77 115 22 36 84
4. 24 145 187 25 149 190
5. 128 172 191 136 174 199

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.65      3.80 
2. 5.91 3.97
3. 22 90 122 22 98 121
4. 68 122 142 68 121 140
5. 132 163 195 120 151 176

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 11.06      7.43 
2. 11.46 7.70
3. 22 35 45 19 37 56
4. 44 64 72 44 65 75
5. 74 91 107 84 113 157

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.81      5.40 
2. 1.82 5.43

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.53      10.55 
2. 3.56 10.65

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.25 
2. 0.35 4.27
3. 62 107 131 63 82 120
4. 202 494 530 202 489 526
5. 762 945 1012 769 936 1004

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.22 
2. 0.67 8.26
3. 63 109 153 63 84 132
4. 305 610 691 307 607 688
5. 829 1092 1232 819 1091 1244

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.33      16.31 
2. 1.33 16.39
3. 63 110 133 63 118 147
4. 207 335 372 223 348 383
5. 350 442 509 368 459 529

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.73      1.16 
2. 1.74 1.17
3. 25 90 102 25 87 99
4. 60 246 270 68 249 275
5. 204 302 355 217 303 343

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.31      2.22 
2. 3.34 2.25
3. 26 83 113 26 81 110
4. 107 224 252 96 223 250
5. 196 258 283 195 256 277

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 6.57      4.42 
2. 6.71 4.51
3. 26 48 67 26 41 67
4. 60 112 130 68 126 147
5. 107 131 147 130 161 189

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.87      2.61 
2. 0.88 2.64

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.73      5.18 
2. 1.74 5.21

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.44      10.28 
2. 3.47 10.39

10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.28      3.40 
2. 0.28 3.41
3. 54 78 106 54 65 89
4. 137 439 487 136 442 467
5. 568 870 922 552 861 920

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.54      6.60 
2. 0.54 6.63
3. 54 136 157 54 134 150
4. 313 660 740 322 660 739
5. 911 1233 1368 901 1226 1351

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.07      13.11 
2. 1.08 13.24
3. 54 103 184 54 102 152
4. 211 416 516 219 457 531
5. 334 444 531 375 476 562

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.36      0.91 
2. 1.37 0.92
3. 25 79 97 25 73 96
4. 87 280 309 92 218 304
5. 235 349 426 239 344 417

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.65      1.78 
2. 2.68 1.80
3. 25 80 138 25 78 136
4. 168 289 321 106 225 234
5. 241 322 361 237 314 359

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 5.24      3.52 
2. 5.37 3.61
3. 25 102 138 25 115 151
4. 75 144 162 75 135 164
5. 145 175 189 162 191 210

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.73      2.19 
2. 0.73 2.20

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.45      4.34 
2. 1.46 4.36

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.88      8.60 
2. 2.91 8.69

10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.88      10.84 
2. 0.89 10.90
3. 30 47 81 30 42 66
4. 139 353 374 117 342 362
5. 365 424 453 352 407 448

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 30 37 50 30 35 48
4. 48 80 92 46 78 83
5. 74 89 96 70 85 90

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 30 31 37 30 31 35
4. 31 42 47 30 39 42
5. 39 48 51 39 48 51

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.42      2.30 
2. 3.44 2.31
3. 21 75 110 21 47 92
4. 49 119 133 34 120 135
5. 101 138 166 101 134 172

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.39      4.30 
2. 6.46 4.34
3. 21 37 47 21 35 46
4. 60 109 125 53 111 126
5. 105 135 157 103 127 148

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.52      7.74 
2. 12.48 8.39
3. 22 29 43 22 28 40
4. 36 54 63 39 60 73
5. 53 65 74 75 98 133

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.05      6.15 
2. 2.09 6.24

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.03      12.04 
2. 4.11 12.28

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.75      9.29 
2. 0.76 9.38
3. 31 56 88 31 39 75
4. 140 378 396 129 366 386
5. 457 612 660 447 600 643

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.50      18.41 
2. 1.51 18.59
3. 31 51 59 31 51 59
4. 68 118 129 68 116 128
5. 109 135 141 102 127 132

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 32 40 31 32 38
4. 31 43 48 31 42 47
5. 41 50 53 41 49 53

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.25      2.19 
2. 3.29 2.21
3. 22 78 112 22 73 97
4. 49 124 156 49 117 149
5. 107 149 163 111 144 164

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.13      4.12 
2. 6.19 4.16
3. 22 65 86 22 63 83
4. 73 116 131 60 109 129
5. 124 153 176 115 146 167

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 11.40      7.66 
2. 12.20 8.20
3. 22 37 53 22 40 56
4. 47 66 71 51 71 81
5. 62 78 91 105 204 526

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.89      5.64 
2. 1.90 5.67

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.68      11.01 
2. 3.74 11.18

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x520-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.33      4.08 
2. 0.34 4.16
3. 63 115 119 63 115 117
4. 179 415 454 179 414 450
5. 714 911 990 717 906 987

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      8.00 
2. 0.65 8.04
3. 63 112 161 63 80 156
4. 382 683 725 389 679 728
5. 865 1134 1325 847 1124 1331

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.28      15.75 
2. 1.29 15.83
3. 63 100 131 63 100 131
4. 199 366 430 195 366 441
5. 370 469 541 360 461 532

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.47      0.99 
2. 1.48 1.00
3. 26 80 104 26 62 97
4. 67 263 293 73 267 293
5. 231 311 4231 228 286 1631

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.55      1.72 
2. 2.77 1.86
3. 26 58 87 26 45 85
4. 46 144 158 50 141 160
5. 147 201 234 137 193 232

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.09      3.42 
2. 5.22 3.51
3. 26 46 116 26 49 112
4. 58 105 126 54 110 130
5. 130 162 184 122 159 188

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.81      2.41 
2. 0.81 2.42

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.61      4.83 
2. 1.62 4.85

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.11      9.31 
2. 3.15 9.41

10ge2p1x520-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.31 
2. 0.27 3.33
3. 54 80 87 54 65 82
4. 157 402 435 158 401 428
5. 515 846 908 501 844 906

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.44 
2. 0.53 6.47
3. 54 101 145 54 63 124
4. 240 563 642 244 563 647
5. 955 1235 1342 949 1230 1336

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.03      12.68 
2. 1.04 12.74
3. 54 76 109 54 75 107
4. 209 435 526 210 439 522
5. 348 469 540 358 482 556

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.20      0.80 
2. 1.21 0.81
3. 26 76 101 26 41 88
4. 52 315 375 53 311 370
5. 241 363 444 251 363 424

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.30      1.54 
2. 2.31 1.55
3. 26 58 93 26 52 95
4. 123 271 299 116 268 294
5. 310 362 427 250 356 386

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.31      2.90 
2. 4.35 2.92
3. 26 62 151 26 54 117
4. 81 130 151 59 141 165
5. 115 161 212 117 158 219

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.68      2.03 
2. 0.68 2.04

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.35      4.03 
2. 1.36 4.07

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.60      7.78 
2. 2.64 7.90

10ge2p1x520-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.81      9.97 
2. 0.82 10.07
3. 31 41 74 31 42 66
4. 76 319 339 63 313 332
5. 378 462 579 370 452 542

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 42 51 31 40 51
4. 71 103 114 72 101 110
5. 95 122 130 88 113 124

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 31 41 31 31 41
4. 31 47 54 31 47 53
5. 43 52 56 44 53 57

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.55      1.71 
2. 2.58 1.73
3. 22 64 95 22 56 86
4. 34 105 143 35 99 121
5. 114 179 198 115 175 197

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.65      3.13 
2. 4.74 3.19
3. 22 75 131 22 83 113
4. 49 136 157 49 131 156
5. 149 172 187 137 167 192

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 8.12      5.46 
2. 8.76 5.88
3. 22 48 69 20 41 60
4. 47 71 79 45 71 79
5. 62 85 103 64 85 109

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.68      5.03 
2. 1.69 5.07

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.16      9.44 
2. 3.22 9.63

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x520-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.71      8.75 
2. 0.72 8.80
3. 31 58 75 31 41 69
4. 104 391 413 64 387 405
5. 451 663 697 438 654 685

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.40      17.19 
2. 1.40 17.28
3. 31 45 55 31 44 56
4. 68 167 180 64 161 175
5. 152 220 242 144 209 230

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 31 32 40 31 32 38
4. 32 48 54 32 50 58
5. 46 56 61 47 57 64

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.29      1.54 
2. 2.38 1.60
3. 22 65 90 22 52 88
4. 51 157 188 47 146 181
5. 119 159 184 119 156 177

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.46      3.00 
2. 4.48 3.01
3. 22 37 78 19 36 45
4. 54 114 136 52 113 136
5. 81 118 136 63 74 88

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 8.15      5.47 
2. 8.35 5.61
3. 23 69 80 21 31 75
4. 73 90 95 64 84 97
5. 79 102 114 80 99 118

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.57      4.69 
2. 1.58 4.74

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.00      8.97 
2. 3.04 9.10

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.14 
2. 0.34 4.16
3. 71 109 132 71 90 120
4. 224 489 549 222 497 547
5. 776 953 1023 785 949 1029

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      8.00 
2. 0.65 8.04
3. 71 136 188 71 122 183
4. 327 645 697 340 650 719
5. 827 1128 1295 829 1121 1291

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.29      15.83 
2. 1.30 15.99
3. 72 112 139 72 110 135
4. 180 336 394 178 337 393
5. 328 423 493 324 419 485

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.48      1.00 
2. 1.50 1.01
3. 30 91 121 30 73 118
4. 86 274 297 78 287 304
5. 227 323 337 225 317 333

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.84      1.91 
2. 2.88 1.94
3. 30 112 201 30 96 166
4. 142 261 289 147 264 295
5. 230 294 400 216 283 369

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.42      3.64 
2. 5.56 3.74
3. 30 78 95 30 81 106
4. 76 136 150 83 143 157
5. 135 169 189 134 168 190

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 Minimal rate loss fraction 7.592589780522303e-06 does not reach target 0.0. 
41 packets lost.

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.57      4.69 
2. 1.62 4.83

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.12      9.34 
2. 3.19 9.53

10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.31 
2. 0.27 3.33
3. 63 98 110 63 71 86
4. 167 453 488 166 449 483
5. 512 834 905 497 830 900

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.43 
2. 0.53 6.46
3. 63 78 148 63 77 116
4. 245 612 696 244 612 687
5. 1008 1306 1451 987 1275 1438

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.04      12.74 
2. 1.05 12.87
3. 63 88 117 63 85 114
4. 179 404 496 182 402 492
5. 309 424 500 307 420 486

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.15      0.78 
2. 1.21 0.82
3. 29 91 115 29 74 115
4. 74 392 445 79 421 446
5. 265 410 492 264 406 488

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.35      1.58 
2. 2.37 1.59
3. 29 104 170 29 91 155
4. 156 313 359 147 307 346
5. 297 359 452 286 350 440

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.51      3.03 
2. 4.56 3.06
3. 30 85 170 30 83 152
4. 90 170 191 89 171 192
5. 185 206 224 120 161 214

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.68      2.03 
2. 0.69 2.05

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.35      4.04 
2. 1.36 4.08

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.66      7.97 
2. 2.69 8.05

10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.82      10.07 
2. 0.83 10.17
3. 32 57 84 32 52 78
4. 96 372 389 73 364 381
5. 424 544 602 423 552 606

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 47 79 32 46 78
4. 71 99 114 69 95 104
5. 91 116 126 85 110 120

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 46 77 32 45 79
4. 46 58 87 42 56 76
5. 51 60 67 51 60 67

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.59      1.74 
2. 2.64 1.78
3. 26 83 102 26 48 73
4. 78 126 154 44 116 138
5. 124 185 200 146 193 233

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.82      3.24 
2. 4.92 3.31
3. 26 84 121 26 73 106
4. 87 136 159 83 128 154
5. 140 169 192 132 163 183

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 9.22      6.19 
2. 9.45 6.35
3. 26 53 71 26 61 81
4. 61 82 89 64 84 93
5. 77 94 105 79 96 109

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.73      5.17 
2. 1.74 5.20

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.29      9.84 
2. 3.32 9.94

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.70      17.04 
2. 5.81 17.39

10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.71      8.71 
2. 0.71 8.80
3. 32 63 87 33 53 80
4. 124 384 409 86 379 399
5. 448 658 693 441 646 675

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.37      16.87 
2. 1.41 17.38
3. 32 53 68 32 54 70
4. 66 163 180 65 157 174
5. 145 212 235 139 202 227

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 33 50 69 33 50 69
4. 48 59 77 46 59 89
5. 53 63 69 54 63 70

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.47      1.66 
2. 2.52 1.69
3. 26 79 113 26 72 109
4. 45 148 160 48 147 162
5. 138 192 234 144 192 237

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.19      0.13 
2. 4.80 3.22
3. 26 110 128 26 114 141
4. 80 147 166 77 144 164
5. 168 188 205 162 181 196

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 8.90      5.98 
2. 9.08 6.10
3. 27 56 93 27 54 71
4. 52 83 95 53 84 98
5. 95 108 118 75 105 123

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.58      4.74 
2. 1.60 4.78

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.06      9.16 
2. 3.09 9.25

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.22      2.72 
2. 0.22 2.73
3. 78 112 137 78 94 115
4. 232 500 637 231 497 633
5. 1291 1886 2563 1290 2061 2673

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.43      5.26 
2. 0.43 5.34
3. 77 156 226 77 148 212
4. 425 892 1137 406 869 1106
5. 1166 1709 2163 1108 1607 1992

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.84      10.36 
2. 0.86 10.57
3. 77 130 192 77 121 184
4. 264 604 816 261 599 810
5. 689 981 1196 669 961 1175

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.45      0.30 
2. 0.46 0.31
3. 44 74 133 44 61 110
4. 226 539 768 221 553 755
5. 1815 2539 3075 1766 2629 3173

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.78      0.53 
2. 0.80 0.54
3. 43 115 244 43 106 234
4. 431 1032 1385 390 992 1342
5. 963 1512 1898 952 1493 1907

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.54      1.04 
2. 1.57 1.06
3. 43 117 259 43 89 232
4. 174 462 664 153 454 663
5. 450 706 887 447 699 891

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      1.06 
2. 0.36 1.06

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      1.95 
2. 0.66 1.97

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.28      3.81 
2. 1.30 3.89

10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.19      2.34 
2. 0.19 2.35
3. 68 74 115 68 73 92
4. 189 451 581 182 441 568
5. 1079 1602 2067 1072 1676 2315

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.37      4.58 
2. 0.37 4.60
3. 68 114 186 67 75 127
4. 389 819 1055 374 822 1058
5. 1100 1613 1982 1101 1598 1957

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.72      8.91 
2. 0.74 9.09
3. 68 105 161 68 87 138
4. 254 599 808 246 590 797
5. 809 1168 1414 764 1108 1349

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.42      0.28 
2. 0.42 0.28
3. 44 68 129 44 55 99
4. 188 522 743 186 543 740
5. 1859 2595 3075 1805 2625 3077

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.74      0.50 
2. 0.74 0.50
3. 43 115 243 42 54 198
4. 418 1015 1395 350 896 1208
5. 906 1447 1843 848 1375 1744

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.46      0.98 
2. 1.48 1.00
3. 43 115 253 43 89 236
4. 185 516 779 177 503 756
5. 440 692 880 388 652 848

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.32      0.97 
2. 0.33 0.99

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.61      1.83 
2. 0.62 1.85

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.19      3.56 
2. 1.22 3.63

10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.36      4.45 
2. 0.36 4.47
3. 46 60 112 46 53 81
4. 144 437 651 136 449 612
5. 1465 2087 2711 1552 2261 2867

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.64      7.87 
2. 0.65 7.94
3. 39 70 116 37 52 115
4. 167 624 851 168 634 886
5. 879 1419 1761 934 1468 1785

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.28      15.75 
2. 1.31 16.06
3. 42 65 116 39 60 118
4. 72 309 461 72 316 470
5. 318 479 588 334 488 592

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.52      0.35 
2. 0.52 0.35
3. 32 66 139 32 53 107
4. 211 509 757 197 514 760
5. 1755 2531 3061 1586 2451 3013

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.91      0.61 
2. 0.91 0.61
3. 30 120 263 31 115 265
4. 314 862 1183 308 881 1220
5. 756 1214 1559 701 1180 1557

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.76      1.18 
2. 1.80 1.21
3. 31 96 239 31 80 219
4. 163 434 612 143 428 610
5. 391 637 803 391 632 802

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.47      1.39 
2. 0.47 1.41

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.82      2.46 
2. 0.83 2.49

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.62      4.85 
2. 1.66 4.95

10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.34      4.16 
2. 0.34 4.20
3. 47 64 104 47 52 77
4. 140 445 657 139 449 638
5. 1458 2205 3005 1361 2115 2985

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.58      7.17 
2. 0.62 7.67
3. 42 72 120 41 76 117
4. 204 661 902 194 642 891
5. 989 1528 1852 968 1501 1844

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.20      14.81 
2. 1.22 15.03
3. 43 64 115 42 60 119
4. 85 333 518 89 352 544
5. 324 507 638 360 548 669

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.51      0.34 
2. 0.52 0.35
3. 34 65 142 34 63 140
4. 232 543 782 227 559 781
5. 1794 2547 3045 1686 2505 3053

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.91      0.61 
2. 0.92 0.62
3. 31 115 245 31 104 248
4. 339 887 1252 296 842 1165
5. 799 1266 1651 746 1220 1615

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.66      1.12 
2. 1.70 1.14
3. 31 98 258 31 85 243
4. 187 476 667 166 449 647
5. 397 649 827 360 611 784

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.46      1.36 
2. 0.46 1.38

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.81      2.41 
2. 0.81 2.44

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.56      4.66 
2. 1.58 4.71

10ge2p1x710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.29 
2. 0.35 4.34
3. 71 112 131 71 110 131
4. 217 502 542 215 506 538
5. 787 961 1034 796 957 1038

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.22 
2. 0.67 8.26
3. 71 153 179 71 131 178
4. 320 643 708 323 630 710
5. 858 1133 1245 856 1137 1243

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.21 
2. 0.67 8.26
3. 71 137 184 71 115 179
4. 325 641 708 328 640 711
5. 850 1135 1244 862 1112 1251

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.82      1.22 
2. 1.85 1.24
3. 30 97 128 30 78 124
4. 67 270 286 77 240 287
5. 241 303 366 242 309 371

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.62      2.43 
2. 3.65 2.46
3. 30 99 154 30 95 150
4. 123 220 249 125 218 248
5. 199 262 295 197 259 290

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.64      2.45 
2. 3.68 2.47
3. 30 100 171 30 88 153
4. 122 219 252 128 219 251
5. 181 235 272 176 222 259

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.91      2.71 
2. 0.91 2.72

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.74      5.22 
2. 1.76 5.27

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.74      5.21 
2. 1.77 5.29

10ge2p1x710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.28      3.41 
2. 0.28 3.44
3. 63 95 110 63 74 91
4. 164 455 493 123 452 497
5. 565 864 916 550 853 914

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.54      6.59 
2. 0.54 6.63
3. 63 141 173 62 116 165
4. 268 612 703 270 614 673
5. 893 1206 1368 886 1188 1340

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.54      6.61 
2. 0.54 6.64
3. 62 144 160 62 139 155
4. 280 615 706 276 614 705
5. 885 1201 1403 850 1139 1310

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.43      0.96 
2. 1.44 0.97
3. 29 90 119 29 72 108
4. 92 306 318 105 320 335
5. 223 317 403 231 314 423

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.81      1.89 
2. 2.89 1.94
3. 29 109 185 29 105 162
4. 152 272 297 163 283 305
5. 240 303 392 236 301 350

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.84      1.91 
2. 2.88 1.94
3. 29 79 133 29 56 115
4. 95 215 242 86 205 230
5. 172 229 254 171 229 257

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.75      2.23 
2. 0.75 2.26

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.45      4.35 
2. 1.47 4.40

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.47      4.38 
2. 1.47 4.41

10ge2p1x710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.91      11.15 
2. 0.91 11.21
3. 32 67 82 32 66 81
4. 91 343 364 89 341 360
5. 339 397 420 336 392 414

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 45 56 32 44 61
4. 52 70 76 51 70 75
5. 63 78 84 62 77 82

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 43 61 32 43 63
4. 49 68 81 49 70 82
5. 61 77 81 63 78 85

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.80      2.55 
2. 3.84 2.58
3. 26 85 113 26 48 100
4. 46 110 123 36 113 135
5. 116 142 182 117 149 188

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 7.14      4.80 
2. 7.40 4.97
3. 26 71 79 26 67 82
4. 52 92 115 51 92 115
5. 101 122 137 102 122 139

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 7.22      4.85 
2. 7.37 4.95
3. 26 68 79 25 70 89
4. 58 103 125 70 107 126
5. 98 121 135 95 117 129

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.18      6.51 
2. 2.20 6.58

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.18      12.51 
2. 4.24 12.69

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.32      12.93 
2. 4.37 13.06

10ge2p1x710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.77      9.50 
2. 0.78 9.55
3. 32 56 84 32 54 85
4. 77 374 394 57 372 389
5. 452 597 655 450 591 644

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.54      18.94 
2. 1.55 19.03
3. 32 46 57 32 47 57
4. 72 107 115 73 108 115
5. 101 125 134 100 120 126

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.55      19.03 
2. 1.55 19.13
3. 32 48 57 32 47 58
4. 72 107 115 72 108 120
5. 101 125 135 102 123 131

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.58      2.40 
2. 3.61 2.43
3. 26 100 120 26 92 112
4. 56 123 141 57 119 139
5. 135 165 199 139 176 210

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.83      4.59 
2. 7.00 4.70
3. 26 98 118 26 90 120
4. 64 108 124 57 107 123
5. 91 112 128 93 115 130

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.84      4.60 
2. 6.98 4.69
3. 26 102 118 26 99 119
4. 57 103 118 54 105 118
5. 88 110 125 86 108 122

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.97      5.90 
2. 1.98 5.93

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.87      11.57 
2. 3.89 11.63

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.79      11.35 
2. 3.83 11.46

10ge2p1x710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.26 
2. 0.35 4.28
3. 72 111 131 72 109 130
4. 225 503 562 225 512 563
5. 798 960 1051 797 969 1052

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.14 
2. 0.67 8.19
3. 72 156 184 72 138 185
4. 319 643 695 323 635 711
5. 826 1114 1250 830 1105 1253

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.16 
2. 0.67 8.20
3. 72 153 183 71 135 184
4. 332 638 700 324 637 706
5. 842 1114 1262 838 1110 1255

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.73      1.16 
2. 1.74 1.17
3. 30 114 128 30 103 127
4. 76 265 278 84 261 278
5. 253 346 411 254 348 412

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.42      2.30 
2. 3.44 2.31
3. 30 99 193 30 83 119
4. 115 210 246 107 211 250
5. 208 266 314 199 254 289

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.34      2.25 
2. 3.38 2.27
3. 30 112 168 30 104 163
4. 119 217 251 111 213 250
5. 202 257 284 185 241 274

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.88      2.64 
2. 0.89 2.66

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.69      5.06 
2. 1.73 5.16

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.71      5.10 
2. 1.72 5.15

10ge2p1x710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.28      3.39 
2. 0.28 3.40
3. 63 97 105 63 72 87
4. 163 449 491 163 448 493
5. 565 865 914 560 862 914

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.54 
2. 0.53 6.57
3. 63 115 158 63 89 148
4. 249 597 650 254 600 670
5. 956 1249 1461 964 1256 1464

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.55 
2. 0.53 6.58
3. 63 116 168 63 87 156
4. 329 604 681 326 599 676
5. 958 1251 1457 969 1262 1462

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.37      0.92 
2. 1.39 0.93
3. 30 95 121 30 76 116
4. 103 342 362 106 342 363
5. 249 348 441 250 345 448

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.72      1.83 
2. 2.75 1.85
3. 30 151 191 29 133 190
4. 184 303 329 180 279 327
5. 226 301 330 226 304 332

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.74      1.84 
2. 2.75 1.85
3. 30 101 200 30 91 171
4. 187 297 329 171 223 305
5. 236 307 339 237 311 341

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.73      2.19 
2. 0.74 2.20

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.42      4.25 
2. 1.44 4.30

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.43      4.27 
2. 1.44 4.31

10ge2p1x710-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.88      10.88 
2. 0.89 10.94
3. 32 54 85 32 51 77
4. 79 348 369 75 349 371
5. 362 418 452 348 421 464

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 46 57 32 45 61
4. 55 76 88 56 75 81
5. 69 81 90 69 82 88

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 44 57 32 44 58
4. 54 75 87 53 74 82
5. 69 80 87 67 80 88

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.46      2.32 
2. 3.49 2.35
3. 26 93 116 26 77 111
4. 55 128 151 56 123 146
5. 116 150 194 127 168 206

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.52      4.38 
2. 6.65 4.47
3. 26 58 75 26 53 72
4. 60 110 127 64 109 127
5. 103 133 159 107 135 159

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.56      4.41 
2. 6.73 4.52
3. 26 51 68 26 46 56
4. 59 104 123 58 104 124
5. 104 124 144 102 124 141

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 2.05      6.12 
2. 2.07 6.19

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 4.01      12.00 
2. 4.07 12.18

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.95      11.80 
2. 4.00 11.98

10ge2p1x710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.76      9.35 
2. 0.76 9.39
3. 33 77 96 33 69 87
4. 147 382 402 143 379 392
5. 463 615 659 462 611 660

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.50      18.49 
2. 1.51 18.58
3. 33 55 63 33 54 63
4. 65 120 130 68 120 129
5. 107 134 145 106 132 140

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.51      18.56 
2. 1.51 18.56
3. 32 52 65 32 51 64
4. 74 122 133 75 125 138
5. 103 129 137 103 128 136

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.29      2.21 
2. 3.33 2.24
3. 26 98 112 26 97 111
4. 44 125 145 47 135 149
5. 132 168 212 135 172 216

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.17      4.14 
2. 6.32 4.25
3. 26 66 81 26 77 98
4. 66 111 127 67 113 128
5. 110 138 152 112 137 152

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.26      4.21 
2. 6.39 4.29
3. 26 65 78 26 67 80
4. 69 124 142 76 121 138
5. 110 136 152 111 137 151

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.88      5.62 
2. 1.89 5.65

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.63      10.86 
2. 3.69 11.03

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.44      10.27 
2. 3.49 10.43

10ge2p1x710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.16 
2. 0.34 4.18
3. 71 112 130 71 93 119
4. 223 496 551 222 500 549
5. 776 953 1028 783 948 1023

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      8.01 
2. 0.65 8.05
3. 72 135 202 72 123 183
4. 328 645 707 334 625 720
5. 819 1123 1287 821 1119 1276

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.30      15.94 
2. 1.31 16.10
3. 72 113 146 72 113 139
4. 179 326 375 178 326 379
5. 329 423 493 322 415 481

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.51      1.01 
2. 1.53 1.03
3. 30 105 121 30 104 119
4. 73 256 274 71 269 285
5. 229 329 341 231 302 343

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.95      1.98 
2. 2.98 2.00
3. 30 108 170 30 90 146
4. 127 247 275 125 245 272
5. 213 278 316 198 270 303

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.75      3.87 
2. 5.87 3.94
3. 30 75 143 30 57 106
4. 89 137 153 89 137 158
5. 155 185 214 145 176 203

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.82      2.45 
2. 0.82 2.46

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.63      4.89 
2. 1.64 4.91

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.20      9.56 
2. 3.24 9.70

10ge2p1x710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.32 
2. 0.27 3.33
3. 63 95 113 63 71 87
4. 160 447 483 161 442 473
5. 570 874 923 565 867 916

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.45 
2. 0.53 6.49
3. 63 144 174 63 121 168
4. 251 609 665 263 611 658
5. 982 1278 1447 985 1270 1444

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.04      12.84 
2. 1.05 12.97
3. 63 89 115 63 84 110
4. 172 400 494 175 399 492
5. 309 422 493 306 417 487

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.23      0.82 
2. 1.24 0.83
3. 29 93 118 29 72 115
4. 61 366 425 65 351 420
5. 252 390 482 259 391 477

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.39      1.61 
2. 2.43 1.63
3. 29 95 164 29 72 115
4. 157 299 339 141 294 331
5. 276 351 406 258 333 383

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.75      3.19 
2. 4.80 3.22
3. 30 113 138 30 123 153
4. 89 155 171 86 157 172
5. 178 202 219 176 200 218

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.69      2.05 
2. 0.69 2.07

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.36      4.08 
2. 1.38 4.14

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.71      8.10 
2. 2.75 8.23

10ge2p1x710-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.83      10.18 
2. 0.83 10.23
3. 32 57 85 32 51 76
4. 144 369 391 116 359 375
5. 396 526 596 383 520 579

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 54 65 32 53 63
4. 61 95 102 68 92 99
5. 86 112 117 81 102 109

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 47 78 32 45 78
4. 46 57 72 44 57 74
5. 51 60 69 50 61 72

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.72      1.83 
2. 2.75 1.85
3. 26 100 111 26 98 109
4. 74 184 190 86 159 186
5. 141 181 211 142 177 226

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.99      3.35 
2. 5.09 3.42
3. 26 61 81 26 55 78
4. 75 133 160 68 124 145
5. 129 169 194 114 153 179

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 9.77      6.57 
2. 10.12 6.80
3. 26 54 83 26 49 82
4. 54 76 86 52 75 88
5. 80 98 114 81 102 125

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.77      5.30 
2. 1.78 5.32

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.42      10.24 
2. 3.46 10.34

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x710-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.71      8.80 
2. 0.72 8.88
3. 32 80 89 32 78 86
4. 133 381 404 91 376 395
5. 449 652 687 438 646 682

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.41      17.34 
2. 1.42 17.52
3. 32 51 62 32 51 62
4. 65 161 175 65 157 171
5. 139 205 227 135 197 219

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 33 49 76 33 49 76
4. 48 58 77 45 58 77
5. 53 62 69 53 62 69

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.60      1.75 
2. 2.62 1.76
3. 26 89 114 26 51 93
4. 64 138 173 34 128 148
5. 132 193 207 148 196 242

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.90      3.29 
2. 4.95 3.33
3. 26 77 108 26 75 106
4. 88 141 165 84 137 162
5. 146 177 193 137 171 186

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 9.62      6.46 
2. 9.94 6.68
3. 26 29 47 30 37 50
4. 55 82 92 57 82 94
5. 94 113 131 90 109 129

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.64      4.90 
2. 1.65 4.92

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.17      9.47 
2. 3.20 9.56

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.20 
2. 0.35 4.25
3. 71 109 131 71 107 129
4. 218 510 554 221 504 555
5. 797 969 1047 807 966 1072

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.15 
2. 0.67 8.19
3. 71 159 186 71 155 183
4. 331 647 710 328 644 707
5. 846 1128 1272 843 1120 1266

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.20      14.78 
2. 1.22 15.01
3. 71 111 141 72 104 136
4. 165 352 429 159 338 396
5. 319 439 515 254 351 416

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.65      1.11 
2. 1.68 1.13
3. 30 97 110 30 95 109
4. 58 257 276 63 257 273
5. 258 326 398 266 335 397

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.17      2.13 
2. 3.27 2.20
3. 30 118 179 30 95 154
4. 135 220 266 107 215 242
5. 210 270 306 207 267 295

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.23      3.51 
2. 5.30 3.56
3. 30 95 123 30 102 121
4. 67 114 136 52 114 128
5. 115 155 172 112 141 161

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.85      2.55 
2. 0.86 2.58

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.70      5.09 
2. 1.71 5.11

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.93      8.76 
2. 2.97 8.90

10ge2p1x710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.36 
2. 0.27 3.38
3. 63 95 112 63 72 90
4. 167 452 501 167 449 502
5. 577 874 922 572 869 915

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.55 
2. 0.53 6.58
3. 63 146 178 63 140 164
4. 290 617 716 268 618 714
5. 941 1245 1404 941 1238 1394

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.95      11.65 
2. 0.96 11.85
3. 63 83 119 63 79 115
4. 152 379 482 151 374 448
5. 302 447 526 267 383 455

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.33      0.89 
2. 1.33 0.89
3. 29 105 117 29 104 117
4. 115 302 360 114 287 360
5. 263 368 466 264 362 465

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.56      1.72 
2. 2.61 1.76
3. 29 113 193 29 104 163
4. 136 247 292 117 236 269
5. 255 337 378 249 342 379

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.25      2.86 
2. 4.33 2.91
3. 30 75 140 30 66 131
4. 85 150 172 72 149 169
5. 99 138 189 93 124 167

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.71      2.13 
2. 0.72 2.14

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.42      4.25 
2. 1.43 4.29

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.44      7.28 
2. 2.48 7.41

10ge2p1x710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.85      10.52 
2. 0.86 10.62
3. 32 78 94 32 72 87
4. 83 362 386 70 357 377
5. 397 470 533 388 465 539

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 45 61 32 45 65
4. 53 89 100 55 82 92
5. 80 105 113 75 96 104

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 45 75 32 44 74
4. 46 56 73 44 56 88
5. 50 60 67 50 60 67

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.21      2.16 
2. 3.29 2.21
3. 26 81 106 26 56 97
4. 50 143 157 54 138 157
5. 141 173 214 142 179 221

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.94      3.99 
2. 6.12 4.12
3. 26 84 103 26 85 102
4. 70 112 133 64 104 118
5. 123 153 180 115 147 167

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 9.52      6.40 
2. 9.77 6.57
3. 26 27 41 26 31 43
4. 47 68 77 48 69 78
5. 58 79 91 56 72 85

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.94      5.81 
2. 1.96 5.87

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.73      11.16 
2. 3.79 11.33

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.74      9.11 
2. 0.74 9.15
3. 32 59 87 32 53 83
4. 141 382 405 132 375 394
5. 464 633 670 450 619 652

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.46      17.99 
2. 1.48 18.17
3. 32 49 61 32 48 66
4. 61 134 151 62 133 150
5. 115 146 167 109 136 153

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 33 49 79 33 46 79
4. 48 58 76 46 58 88
5. 52 62 72 53 63 76

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.05      2.05 
2. 3.08 2.07
3. 26 91 118 26 69 107
4. 43 153 190 58 144 160
5. 140 181 222 151 185 229

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.57      3.75 
2. 5.80 3.90
3. 26 60 106 26 45 62
4. 72 119 135 71 120 135
5. 118 147 165 112 138 155

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 9.34      6.28 
2. 9.57 6.43
3. 26 39 53 26 41 55
4. 50 73 82 52 75 85
5. 63 86 98 56 75 88

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.78      5.33 
2. 1.79 5.36

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.48      10.39 
2. 3.51 10.50

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.79      17.30 
2. 5.81 17.39

10ge2p1x710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.26 
2. 0.35 4.28
3. 71 112 130 71 94 120
4. 218 489 548 217 497 544
5. 765 948 1018 778 941 1016

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.18 
2. 0.67 8.23
3. 71 156 185 71 113 181
4. 326 640 703 335 634 726
5. 861 1121 1263 863 1115 1257

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.71      8.79 
2. 0.73 8.94
3. 71 94 161 71 77 99
4. 139 428 483 73 249 289
5. 467 719 777 189 321 365

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.72      1.15 
2. 1.73 1.17
3. 30 96 128 30 77 125
4. 83 264 281 74 271 288
5. 219 333 400 236 338 399

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.30      2.22 
2. 3.37 2.26
3. 30 88 144 33 86 115
4. 119 219 250 105 220 253
5. 198 254 284 187 250 279

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.30      2.22 
2. 3.36 2.26
3. 30 58 138 30 34 58
4. 76 176 199 34 120 138
5. 131 184 205 69 115 125

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.87      2.59 
2. 0.88 2.62

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.71      5.12 
2. 1.73 5.17

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.79      5.36 
2. 1.80 5.39

10ge2p1x710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.38 
2. 0.28 3.40
3. 62 82 102 63 71 101
4. 162 443 491 162 445 483
5. 557 861 913 552 855 907

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.56 
2. 0.54 6.59
3. 62 115 174 62 87 153
4. 265 614 711 262 615 694
5. 901 1217 1366 918 1217 1348

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.57      7.00 
2. 0.58 7.09
3. 62 72 120 62 63 92
4. 128 412 492 63 233 306
5. 462 747 830 194 426 501

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.35      0.91 
2. 1.36 0.92
3. 29 92 116 29 74 114
4. 104 316 353 106 322 353
5. 243 348 440 243 347 439

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.64      1.77 
2. 2.68 1.80
3. 29 105 194 29 95 168
4. 180 290 313 162 224 286
5. 232 313 351 228 309 344

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.63      1.77 
2. 2.68 1.80
3. 29 83 158 29 34 105
4. 106 155 229 34 82 100
5. 148 230 253 79 141 155

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.73      2.18 
2. 0.73 2.19

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.44      4.29 
2. 1.45 4.34

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.47      4.40 
2. 1.49 4.47

10ge2p1x710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.87      10.68 
2. 0.88 10.78
3. 32 54 81 32 55 79
4. 96 351 373 67 338 360
5. 372 436 487 356 420 480

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 52 63 32 52 62
4. 55 78 87 56 76 86
5. 71 85 92 70 82 88

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 47 64 32 44 54
4. 53 73 87 41 54 74
5. 67 84 90 48 58 62

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.39      2.28 
2. 3.43 2.30
3. 26 86 114 26 73 108
4. 51 122 139 42 132 145
5. 115 148 186 113 157 205

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.28      4.22 
2. 6.40 4.30
3. 26 58 76 26 60 79
4. 62 113 130 68 110 128
5. 111 138 155 109 135 149

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.49      4.36 
2. 6.59 4.43
3. 26 40 55 26 27 46
4. 48 96 104 39 66 81
5. 68 95 106 52 71 81

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.02      6.04 
2. 2.05 6.13

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.96      11.83 
2. 4.04 12.07

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.80      11.37 
2. 3.86 11.55

10ge2p1x710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.75      9.19 
2. 0.75 9.24
3. 32 57 81 32 52 77
4. 127 377 400 118 368 385
5. 468 622 659 452 608 644

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.49      18.32 
2. 1.50 18.50
3. 32 50 63 32 47 74
4. 62 117 128 65 118 131
5. 104 129 142 97 123 133

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.49      18.28 
2. 1.50 18.46
3. 32 46 61 32 43 54
4. 59 110 119 45 56 93
5. 91 128 136 49 57 61

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.25      2.18 
2. 3.30 2.21
3. 26 89 114 26 74 110
4. 56 123 159 54 123 145
5. 130 162 200 134 162 205

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.10      4.10 
2. 6.19 4.16
3. 26 78 94 26 75 93
4. 71 117 134 69 111 127
5. 123 150 167 118 148 164

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.22      4.18 
2. 6.29 4.22
3. 26 54 71 26 37 70
4. 49 97 108 42 70 83
5. 77 99 110 49 66 78

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.85      5.54 
2. 1.86 5.57

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.66      10.95 
2. 3.70 11.06

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.70      11.07 
2. 3.74 11.19

10ge2p1x710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.33      4.10 
2. 0.34 4.14
3. 72 109 129 72 109 130
4. 222 498 545 219 502 542
5. 739 935 1003 756 926 999

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      8.02 
2. 0.65 8.06
3. 71 140 192 71 112 183
4. 322 635 705 356 630 734
5. 851 1135 1316 834 1128 1307

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.28      15.73 
2. 1.28 15.80
3. 72 113 139 72 110 137
4. 181 339 408 176 338 396
5. 318 416 483 314 410 477

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.46      0.98 
2. 1.47 0.99
3. 30 97 121 30 78 117
4. 87 293 310 102 292 312
5. 229 318 383 226 298 395

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.79      1.88 
2. 2.85 1.91
3. 30 108 172 30 94 160
4. 160 279 301 162 280 300
5. 234 295 351 219 282 323

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.37      3.61 
2. 5.45 3.66
3. 30 88 113 30 90 117
4. 99 154 166 68 124 142
5. 137 169 188 137 169 192

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.80      2.38 
2. 0.81 2.42

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.57      4.68 
2. 1.61 4.80

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.09      9.24 
2. 3.12 9.33

10ge2p1x710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.30 
2. 0.27 3.32
3. 63 99 113 63 68 84
4. 164 449 485 165 443 482
5. 569 869 915 504 846 911

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.44 
2. 0.53 6.48
3. 63 116 182 63 88 152
4. 333 634 714 327 622 711
5. 1011 1322 1473 986 1288 1446

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.02      12.61 
2. 1.04 12.74
3. 63 93 148 63 89 137
4. 181 400 494 181 401 492
5. 309 427 535 306 423 498

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.20      0.81 
2. 1.21 0.81
3. 29 102 114 30 97 112
4. 72 397 449 90 392 449
5. 274 416 498 272 414 494

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.28      1.53 
2. 2.33 1.56
3. 30 128 179 30 102 174
4. 164 281 332 153 277 331
5. 313 366 458 267 354 448

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.46      3.00 
2. 4.50 3.03
3. 30 95 173 30 82 144
4. 91 161 180 91 162 183
5. 154 198 214 114 133 157

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.67      2.02 
2. 0.68 2.04

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.35      4.03 
2. 1.35 4.05

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.62      7.84 
2. 2.66 7.96

10ge2p1x710-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.80      9.84 
2. 0.81 10.02
3. 32 58 85 32 50 78
4. 113 368 387 77 362 379
5. 429 555 615 418 553 611

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 49 77 32 48 77
4. 71 101 109 71 98 107
5. 92 118 127 89 114 125

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 32 49 63 32 49 62
4. 47 57 74 43 56 71
5. 51 61 69 51 61 67

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.53      1.70 
2. 2.58 1.74
3. 26 100 116 26 90 110
4. 58 144 172 40 128 148
5. 132 192 216 138 199 251

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.70      3.16 
2. 4.78 3.21
3. 26 112 138 26 108 137
4. 73 132 149 69 135 148
5. 161 181 195 157 178 193

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 8.80      5.91 
2. 8.96 6.02
3. 26 58 85 26 54 74
4. 53 82 91 55 85 96
5. 85 101 110 65 79 99

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.68      5.03 
2. 1.69 5.06

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.17      9.48 
2. 3.23 9.67

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

10ge2p1x710-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.71      8.68 
2. 0.71 8.73
3. 33 60 86 33 53 86
4. 96 290 312 87 282 305
5. 374 525 597 375 514 593

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.38      16.99 
2. 1.40 17.25
3. 32 52 69 32 51 72
4. 67 161 176 68 151 172
5. 146 215 237 141 208 234

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      19.23 
2. 1.56 19.23
3. 33 49 80 33 48 79
4. 50 59 76 48 59 86
5. 54 63 69 54 63 70

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.45      1.65 
2. 2.47 1.66
3. 26 96 118 26 89 113
4. 49 160 174 57 163 178
5. 149 188 245 147 184 243

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.53      3.05 
2. 4.65 3.12
3. 26 130 160 26 129 156
4. 89 159 182 78 162 181
5. 180 197 213 162 191 208

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 Minimal rate loss fraction 7.407404663924199e-07 does not reach target 0.0. 
4 packets lost.

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.57      4.68 
2. 1.57 4.71

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.01      9.00 
2. 3.04 9.09

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.81      17.39 
2. 5.81 17.39

40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.33      4.09 
2. 0.34 4.16
3. 47 84 105 47 84 104
4. 196 468 532 200 456 518
5. 802 999 1244 813 1030 1285

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      8.02 
2. 0.65 8.06
3. 47 139 205 47 97 187
4. 423 778 891 389 779 895
5. 1038 1375 1571 1052 1373 1517

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.26      15.56 
2. 1.28 15.79
3. 47 109 193 47 103 187
4. 244 514 621 245 514 622
5. 475 635 760 470 626 759

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.44      0.97 
2. 1.45 0.97
3. 16 77 105 16 54 97
4. 96 281 316 91 278 310
5. 250 348 498 250 335 412

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.78      1.87 
2. 2.80 1.88
3. 15 76 161 15 41 73
4. 152 261 286 142 254 284
5. 217 282 307 205 266 294

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.22      3.51 
2. 5.35 3.59
3. 15 58 100 15 51 81
4. 46 94 109 52 88 113
5. 156 217 259 120 152 173

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.80      2.40 
2. 0.81 2.42

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.59      4.76 
2. 1.62 4.83

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.12      9.33 
2. 3.18 9.52

40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.31 
2. 0.27 3.33
3. 39 68 82 38 53 71
4. 151 450 535 154 439 496
5. 557 871 918 547 864 928

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.45 
2. 0.53 6.48
3. 38 100 127 38 99 127
4. 337 679 791 322 687 793
5. 1117 1481 1589 1125 1503 1597

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.02      12.51 
2. 1.03 12.63
3. 39 92 192 38 85 188
4. 234 588 716 264 575 697
5. 429 621 725 435 623 726

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.18      0.80 
2. 1.20 0.80
3. 15 53 98 15 24 81
4. 88 334 418 90 328 409
5. 250 390 458 249 386 457

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.28      1.53 
2. 2.30 1.55
3. 15 45 94 15 41 90
4. 128 267 311 111 268 324
5. 298 343 398 248 334 358

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.28      2.87 
2. 4.39 2.95
3. 15 53 121 15 49 80
4. 85 140 161 81 139 161
5. 110 171 206 104 129 194

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.68      2.02 
2. 0.68 2.04

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.34      4.02 
2. 1.36 4.08

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.52      7.53 
2. 2.67 8.00

40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.81      9.99 
2. 0.82 10.04
3. 15 46 67 15 33 55
4. 44 362 390 37 354 382
5. 387 559 653 358 512 608

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.56      19.13 
2. 1.57 19.33
3. 15 32 53 15 30 52
4. 110 289 343 96 296 333
5. 292 395 431 301 417 445

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.03      37.25 
2. 3.03 37.25
3. 15 30 47 15 27 44
4. 49 111 150 46 107 143
5. 101 127 147 87 119 134

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.47      1.66 
2. 2.47 1.66
3. 12 50 93 11 16 52
4. 28 126 135 29 125 145
5. 133 177 201 130 178 217

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.49      3.02 
2. 4.54 3.05
3. 12 18 101 11 13 30
4. 38 98 124 38 98 124
5. 60 84 103 56 81 95

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 8.27      5.56 
2. 8.93 6.00
3. 12 32 60 11 25 55
4. 33 61 72 33 60 72
5. 97 127 146 52 67 86

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.71      5.11 
2. 1.71 5.11

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.19      9.54 
2. 3.22 9.63

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.25      18.70 
2. 6.38 19.07

40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.71      8.70 
2. 0.71 8.79
3. 16 73 96 16 52 80
4. 104 429 459 96 425 456
5. 451 747 834 446 739 846

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.39      17.09 
2. 1.40 17.18
3. 16 48 75 15 46 70
4. 197 406 500 198 404 507
5. 395 494 532 384 473 527

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.69      33.05 
2. 2.74 33.72
3. 16 28 55 15 24 40
4. 65 123 137 42 130 143
5. 136 175 204 120 160 184

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.38      1.60 
2. 2.40 1.62
3. 12 71 100 12 27 93
4. 39 151 173 39 149 172
5. 165 202 223 168 202 233

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.43      2.98 
2. 4.50 3.02
3. 12 53 145 11 40 110
4. 74 140 164 66 132 156
5. 166 194 208 145 183 199

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 8.28      5.57 
2. 8.45 5.68
3. 12 51 71 11 43 70
4. 59 76 86 61 79 90
5. 78 101 116 65 88 102

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.58      4.74 
2. 1.59 4.76

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.97      8.89 
2. 3.02 9.02

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.86      17.52 
2. 5.95 17.79

40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.22      2.71 
2. 0.22 2.73
3. 54 75 104 54 73 104
4. 160 431 559 166 417 551
5. 1266 1975 2687 1353 2151 3107

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.43      5.31 
2. 0.43 5.34
3. 53 119 201 52 59 137
4. 377 758 1000 337 748 1001
5. 1351 1943 2421 1354 1955 2469

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.84      10.29 
2. 0.85 10.45
3. 53 122 239 52 98 218
4. 317 686 916 300 695 934
5. 776 1094 1340 769 1097 1345

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.44      0.30 
2. 0.45 0.30
3. 23 48 115 23 47 115
4. 149 447 640 162 461 643
5. 1688 2497 3235 1563 2325 2937

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.77      0.52 
2. 0.78 0.53
3. 21 42 147 21 43 145
4. 220 635 907 213 618 890
5. 581 1042 1380 559 970 1234

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.53      1.03 
2. 1.56 1.05
3. 21 29 69 21 29 69
4. 62 212 360 58 192 347
5. 227 399 534 217 382 515

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      1.05 
2. 0.36 1.06

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      1.96 
2. 0.66 1.98

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.25      3.74 
2. 1.28 3.82

40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.19      2.33 
2. 0.19 2.34
3. 44 49 63 44 49 61
4. 127 266 355 126 261 339
5. 1062 1632 2193 1034 1734 2303

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.37      4.55 
2. 0.37 4.60
3. 44 78 138 43 51 75
4. 312 673 882 294 669 913
5. 1194 1738 2205 1159 1712 2155

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.72      8.90 
2. 0.73 9.03
3. 45 86 203 44 84 199
4. 256 598 828 257 596 838
5. 778 1107 1355 772 1101 1356

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.42      0.28 
2. 0.42 0.28
3. 23 43 101 22 36 60
4. 146 384 541 139 352 507
5. 1527 2213 2775 1518 2269 2861

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.75      0.50 
2. 0.76 0.51
3. 20 46 120 20 46 116
4. 222 653 860 213 685 907
5. 796 1302 1592 758 1251 1563

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.46      0.98 
2. 1.48 0.99
3. 20 26 108 20 25 110
4. 105 331 511 98 323 502
5. 351 529 696 361 563 759

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.33      0.99 
2. 0.33 1.00

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.61      1.82 
2. 0.61 1.84

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.19      3.57 
2. 1.21 3.62

40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.36      4.45 
2. 0.36 4.47
3. 21 43 82 21 43 83
4. 92 333 514 97 349 502
5. 1544 2287 3131 1623 2381 3265

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.63      7.79 
2. 0.64 7.83
3. 20 47 107 19 23 76
4. 245 727 1033 204 693 994
5. 1043 1628 1989 969 1536 1919

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.21      14.93 
2. 1.24 15.24
3. 21 62 156 20 58 148
4. 86 409 629 75 388 594
5. 401 659 872 369 623 828

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.52      0.35 
2. 0.52 0.35
3. 17 35 108 17 26 62
4. 162 444 678 161 421 619
5. 996 1546 2035 987 1500 2042

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.90      0.60 
2. 0.91 0.61
3. 16 19 86 16 19 85
4. 178 526 736 172 510 725
5. 396 690 909 362 662 836

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.74      1.17 
2. 1.75 1.18
3. 17 58 175 16 57 174
4. 122 361 525 120 383 556
5. 320 541 722 316 534 720

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.45      1.34 
2. 0.46 1.39

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.82      2.46 
2. 0.83 2.48

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.61      4.82 
2. 1.64 4.90

40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.34      4.17 
2. 0.34 4.19
3. 22 34 78 21 34 78
4. 93 436 622 97 441 605
5. 1548 2395 3291 1684 2565 3539

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.62      7.62 
2. 0.63 7.69
3. 21 51 116 21 42 102
4. 152 594 854 129 572 842
5. 863 1316 1636 908 1380 1682

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.21      14.95 
2. 1.23 15.17
3. 21 45 113 20 34 91
4. 125 448 659 118 433 654
5. 404 655 839 391 638 811

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.50      0.34 
2. 0.50 0.34
3. 18 47 125 18 44 123
4. 176 460 697 128 450 662
5. 1528 2183 2731 1408 2139 2633

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.89      0.60 
2. 0.90 0.60
3. 16 20 63 16 19 59
4. 100 546 860 115 526 846
5. 441 713 1000 512 933 1236

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.67      1.12 
2. 1.70 1.14
3. 17 48 126 17 45 123
4. 110 350 543 80 308 497
5. 298 511 679 288 510 681

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.44      1.31 
2. 0.46 1.37

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.81      2.41 
2. 0.81 2.43

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.58      4.71 
2. 1.60 4.78

40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.29 
2. 0.35 4.33
3. 47 93 128 47 70 111
4. 203 497 582 195 483 522
5. 895 1165 1478 876 1134 1492

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.23 
2. 0.67 8.28
3. 47 124 206 46 101 202
4. 406 762 871 398 766 873
5. 1023 1314 1481 1018 1299 1488

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.17 
2. 0.67 8.25
3. 47 134 206 46 119 205
4. 407 758 869 390 756 868
5. 1010 1321 1505 1001 1311 1510

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.78      1.20 
2. 1.81 1.21
3. 15 89 122 15 40 116
4. 71 249 285 50 239 271
5. 257 343 404 259 352 416

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.39      2.28 
2. 3.42 2.30
3. 15 82 189 15 84 190
4. 105 206 242 102 209 252
5. 213 263 302 195 252 284

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.30      2.22 
2. 3.35 2.25
3. 15 143 191 15 66 98
4. 123 218 259 103 208 250
5. 218 262 286 195 242 274

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.90      2.68 
2. 0.91 2.71

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.76      5.26 
2. 1.78 5.31

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.70      5.10 
2. 1.74 5.20

40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.28      3.41 
2. 0.28 3.43
3. 38 80 95 38 80 94
4. 131 463 544 128 451 535
5. 548 883 968 536 860 942

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.54      6.60 
2. 0.54 6.63
3. 38 88 182 38 76 176
4. 393 726 854 379 717 843
5. 1135 1544 1650 1148 1548 1652

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.57 
2. 0.54 6.63
3. 38 93 182 37 73 162
4. 392 737 868 373 723 847
5. 1156 1555 1684 1150 1546 1674

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.40      0.94 
2. 1.41 0.95
3. 15 74 104 15 34 97
4. 92 295 337 94 296 336
5. 254 343 437 259 337 437

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.67      1.80 
2. 2.73 1.83
3. 15 74 166 15 71 179
4. 190 307 325 193 306 325
5. 250 320 344 248 319 356

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.75      1.85 
2. 2.78 1.87
3. 15 124 160 15 96 162
4. 157 276 306 175 293 314
5. 225 291 333 209 280 311

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.74      2.22 
2. 0.75 2.24

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.47      4.40 
2. 1.48 4.43

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.46      4.37 
2. 1.47 4.41

40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.90      11.13 
2. 0.91 11.18
3. 15 54 83 15 27 78
4. 114 432 470 108 431 467
5. 345 475 633 335 484 616

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.77      21.84 
2. 1.78 21.95
3. 15 60 122 15 58 110
4. 150 290 324 153 288 318
5. 287 360 402 286 371 407

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.76      21.68 
2. 1.78 21.90
3. 15 51 71 14 48 69
4. 153 291 325 162 299 330
5. 289 362 410 293 377 418

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.61      2.42 
2. 3.66 2.46
3. 11 25 114 11 25 113
4. 30 126 141 35 126 146
5. 130 175 228 131 177 230

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 7.05      4.74 
2. 7.19 4.83
3. 11 66 89 11 73 96
4. 64 108 126 63 108 126
5. 105 132 151 103 129 149

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 7.10      4.77 
2. 7.24 4.87
3. 11 71 89 11 66 85
4. 64 110 129 64 109 129
5. 100 125 142 102 126 147

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.16      6.46 
2. 2.18 6.53

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.34      12.99 
2. 4.41 13.18

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.35      13.00 
2. 4.39 13.13

40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.78      9.55 
2. 0.78 9.60
3. 15 92 105 15 90 103
4. 80 422 490 79 412 467
5. 504 711 816 467 664 785

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.53      18.87 
2. 1.53 18.87
3. 15 57 121 15 50 97
4. 158 358 437 131 363 446
5. 336 450 479 315 424 469

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.53      18.88 
2. 1.55 19.07
3. 15 55 101 15 51 84
4. 164 367 446 149 362 439
5. 332 435 496 331 438 513

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.44      2.31 
2. 3.47 2.33
3. 12 92 116 11 79 114
4. 47 128 151 40 121 147
5. 122 155 203 123 158 212

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.49      4.36 
2. 6.79 4.56
3. 12 55 108 11 29 66
4. 53 106 127 53 103 123
5. 119 146 170 116 143 166

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.06      4.08 
2. 6.18 4.15
3. 12 35 47 12 31 43
4. 42 72 86 37 67 80
5. 94 122 141 81 109 130

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.98      5.91 
2. 1.99 5.94

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.93      11.74 
2. 3.94 11.80

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.82      11.41 
2. 3.87 11.59

40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.25 
2. 0.35 4.29
3. 47 86 110 47 86 109
4. 209 492 564 191 468 525
5. 957 1272 1684 932 1182 1382

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.16 
2. 0.67 8.20
3. 47 136 208 47 95 200
4. 412 762 875 397 766 877
5. 1018 1318 1499 990 1307 1496

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.12 
2. 0.66 8.16
3. 47 143 208 47 94 204
4. 425 760 874 383 765 877
5. 1005 1317 1503 986 1309 1499

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.69      1.13 
2. 1.71 1.15
3. 16 65 78 15 63 78
4. 83 205 271 17 212 231
5. 313 399 463 311 397 453

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.38      2.27 
2. 3.41 2.29
3. 16 65 96 15 74 104
4. 71 140 173 76 142 181
5. 156 192 228 156 190 231

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.23      2.17 
2. 3.26 2.19
3. 16 56 158 15 59 162
4. 103 190 224 103 191 231
5. 176 234 280 180 237 273

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.88      2.64 
2. 0.89 2.66

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.71      5.12 
2. 1.73 5.17

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.70      5.08 
2. 1.72 5.16

40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.28      3.39 
2. 0.28 3.41
3. 39 69 95 38 62 95
4. 157 447 501 156 441 481
5. 560 881 956 553 874 931

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.55 
2. 0.54 6.58
3. 38 119 181 38 104 181
4. 369 719 852 360 721 848
5. 1157 1558 1657 1142 1541 1661

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.50 
2. 0.53 6.57
3. 38 139 157 38 139 155
4. 384 722 853 367 711 838
5. 1151 1546 1649 1144 1545 1641

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.34      0.90 
2. 1.35 0.91
3. 15 64 86 15 57 86
4. 99 226 308 102 241 306
5. 239 336 401 249 356 421

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.63      1.77 
2. 2.71 1.82
3. 15 62 154 15 48 80
4. 167 281 311 166 267 308
5. 238 308 342 235 301 335

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.69      1.81 
2. 2.72 1.83
3. 15 81 180 15 81 189
4. 192 287 328 182 311 333
5. 261 332 371 255 326 356

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.73      2.19 
2. 0.74 2.20

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.44      4.30 
2. 1.44 4.32

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.43      4.27 
2. 1.44 4.31

40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.88      10.85 
2. 0.89 10.90
3. 15 68 94 15 46 90
4. 106 431 467 108 434 460
5. 351 521 658 340 502 655

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.75      21.49 
2. 1.76 21.60
3. 15 43 93 15 37 79
4. 133 284 329 135 285 319
5. 289 385 442 288 374 423

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.75      21.49 
2. 1.76 21.60
3. 15 39 64 15 36 56
4. 109 234 287 106 237 302
5. 259 330 378 258 336 391

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.28      2.21 
2. 3.32 2.23
3. 12 78 102 11 36 91
4. 42 128 150 28 111 155
5. 125 166 212 132 171 222

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.35      4.27 
2. 6.50 4.37
3. 12 13 28 11 12 20
4. 29 54 69 33 59 75
5. 90 112 129 91 113 131

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 5.95      4.00 
2. 5.95 4.00
3. 12 21 34 12 29 35
4. 26 45 63 23 41 58
5. 69 95 114 68 93 115

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 2.05      6.13 
2. 2.07 6.19

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 4.05      12.10 
2. 4.07 12.16

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.98      11.89 
2. 4.06 12.13

40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.75      9.29 
2. 0.76 9.38
3. 16 89 98 15 86 95
4. 114 437 468 100 427 455
5. 506 720 805 469 707 834

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.48      18.27 
2. 1.50 18.46
3. 16 112 152 15 88 142
4. 183 379 459 168 372 454
5. 336 419 475 315 425 465

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.50      18.50 
2. 1.50 18.50
3. 15 42 84 15 42 79
4. 169 359 450 173 383 468
5. 332 452 475 328 451 493

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.13      2.10 
2. 3.16 2.12
3. 13 24 31 12 26 34
4. 37 60 81 35 61 81
5. 169 211 249 171 219 256

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.05      4.06 
2. 6.14 4.13
3. 12 62 87 12 57 87
4. 63 110 129 57 106 125
5. 111 139 156 112 143 163

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.12      4.11 
2. 6.18 4.15
3. 12 57 82 11 45 79
4. 41 64 85 38 64 81
5. 83 105 121 84 106 121

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.86      5.57 
2. 1.88 5.63

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.60      10.77 
2. 3.66 10.93

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.65      10.93 
2. 3.69 11.04

40ge2p1vic1385-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.14 
2. 0.34 4.16
3. 47 91 112 47 90 112
4. 158 437 521 158 430 499
5. 845 1061 1307 818 1024 1228

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      8.05 
2. 0.66 8.09
3. 47 118 189 47 84 160
4. 314 657 774 284 652 769
5. 896 1164 1326 897 1154 1287

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.25      15.41 
2. 1.27 15.62
3. 47 101 187 47 95 185
4. 200 445 564 214 457 575
5. 417 576 702 414 570 698

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.46      0.98 
2. 1.49 1.00
3. 16 44 96 15 42 88
4. 71 267 293 71 264 294
5. 255 337 408 255 330 418

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.86      1.92 
2. 2.89 1.94
3. 16 50 148 15 45 146
4. 119 239 268 127 246 283
5. 223 283 344 218 280 341

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.50      3.70 
2. 5.64 3.79
3. 16 38 59 15 38 61
4. 53 112 130 57 116 134
5. 162 206 254 141 178 215

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.82      2.44 
2. 0.82 2.47

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.60      4.78 
2. 1.61 4.83

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.14      9.39 
2. 3.19 9.54

40ge2p1vic1385-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.31 
2. 0.27 3.33
3. 38 63 80 38 48 80
4. 80 383 466 82 372 444
5. 576 849 959 564 829 917

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.46 
2. 0.53 6.50
3. 38 100 159 38 58 152
4. 295 663 793 284 658 777
5. 1046 1429 1554 1024 1392 1533

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.00      12.35 
2. 1.02 12.54
3. 38 80 172 38 76 156
4. 231 608 722 229 595 714
5. 464 656 749 459 649 747

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.20      0.80 
2. 1.22 0.82
3. 15 40 92 15 39 82
4. 79 375 435 82 341 427
5. 295 421 522 291 414 499

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.35      1.58 
2. 2.37 1.59
3. 15 53 146 15 49 114
4. 131 279 311 125 272 307
5. 279 334 367 266 317 395

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.46      2.99 
2. 4.64 3.12
3. 15 56 133 15 56 131
4. 61 133 154 57 129 154
5. 189 215 243 170 198 221

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.68      2.04 
2. 0.69 2.06

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.37      4.09 
2. 1.38 4.13

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.64      7.89 
2. 2.68 8.01

40ge2p1vic1385-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.83      10.17 
2. 0.83 10.22
3. 15 75 91 15 66 86
4. 77 367 393 71 359 387
5. 421 554 651 412 540 644

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.59      19.51 
2. 1.59 19.60
3. 15 91 116 15 88 121
4. 95 207 249 84 201 236
5. 286 359 425 284 342 405

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.03      37.24 
2. 3.10 38.19
3. 15 24 63 15 22 45
4. 44 102 125 43 90 116
5. 106 139 164 96 126 146

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.63      1.77 
2. 2.65 1.78
3. 12 69 102 11 24 74
4. 50 106 152 13 88 106
5. 152 204 246 158 208 257

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.80      3.22 
2. 4.95 3.32
3. 11 29 50 11 17 49
4. 58 103 128 48 97 119
5. 126 161 181 117 150 176

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 9.06      6.09 
2. 9.52 6.40
3. 12 26 43 11 29 46
4. 38 59 73 38 61 74
5. 91 118 141 66 86 103

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.77      5.28 
2. 1.78 5.33

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.35      10.02 
2. 3.38 10.12

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.52      19.49 
2. 6.72 20.08

40ge2p1vic1385-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.71      8.79 
2. 0.72 8.84
3. 16 47 73 15 27 57
4. 112 414 458 70 410 443
5. 450 758 863 444 742 853

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.40      17.23 
2. 1.42 17.49
3. 16 66 133 15 55 128
4. 180 338 430 175 356 427
5. 326 427 481 313 422 459

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.78      34.15 
2. 2.82 34.67
3. 16 32 55 15 32 50
4. 66 100 145 66 98 125
5. 146 191 225 136 172 204

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.48      1.67 
2. 2.53 1.70
3. 12 31 96 12 34 79
4. 39 128 146 40 121 139
5. 171 219 260 174 216 262

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.55      3.06 
2. 4.69 3.15
3. 12 98 136 11 93 128
4. 71 146 162 73 141 159
5. 158 179 195 147 168 185

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 9.20      6.18 
2. 9.39 6.31
3. 12 33 53 11 35 58
4. 44 66 81 46 71 85
5. 105 134 155 74 92 110

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.63      4.87 
2. 1.64 4.89

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.12      9.32 
2. 3.17 9.47

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.18      18.48 
2. 6.30 18.85

40ge2p1vic1385-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.20 
2. 0.35 4.25
3. 47 71 113 47 71 113
4. 209 491 544 189 484 530
5. 898 1168 1514 872 1128 1490

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.16 
2. 0.67 8.20
3. 47 134 209 47 98 203
4. 452 761 873 431 762 872
5. 1037 1373 1532 1018 1332 1520

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.83      10.16 
2. 0.83 10.25
3. 47 94 186 47 85 182
4. 190 564 673 182 562 678
5. 556 768 891 552 770 891

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.60      1.08 
2. 1.64 1.10
3. 15 109 123 15 89 120
4. 96 282 314 92 230 307
5. 253 329 393 265 327 395

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.12      2.10 
2. 3.17 2.13
3. 15 103 161 15 89 165
4. 106 184 219 97 169 215
5. 222 304 347 216 287 329

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 4.26      2.86 
2. 4.30 2.89
3. 16 39 89 15 39 75
4. 42 142 161 48 152 170
5. 101 160 192 98 152 185

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.85      2.55 
2. 0.86 2.57

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.71      5.11 
2. 1.73 5.16

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.12      6.35 
2. 2.15 6.44

40ge2p1vic1385-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.36 
2. 0.27 3.38
3. 38 68 95 38 68 94
4. 149 438 512 149 437 504
5. 563 876 945 554 866 920

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.56 
2. 0.54 6.59
3. 38 117 187 38 77 180
4. 389 731 857 377 733 855
5. 1177 1572 1703 1169 1564 1701

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.66      8.17 
2. 0.67 8.24
3. 38 77 173 38 46 138
4. 163 543 652 116 548 662
5. 558 911 1093 554 905 1105

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.29      0.87 
2. 1.31 0.88
3. 15 74 117 15 31 95
4. 31 299 384 35 288 368
5. 261 378 487 262 374 479

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.50      1.68 
2. 2.54 1.71
3. 15 44 111 15 41 107
4. 71 156 196 68 154 200
5. 171 223 257 160 215 249

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 3.39      2.28 
2. 3.43 2.30
3. 15 46 144 15 45 135
4. 47 143 169 45 138 169
5. 136 198 222 135 196 228

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.71      2.13 
2. 0.72 2.14

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.42      4.23 
2. 1.43 4.28

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.78      5.31 
2. 1.80 5.38

40ge2p1vic1385-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.85      10.52 
2. 0.86 10.62
3. 15 60 73 15 48 66
4. 121 317 386 110 312 393
5. 306 425 477 293 414 455

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.65      20.31 
2. 1.67 20.51
3. 15 53 80 15 43 62
4. 137 291 356 122 300 361
5. 315 409 458 303 402 452

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.26      27.80 
2. 2.28 28.07
3. 15 31 105 15 34 97
4. 31 178 218 35 173 225
5. 129 214 260 121 216 252

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.04      2.04 
2. 3.12 2.10
3. 11 77 115 11 27 109
4. 18 145 186 21 142 184
5. 128 177 237 140 179 220

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.52      3.71 
2. 5.69 3.82
3. 11 35 54 11 30 47
4. 61 124 143 66 126 142
5. 122 153 177 108 141 162

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 8.30      5.58 
2. 8.52 5.73
3. 12 60 77 11 57 76
4. 51 73 85 54 75 86
5. 68 94 110 72 97 113

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.94      5.79 
2. 1.96 5.85

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.67      10.96 
2. 3.72 11.13

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.21      15.58 
2. 5.26 15.74

40ge2p1vic1385-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.74      9.10 
2. 0.74 9.15
3. 16 89 103 15 16 59
4. 114 436 466 106 431 459
5. 438 736 838 429 721 831

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.45      17.89 
2. 1.47 18.07
3. 15 59 108 15 53 78
4. 187 374 433 174 354 452
5. 354 487 531 350 478 510

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.90      23.33 
2. 1.91 23.53
3. 15 34 60 15 30 52
4. 34 225 260 38 224 257
5. 163 239 275 157 238 290

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.92      1.97 
2. 2.98 2.01
3. 12 72 117 11 27 87
4. 36 145 156 37 143 158
5. 150 194 224 150 198 228

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.40      3.63 
2. 5.48 3.68
3. 12 64 87 11 67 86
4. 83 145 157 85 141 155
5. 113 149 174 100 133 163

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 7.70      5.17 
2. 7.81 5.25
3. 12 14 62 11 15 63
4. 14 62 90 14 31 47
5. 67 95 110 74 103 121

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.78      5.31 
2. 1.78 5.34

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.41      10.20 
2. 3.46 10.35

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.70      14.05 
2. 4.75 14.22

40ge2p1vic1385-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.25 
2. 0.35 4.27
3. 47 70 112 47 71 112
4. 193 513 606 192 490 572
5. 834 1068 1331 805 1035 1312

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.20 
2. 0.67 8.24
3. 47 136 208 47 114 206
4. 416 768 877 394 768 878
5. 1039 1336 1503 1010 1319 1509

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.18 
2. 0.67 8.22
3. 47 141 174 47 165 202
4. 251 603 671 388 763 876
5. 684 934 1092 1007 1322 1517

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.67      1.12 
2. 1.68 1.13
3. 15 86 118 15 43 115
4. 73 279 298 64 264 298
5. 228 313 394 229 304 370

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.19      2.14 
2. 3.25 2.18
3. 15 80 187 15 79 182
4. 130 218 264 101 214 239
5. 201 266 297 200 265 292

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.26      2.19 
2. 3.32 2.23
3. 15 124 150 15 74 106
4. 50 133 162 94 182 220
5. 139 189 206 212 275 297

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.87      2.60 
2. 0.87 2.61

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.73      5.17 
2. 1.75 5.22

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.72      5.16 
2. 1.74 5.21

40ge2p1vic1385-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.38 
2. 0.28 3.40
3. 38 72 92 38 71 93
4. 139 456 543 137 450 534
5. 540 870 950 540 868 940

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.54      6.58 
2. 0.54 6.62
3. 38 143 181 38 142 182
4. 370 727 851 354 727 853
5. 1170 1564 1705 1157 1553 1655

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.54 
2. 0.54 6.61
3. 38 118 150 38 140 181
4. 231 572 642 364 731 854
5. 779 1148 1257 1147 1549 1667

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.33      0.89 
2. 1.34 0.90
3. 15 93 106 15 85 107
4. 96 289 361 23 276 354
5. 243 351 453 240 348 454

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.55      1.72 
2. 2.59 1.74
3. 15 69 167 15 67 168
4. 124 234 274 108 238 275
5. 259 341 381 251 331 377

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.62      1.76 
2. 2.63 1.77
3. 15 30 134 15 57 161
4. 54 168 212 89 202 227
5. 138 205 225 210 296 322

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.72      2.15 
2. 0.73 2.18

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.44      4.32 
2. 1.46 4.36

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.44      4.30 
2. 1.45 4.34

40ge2p1vic1385-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.87      10.74 
2. 0.88 10.79
3. 15 90 101 15 87 99
4. 114 432 467 93 429 463
5. 390 528 673 344 503 647

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.69      20.74 
2. 1.70 20.95
3. 15 45 62 15 43 62
4. 138 270 314 139 279 326
5. 291 404 473 285 395 480

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.71      21.00 
2. 1.72 21.21
3. 15 31 78 15 46 69
4. 86 201 243 141 271 305
5. 185 273 319 280 374 425

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.23      2.17 
2. 3.26 2.19
3. 11 40 109 11 21 106
4. 44 132 155 44 121 152
5. 115 159 194 118 155 195

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.88      3.95 
2. 5.96 4.01
3. 11 94 119 11 95 122
4. 58 112 129 55 116 132
5. 98 126 147 97 125 145

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.27      4.21 
2. 6.37 4.28
3. 11 32 42 11 54 84
4. 36 88 105 59 114 136
5. 77 100 113 115 140 155

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.02      6.03 
2. 2.03 6.06

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.88      11.60 
2. 3.96 11.83

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.03      12.06 
2. 4.11 12.30

40ge2p1vic1385-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.75      9.21 
2. 0.75 9.26
3. 15 93 105 15 84 102
4. 108 431 456 97 420 450
5. 426 704 805 418 699 807

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.49      18.30 
2. 1.50 18.49
3. 15 53 75 15 47 70
4. 167 365 444 143 365 453
5. 326 439 468 319 447 485

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.50      18.49 
2. 1.52 18.68
3. 15 33 95 15 50 74
4. 77 261 331 139 354 402
5. 196 309 330 335 466 486

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.08      2.07 
2. 3.11 2.09
3. 12 73 84 11 64 83
4. 28 133 170 23 131 156
5. 152 184 237 144 177 223

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.70      3.83 
2. 5.79 3.89
3. 12 20 53 11 13 42
4. 25 48 60 22 42 57
5. 66 84 98 57 76 92

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.02      4.05 
2. 6.12 4.11
3. 12 52 72 11 74 95
4. 49 90 106 59 107 138
5. 74 104 116 118 149 178

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.84      5.52 
2. 1.85 5.55

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.59      10.75 
2. 3.65 10.91

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.72      11.12 
2. 3.76 11.23

40ge2p1vic1385-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.33      4.06 
2. 0.34 4.13
3. 47 88 112 47 88 110
4. 171 418 507 166 426 503
5. 834 1036 1232 832 1055 1325

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      8.02 
2. 0.66 8.06
3. 47 145 198 47 120 189
4. 388 746 838 354 742 835
5. 1010 1303 1448 1017 1302 1457

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.29      15.84 
2. 1.30 16.00
3. 47 125 194 47 118 199
4. 200 446 570 209 457 581
5. 498 644 771 492 638 764

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.39      0.94 
2. 1.42 0.95
3. 16 50 97 15 47 89
4. 79 276 307 78 272 300
5. 223 309 400 223 301 390

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.72      1.83 
2. 2.76 1.85
3. 16 107 139 15 107 139
4. 147 264 277 139 256 269
5. 226 303 333 220 282 322

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.02      3.38 
2. 5.15 3.46
3. 16 45 123 15 42 118
4. 57 118 137 52 123 145
5. 147 180 206 133 162 180

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.79      2.36 
2. 0.79 2.37

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.57      4.70 
2. 1.61 4.82

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.06      9.15 
2. 3.14 9.38

40ge2p1vic1385-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.26      3.24 
2. 0.27 3.31
3. 38 59 75 38 58 74
4. 148 441 513 148 429 485
5. 539 860 925 528 853 897

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.43 
2. 0.52 6.46
3. 38 100 159 38 58 144
4. 333 665 794 308 667 792
5. 1078 1407 1540 1084 1393 1525

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.03      12.72 
2. 1.04 12.84
3. 38 84 175 38 79 167
4. 289 597 716 296 605 717
5. 444 639 752 449 641 750

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.16      0.78 
2. 1.17 0.79
3. 15 44 76 15 45 72
4. 101 323 374 104 321 375
5. 245 363 444 254 368 454

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.24      1.51 
2. 2.27 1.52
3. 15 32 99 15 30 87
4. 100 250 315 92 247 312
5. 310 370 439 239 330 369

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.18      2.81 
2. 4.27 2.87
3. 16 39 137 15 32 60
4. 76 139 159 64 135 155
5. 115 174 205 90 143 175

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.67      2.00 
2. 0.67 2.02

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.25      3.73 
2. 1.34 4.01

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.63      7.86 
2. 2.67 7.97

40ge2p1vic1385-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.81      9.95 
2. 0.81 10.00
3. 15 52 73 15 26 58
4. 110 379 408 50 375 404
5. 394 527 591 379 502 574

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.53      18.80 
2. 1.55 19.08
3. 15 16 17 15 16 18
4. 34 220 307 29 214 287
5. 254 341 384 247 335 394

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.96      36.36 
2. 2.99 36.73
3. 15 17 43 15 17 41
4. 32 119 142 39 106 139
5. 99 128 151 92 118 141

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.35      1.58 
2. 2.38 1.60
3. 12 26 88 11 26 83
4. 45 137 164 46 138 160
5. 136 181 262 136 181 238

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.27      2.87 
2. 4.29 2.88
3. 12 13 47 11 13 41
4. 45 138 158 44 136 156
5. 87 124 164 79 117 142

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 8.18      5.50 
2. 8.43 5.66
3. 12 58 78 11 32 67
4. 58 73 82 64 78 89
5. 84 108 124 75 101 121

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.67      4.99 
2. 1.69 5.04

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.03      9.07 
2. 3.11 9.30

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.89      17.62 
2. 5.95 17.79

40ge2p1vic1385-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.70      8.67 
2. 0.71 8.71
3. 16 47 53 16 45 52
4. 110 231 275 85 227 240
5. 372 599 691 390 599 678

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.38      16.93 
2. 1.39 17.10
3. 16 69 124 15 58 125
4. 187 361 441 163 374 465
5. 335 434 483 328 427 492

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.62      32.21 
2. 2.68 33.02
3. 16 37 67 15 35 64
4. 58 92 107 41 99 113
5. 131 176 221 116 155 186

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.29      1.54 
2. 2.29 1.54
3. 12 54 84 12 51 83
4. 28 131 148 26 130 158
5. 172 216 259 136 210 248

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.31      2.90 
2. 4.38 2.95
3. 12 57 128 11 54 90
4. 60 97 118 54 91 113
5. 81 127 175 79 102 149

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 7.70      5.17 
2. 8.01 5.39
3. 12 31 47 12 19 32
4. 13 53 82 12 13 19
5. 73 95 107 68 89 102

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.55      4.62 
2. 1.55 4.64

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.92      8.72 
2. 2.94 8.81

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.55      16.60 
2. 5.66 16.93

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.78      21.94 
2. 1.80 22.16
3. 55 93 118 55 80 113
4. 102 225 249 99 219 243
5. 256 303 331 250 294 321

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.81      34.53 
2. 2.85 35.05
3. 54 72 88 54 69 86
4. 108 143 173 106 127 156
5. 186 213 234 159 188 210

 1518b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.24      39.82 
2. 3.25 40.02
3. 54 65 81 55 61 71
4. 74 103 108 64 102 107
5. 94 106 119 95 105 115

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.89      1.27 
2. 1.91 1.29
3. 44 103 126 45 85 117
4. 73 223 242 67 218 233
5. 186 253 361 167 237 361

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.93      1.97 
2. 2.95 1.99
3. 44 124 159 44 61 155
4. 91 217 233 81 210 226
5. 180 212 252 146 209 226

 64b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.61      3.77 
2. 5.70 3.83
3. 45 55 66 45 51 62
4. 66 121 135 67 123 135
5. 154 220 244 117 139 155

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.77      5.31 
2. 1.78 5.33

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.83      8.47 
2. 2.86 8.56

 imix-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.45      16.29 
2. 5.56 16.62

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.78      21.96 
2. 1.79 22.07
3. 56 95 119 56 80 112
4. 101 224 251 91 219 243
5. 257 305 333 251 299 329

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.55      31.43 
2. 2.57 31.58
3. 56 72 85 56 67 78
4. 68 160 170 62 158 167
5. 144 168 176 134 163 171

 1518b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.62      32.28 
2. 2.64 32.45
3. 56 71 108 56 71 109
4. 61 112 124 56 114 123
5. 101 120 127 100 117 128

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.89      1.27 
2. 1.90 1.28
3. 45 104 116 45 96 113
4. 73 231 247 55 229 247
5. 164 237 304 160 231 307

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.70      1.82 
2. 2.92 1.96
3. 45 120 157 45 64 152
4. 96 213 232 97 218 232
5. 170 226 277 150 214 263

 64b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 5.59      3.76 
2. 5.71 3.83
3. 45 56 70 45 53 64
4. 66 122 137 66 122 136
5. 154 220 243 117 139 155

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.64      4.91 
2. 1.78 5.32

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.82      8.44 
2. 2.85 8.52

 imix-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 5.42      16.22 
2. 5.56 16.63

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.81      22.26 
2. 1.83 22.48
3. 53 108 122 53 95 115
4. 102 224 249 103 222 239
5. 263 310 340 255 305 332

 1518b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.87      35.33 
2. 2.90 35.68
3. 53 71 102 53 68 88
4. 85 159 171 87 152 166
5. 182 202 216 154 173 188

 1518b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.41      41.97 
2. 3.41 41.97
3. 56 64 82 53 59 75
4. 65 94 103 64 93 102
5. 92 102 114 91 100 110

 64b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.92      1.29 
2. 1.94 1.31
3. 45 99 118 45 67 106
4. 70 213 233 80 213 227
5. 199 281 389 185 261 378

 64b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.91      1.96 
2. 3.02 2.03
3. 45 103 141 45 98 134
4. 89 204 218 81 208 224
5. 184 224 242 167 192 211

 64b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.72      3.84 
2. 5.85 3.93
3. 45 79 101 45 74 86
4. 75 118 133 72 113 126
5. 159 223 253 120 145 167

 imix-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.80      5.38 
2. 1.80 5.38

 imix-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.85      8.53 
2. 2.89 8.66

 imix-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.54      16.57 
2. 5.60 16.73

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.82      22.41 
2. 1.82 22.41
3. 54 92 124 54 83 115
4. 99 223 248 102 218 239
5. 252 301 329 244 292 319

 1518b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.86      35.14 
2. 2.88 35.49
3. 54 73 103 54 68 89
4. 102 162 178 101 138 163
5. 184 206 222 155 176 195

 1518b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.21      39.50 
2. 3.21 39.50
3. 58 66 86 51 62 79
4. 72 102 108 67 100 107
5. 94 106 119 94 104 113

 64b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.93      1.30 
2. 1.95 1.31
3. 46 103 122 46 86 112
4. 71 216 233 80 212 228
5. 204 292 398 194 277 385

 64b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.96      1.99 
2. 2.99 2.01
3. 45 128 156 45 60 129
4. 78 192 217 67 178 204
5. 183 219 241 172 193 226

 64b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.64      3.79 
2. 5.84 3.92
3. 46 102 132 46 99 128
4. 74 121 138 74 120 134
5. 159 219 247 115 136 155

 imix-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.80      5.37 
2. 1.80 5.37

 imix-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.85      8.54 
2. 2.90 8.67

 imix-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.52      16.50 
2. 5.63 16.83

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.40      4.90 
2. 0.41 5.07
3. 59 68 128 59 65 129
4. 217 566 887 200 525 765
5. 2597 4053 4887 2545 4079 4971

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.88      10.85 
2. 0.89 10.90
3. 58 132 285 58 126 271
4. 456 1177 1638 404 1080 1539
5. 1681 2287 2599 1522 2155 2467

 1518b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.69      20.79 
2. 1.72 21.10
3. 59 133 298 59 116 282
4. 231 598 855 220 577 831
5. 664 1011 1188 634 974 1163

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.40      0.27 
2. 0.42 0.28
3. 49 61 119 49 60 88
4. 208 627 993 183 550 804
5. 2623 3967 4783 2601 4043 4907

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.88      0.59 
2. 0.89 0.60
3. 47 71 174 47 70 181
4. 302 934 1178 342 1074 1541
5. 1263 1956 2315 1025 1714 2001

 64b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.75      1.18 
2. 1.78 1.19
3. 49 143 302 49 139 300
4. 251 615 867 235 587 843
5. 671 1105 1357 651 1095 1349

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.36      1.08 
2. 0.40 1.20

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.83      2.49 
2. 0.87 2.61

 imix-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.69      5.06 
2. 1.72 5.14

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.40      4.90 
2. 0.41 5.07
3. 61 73 137 61 66 122
4. 214 610 981 192 531 748
5. 2565 4031 4815 2567 4111 4927

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.88      10.80 
2. 0.88 10.85
3. 60 132 279 60 96 225
4. 442 1143 1593 426 1127 1600
5. 1471 2141 2441 1642 2263 2553

 1518b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.67      20.52 
2. 1.70 20.94
3. 61 137 291 61 114 277
4. 227 591 838 212 565 829
5. 691 1016 1191 601 942 1140

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.41      0.27 
2. 0.42 0.28
3. 49 61 133 49 59 122
4. 207 683 1145 171 547 888
5. 2473 3949 4819 2561 3865 4715

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.90      0.60 
2. 0.91 0.61
3. 49 131 287 49 128 272
4. 467 1180 1668 373 994 1472
5. 1815 2445 2833 1582 2265 2603

 64b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.70      1.14 
2. 1.72 1.16
3. 50 150 302 49 129 294
4. 245 608 875 246 608 871
5. 645 1089 1305 660 1102 1333

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.37      1.11 
2. 0.40 1.20

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.83      2.50 
2. 0.88 2.63

 imix-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.68      5.04 
2. 1.71 5.11

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.40      4.94 
2. 0.42 5.11
3. 57 68 135 57 63 120
4. 198 598 947 179 534 762
5. 2415 3987 4963 2491 3937 4851

 1518b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.87      10.70 
2. 0.87 10.76
3. 57 134 280 57 119 263
4. 448 1150 1610 385 1057 1501
5. 1614 2255 2573 1368 2097 2417

 1518b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.70      20.95 
2. 1.74 21.38
3. 57 140 300 57 136 296
4. 239 607 849 220 566 811
5. 669 1018 1189 647 961 1148

 64b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.40      0.27 
2. 0.42 0.28
3. 50 62 130 50 58 122
4. 196 596 918 176 515 774
5. 2593 3957 4731 2607 4047 4879

 64b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.89      0.60 
2. 0.90 0.60
3. 49 131 280 49 128 281
4. 462 1157 1638 427 1112 1606
5. 1811 2459 2875 1584 2285 2653

 64b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.72      1.15 
2. 1.74 1.17
3. 50 145 299 49 135 292
4. 249 602 860 232 572 849
5. 650 1092 1308 622 1067 1272

 imix-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.37      1.11 
2. 0.40 1.21

 imix-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.83      2.47 
2. 0.89 2.65

 imix-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.71      5.13 
2. 1.73 5.18

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.40      4.90 
2. 0.42 5.15
3. 58 64 130 58 64 128
4. 198 649 1019 176 547 810
5. 2463 3989 4867 2529 3937 4823

 1518b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.89      10.92 
2. 0.89 10.97
3. 58 130 284 58 132 281
4. 459 1175 1630 421 1097 1554
5. 1608 2233 2547 1521 2161 2489

 1518b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.71      21.05 
2. 1.74 21.37
3. 58 139 296 58 137 293
4. 237 592 824 210 554 805
5. 652 1001 1171 645 955 1141

 64b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.41      0.27 
2. 0.42 0.29
3. 50 62 129 50 58 123
4. 208 697 1239 171 569 968
5. 2567 3885 4675 2553 3995 4807

 64b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.91      0.61 
2. 0.92 0.62
3. 50 120 290 50 120 285
4. 465 1197 1697 461 1170 1660
5. 1702 2353 2749 1597 2241 2605

 64b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.76      1.18 
2. 1.78 1.20
3. 49 143 304 49 130 301
4. 249 616 864 224 577 833
5. 675 1105 1337 664 1102 1359

 imix-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.38      1.13 
2. 0.40 1.20

 imix-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.82      2.46 
2. 0.89 2.65

 imix-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.74      5.21 
2. 1.77 5.29

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.14 
2. 0.34 4.17
3. 68 107 131 68 88 119
4. 214 482 524 215 472 511
5. 756 935 1059 763 932 1085

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      7.96 
2. 0.65 8.04
3. 68 202 212 68 115 208
4. 373 769 814 388 788 880
5. 1061 1369 1480 1071 1353 1466

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.29      15.85 
2. 1.30 16.01
3. 69 128 214 69 112 144
4. 253 545 675 266 553 631
5. 453 594 732 446 586 724

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.48      0.99 
2. 1.49 1.00
3. 29 86 110 29 66 97
4. 77 261 278 77 268 283
5. 227 290 366 227 287 380

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.88      1.93 
2. 2.91 1.95
3. 29 110 209 29 97 205
4. 146 272 307 152 277 305
5. 253 332 435 243 329 434

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.45      3.67 
2. 5.54 3.72
3. 30 59 79 30 64 88
4. 86 137 155 91 141 167
5. 138 174 202 145 181 222

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.80      2.40 
2. 0.82 2.44

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.60      4.78 
2. 1.62 4.86

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.16      9.44 
2. 3.19 9.54

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.32 
2. 0.27 3.32
3. 60 93 101 60 68 85
4. 162 445 508 164 441 481
5. 531 845 926 534 842 914

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.44 
2. 0.53 6.47
3. 60 169 194 60 85 185
4. 351 753 791 347 752 798
5. 1156 1538 1624 1146 1564 1650

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.04      12.75 
2. 1.05 12.88
3. 60 69 134 60 71 135
4. 273 597 725 268 574 706
5. 492 667 778 473 653 760

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.21      0.81 
2. 1.22 0.82
3. 29 103 117 29 90 113
4. 63 385 431 65 388 428
5. 261 403 490 274 413 496

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.35      1.58 
2. 2.37 1.59
3. 29 109 198 29 92 196
4. 163 307 393 139 301 381
5. 331 408 500 316 384 492

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.50      3.02 
2. 4.56 3.07
3. 29 80 106 29 80 147
4. 94 177 206 91 178 208
5. 183 208 244 189 214 254

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.68      2.03 
2. 0.68 2.05

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.36      4.06 
2. 1.36 4.08

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.62      7.82 
2. 2.70 8.06

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.81      10.02 
2. 0.83 10.17
3. 29 77 105 29 64 87
4. 110 425 446 115 423 445
5. 432 608 694 410 597 657

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.57      19.36 
2. 1.59 19.56
3. 29 59 97 29 55 83
4. 127 336 390 118 332 387
5. 295 391 440 279 387 436

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.08      37.95 
2. 3.13 38.52
3. 29 50 79 30 44 73
4. 59 111 129 61 111 127
5. 99 122 139 98 121 137

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.63      1.77 
2. 2.66 1.79
3. 25 86 112 25 50 91
4. 86 168 188 87 150 186
5. 128 185 214 135 186 231

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.88      3.28 
2. 4.93 3.31
3. 25 63 101 25 71 92
4. 90 150 179 87 142 172
5. 148 182 214 139 176 204

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 9.08      6.10 
2. 9.37 6.29
3. 26 60 77 26 74 93
4. 58 82 94 61 88 99
5. 80 95 109 85 103 123

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.71      5.13 
2. 1.74 5.20

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.31      9.90 
2. 3.34 10.00

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.56      19.61 
2. 6.66 19.91

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.71      8.78 
2. 0.72 8.82
3. 29 94 107 30 93 103
4. 114 425 447 102 424 443
5. 435 739 829 433 730 770

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.40      17.17 
2. 1.41 17.34
3. 29 108 156 29 87 141
4. 214 386 469 208 392 483
5. 369 479 545 356 457 523

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.73      33.58 
2. 2.78 34.26
3. 30 52 84 30 51 73
4. 82 123 138 62 142 154
5. 131 172 202 130 168 196

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.50      1.68 
2. 2.51 1.69
3. 26 89 115 26 71 115
4. 44 149 160 46 146 159
5. 124 187 215 126 188 248

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.74      3.19 
2. 4.79 3.22
3. 25 119 139 25 106 121
4. 90 153 172 80 148 168
5. 169 199 232 161 191 217

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 8.73      5.87 
2. 9.08 6.10
3. 27 50 78 27 51 78
4. 41 58 77 41 57 76
5. 93 104 114 70 104 120

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.59      4.76 
2. 1.60 4.79

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.06      9.16 
2. 3.09 9.25

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.94      17.76 
2. 6.18 18.49

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.22      2.73 
2. 0.22 2.74
3. 75 94 141 75 86 122
4. 218 514 650 211 476 636
5. 1267 1833 2489 1287 2063 2741

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.43      5.25 
2. 0.43 5.30
3. 74 152 221 73 96 183
4. 390 755 990 323 719 941
5. 1351 1978 2489 1332 1956 2467

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.85      10.44 
2. 0.86 10.54
3. 74 134 239 74 99 180
4. 367 774 1003 371 795 1030
5. 846 1210 1475 903 1279 1530

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.45      0.30 
2. 0.45 0.30
3. 44 71 129 44 61 97
4. 214 540 780 214 567 755
5. 1898 2643 3179 1818 2645 3137

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.81      0.54 
2. 0.82 0.55
3. 42 105 213 42 65 198
4. 384 936 1234 360 942 1246
5. 841 1369 1759 887 1409 1794

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.59      1.07 
2. 1.62 1.09
3. 43 129 270 43 115 261
4. 201 482 708 189 465 691
5. 504 834 1071 500 818 1042

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.36      1.07 
2. 0.36 1.08

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      1.94 
2. 0.66 1.96

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.29      3.87 
2. 1.31 3.93

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.19      2.35 
2. 0.19 2.35
3. 66 71 114 66 70 80
4. 167 465 601 168 429 564
5. 980 1473 1788 986 1521 1955

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.37      4.55 
2. 0.37 4.60
3. 65 126 187 65 114 180
4. 358 690 899 344 693 903
5. 1280 1850 2339 1300 1895 2443

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.73      8.99 
2. 0.75 9.17
3. 65 131 224 65 115 215
4. 358 762 973 352 766 975
5. 974 1360 1636 962 1334 1593

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.42      0.28 
2. 0.43 0.29
3. 43 68 128 43 67 130
4. 183 524 735 183 546 740
5. 1856 2571 3069 1739 2543 3095

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.75      0.50 
2. 0.75 0.50
3. 42 70 107 42 69 107
4. 216 548 867 211 551 867
5. 588 904 1240 615 1009 1310

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.47      0.99 
2. 1.50 1.01
3. 42 114 255 42 108 254
4. 199 537 819 179 542 863
5. 508 796 1005 507 792 1002

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.33      0.99 
2. 0.33 0.99

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.61      1.83 
2. 0.62 1.85

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.18      3.52 
2. 1.20 3.59

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.36      4.46 
2. 0.36 4.48
3. 43 64 109 43 49 87
4. 150 430 632 115 438 603
5. 1520 2305 3011 1615 2401 3069

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.65      8.03 
2. 0.66 8.12
3. 36 89 187 35 54 152
4. 314 818 1149 261 779 1117
5. 1028 1564 1948 1042 1582 1913

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.27      15.62 
2. 1.30 15.94
3. 38 85 189 37 73 165
4. 120 525 721 115 515 715
5. 431 688 872 408 669 848

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.52      0.35 
2. 0.52 0.35
3. 32 65 140 32 54 107
4. 226 540 781 220 552 787
5. 1891 2645 3111 1871 2605 3117

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.87      0.58 
2. 0.87 0.59
3. 30 110 251 30 66 214
4. 363 1020 1444 355 1027 1473
5. 740 1305 1720 788 1349 1776

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.75      1.18 
2. 1.78 1.20
3. 30 98 250 31 84 239
4. 180 458 660 148 445 644
5. 410 678 882 395 668 877

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.46      1.36 
2. 0.47 1.40

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.81      2.43 
2. 0.82 2.45

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.62      4.84 
2. 1.65 4.94

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.34      4.16 
2. 0.34 4.19
3. 44 60 103 44 59 102
4. 148 418 615 148 440 597
5. 1494 2359 3187 1604 2459 3293

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.62      7.63 
2. 0.63 7.71
3. 38 91 193 36 49 129
4. 325 802 1113 267 775 1068
5. 1106 1685 2085 1119 1688 2133

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.20      14.75 
2. 1.22 14.97
3. 43 79 156 39 68 129
4. 176 554 776 164 540 774
5. 475 749 947 453 719 907

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.52      0.35 
2. 0.52 0.35
3. 33 67 140 34 55 119
4. 193 534 741 188 560 747
5. 1788 2601 3097 1677 2485 3049

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.89      0.60 
2. 0.90 0.60
3. 30 117 261 30 51 186
4. 356 968 1402 260 874 1293
5. 805 1319 1708 751 1256 1633

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.73      1.16 
2. 1.76 1.18
3. 31 120 273 31 111 265
4. 209 522 719 181 480 687
5. 451 749 965 418 713 935

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.44      1.32 
2. 0.45 1.35

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.80      2.38 
2. 0.80 2.41

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.60      4.78 
2. 1.61 4.83

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.70      33.20 
2. 2.70 33.20
3. 54 89 109 54 77 108
4. 96 148 158 80 150 161
5. 288 316 338 290 317 342

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.16      38.93 
2. 3.16 38.93
3. 54 64 80 54 63 78
4. 73 111 120 70 110 116
5. 108 118 125 107 118 125

 1518b-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.14      38.61 
2. 3.14 38.61
3. 58 66 97 54 63 80
4. 69 113 128 69 113 126
5. 110 124 131 109 122 129

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.87      1.93 
2. 2.89 1.94
3. 44 103 124 44 79 117
4. 57 153 167 57 155 170
5. 142 204 267 144 205 267

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 4.91      3.30 
2. 5.01 3.37
3. 44 66 85 44 62 85
4. 83 143 160 86 142 161
5. 152 202 235 125 155 173

 64b-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 4.86      3.26 
2. 4.95 3.33
3. 44 73 94 44 85 110
4. 79 144 162 90 136 162
5. 192 227 250 130 161 181

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.68      8.03 
2. 2.68 8.03

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 4.70      14.07 
2. 4.77 14.28

 imix-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 4.52      13.51 
2. 4.59 13.71

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.70      33.21 
2. 2.70 33.21
3. 56 94 109 56 91 108
4. 106 147 161 81 150 162
5. 293 319 339 296 322 343

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.56      31.52 
2. 2.56 31.52
3. 56 69 82 56 67 80
4. 60 128 135 58 128 134
5. 107 127 133 104 127 135

 1518b-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.56      31.54 
2. 2.56 31.54
3. 56 73 96 56 71 92
4. 61 130 139 60 129 138
5. 111 130 137 110 129 136

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.89      1.94 
2. 2.89 1.94
3. 45 100 116 45 99 115
4. 56 154 163 62 158 173
5. 137 194 255 138 196 252

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.94      3.32 
2. 5.04 3.39
3. 49 61 89 44 66 84
4. 90 140 155 82 142 159
5. 184 226 252 129 160 184

 64b-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.83      3.24 
2. 4.95 3.32
3. 45 73 92 45 79 102
4. 72 126 152 75 124 149
5. 194 226 248 130 156 168

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.68      8.00 
2. 2.68 8.00

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.71      14.08 
2. 4.78 14.29

 imix-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.54      13.57 
2. 4.60 13.77

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.71      33.33 
2. 2.71 33.33
3. 53 86 104 53 71 106
4. 121 145 158 72 153 163
5. 296 325 348 299 330 354

 1518b-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.28      40.32 
2. 3.28 40.32
3. 52 75 88 52 65 87
4. 77 109 119 65 108 117
5. 104 121 137 104 119 133

 1518b-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.22      39.64 
2. 3.22 39.64
3. 53 66 85 53 65 83
4. 72 110 122 67 106 112
5. 106 120 131 109 121 131

 64b-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.89      1.94 
2. 2.90 1.95
3. 45 100 124 45 76 114
4. 60 158 170 62 161 175
5. 184 238 288 182 238 288

 64b-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.99      3.35 
2. 5.06 3.40
3. 45 73 125 45 68 115
4. 94 138 155 84 140 154
5. 156 209 246 132 162 181

 64b-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.89      3.29 
2. 4.97 3.34
3. 45 74 101 45 71 94
4. 84 142 160 84 137 159
5. 158 211 243 131 164 188

 imix-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.70      8.08 
2. 2.70 8.08

 imix-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.71      14.10 
2. 4.79 14.31

 imix-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.59      13.72 
2. 4.66 13.93

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.72      33.43 
2. 2.72 33.43
3. 58 94 106 50 77 107
4. 132 146 162 77 153 163
5. 292 324 346 294 325 347

 1518b-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.14      38.62 
2. 3.14 38.62
3. 57 78 95 50 61 78
4. 67 111 120 66 111 116
5. 108 120 127 106 119 126

 1518b-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.05      37.54 
2. 3.05 37.54
3. 54 66 85 54 64 80
4. 77 118 134 65 123 138
5. 107 121 128 112 124 132

 64b-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.90      1.95 
2. 2.90 1.95
3. 45 100 124 45 76 113
4. 58 155 165 61 159 176
5. 182 235 284 180 236 288

 64b-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.99      3.35 
2. 5.07 3.40
3. 45 115 143 45 66 138
4. 91 140 158 88 137 154
5. 186 234 260 137 168 185

 64b-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.90      3.30 
2. 4.98 3.35
3. 45 75 93 45 73 91
4. 84 139 160 86 135 157
5. 149 204 237 129 160 181

 imix-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.68      8.03 
2. 2.70 8.07

 imix-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.46      13.35 
2. 4.53 13.55

 imix-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.60      13.76 
2. 4.65 13.90

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.07      37.81 
2. 3.09 38.00
3. 54 101 114 54 99 110
4. 95 155 164 103 153 162
5. 252 273 286 255 274 287

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.16      38.91 
2. 3.16 38.91
3. 54 72 88 53 70 84
4. 71 105 110 64 101 108
5. 96 107 114 96 106 111

 1518b-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.14      38.68 
2. 3.14 38.68
3. 54 68 88 54 68 82
4. 71 106 112 66 103 110
5. 99 108 113 98 108 115

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.30      2.22 
2. 3.31 2.23
3. 44 101 114 44 87 108
4. 57 137 152 57 139 153
5. 131 165 207 130 167 212

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 6.84      4.60 
2. 6.91 4.64
3. 44 109 125 44 107 124
4. 77 116 127 68 116 127
5. 163 193 217 158 185 208

 64b-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 6.82      4.58 
2. 6.92 4.65
3. 44 108 128 44 107 124
4. 69 109 122 64 109 119
5. 136 159 182 141 164 185

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.04      9.09 
2. 3.06 9.14

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 6.19      18.52 
2. 6.25 18.70

 imix-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 6.25      18.70 
2. 6.32 18.89

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.72      33.45 
2. 2.73 33.62
3. 56 90 111 56 89 110
4. 113 130 143 114 130 144
5. 162 194 207 163 194 210

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.56      31.53 
2. 2.56 31.53
3. 55 69 82 55 68 79
4. 61 119 130 60 119 130
5. 102 121 131 102 120 129

 1518b-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.56      31.52 
2. 2.57 31.68
3. 56 68 91 56 63 78
4. 74 114 136 76 114 135
5. 105 125 133 105 125 131

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 3.29      2.21 
2. 3.30 2.22
3. 44 103 118 44 89 111
4. 61 140 154 62 138 155
5. 134 178 224 137 176 229

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 6.80      4.57 
2. 6.87 4.61
3. 46 111 133 47 64 126
4. 72 114 126 68 115 125
5. 136 156 174 139 162 180

 64b-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 6.90      4.63 
2. 6.93 4.66
3. 48 111 130 47 99 126
4. 79 117 128 71 117 127
5. 165 196 221 166 197 223

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 3.05      9.13 
2. 3.07 9.18

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 5.82      17.42 
2. 5.91 17.68

 imix-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 5.71      17.07 
2. 5.74 17.16

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.07      37.80 
2. 3.09 37.99
3. 52 98 110 52 97 107
4. 95 158 167 105 156 165
5. 247 269 282 252 272 285

 1518b-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.28      40.37 
2. 3.28 40.37
3. 56 67 79 52 64 80
4. 74 100 106 72 101 107
5. 91 108 120 90 105 117

 1518b-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.22      39.57 
2. 3.22 39.57
3. 52 66 81 52 63 79
4. 64 102 108 56 102 107
5. 94 106 119 95 104 111

 64b-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.31      2.22 
2. 3.32 2.23
3. 45 105 125 45 91 116
4. 65 141 156 61 141 156
5. 148 194 230 149 199 238

 64b-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.80      4.57 
2. 6.90 4.64
3. 45 118 130 45 114 129
4. 76 115 125 68 115 125
5. 174 203 227 168 198 224

 64b-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.83      4.59 
2. 6.89 4.63
3. 45 115 129 45 112 127
4. 76 116 127 73 116 127
5. 173 202 226 173 202 227

 imix-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.06      9.15 
2. 3.07 9.19

 imix-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.14      18.36 
2. 6.20 18.55

 imix-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.21      18.58 
2. 6.31 18.86

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.07      37.76 
2. 3.08 37.95
3. 54 93 117 53 81 111
4. 97 158 168 96 157 171
5. 250 270 282 253 272 285

 1518b-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.12      38.45 
2. 3.12 38.45
3. 53 68 86 53 66 79
4. 70 102 111 71 102 109
5. 95 106 111 93 106 111

 1518b-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.06      37.65 
2. 3.06 37.65
3. 53 67 86 53 64 82
4. 58 113 126 62 108 115
5. 93 110 115 95 110 115

 64b-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.30      2.22 
2. 3.33 2.24
3. 45 105 118 45 103 115
4. 76 136 152 65 137 155
5. 136 172 212 135 177 215

 64b-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.77      4.55 
2. 6.84 4.59
3. 48 109 125 48 94 125
4. 70 117 128 69 115 126
5. 179 208 240 174 203 233

 64b-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.84      4.60 
2. 6.91 4.64
3. 45 110 126 45 107 124
4. 77 117 127 69 116 125
5. 161 190 211 157 181 201

 imix-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.06      9.16 
2. 3.06 9.16

 imix-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.17      18.47 
2. 6.24 18.65

 imix-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.21      18.56 
2. 6.27 18.75

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.31 
2. 0.35 4.33
3. 68 111 129 68 94 117
4. 212 486 538 213 473 509
5. 771 939 1082 773 941 1100

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.21 
2. 0.67 8.25
3. 68 201 220 68 115 208
4. 357 767 808 358 768 822
5. 1018 1330 1468 1007 1303 1458

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.23 
2. 0.67 8.27
3. 68 197 222 68 115 209
4. 367 773 817 361 772 821
5. 1091 1349 1464 1054 1326 1449

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.82      1.22 
2. 1.84 1.24
3. 29 109 129 29 83 122
4. 62 262 282 72 260 278
5. 228 299 377 232 307 360

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.62      2.43 
2. 3.68 2.47
3. 30 62 93 30 64 90
4. 65 100 136 65 102 139
5. 135 167 195 137 176 207

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.65      2.46 
2. 3.67 2.47
3. 29 128 201 29 107 212
4. 127 223 267 137 228 257
5. 201 261 304 193 252 287

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.90      2.70 
2. 0.91 2.73

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.76      5.26 
2. 1.77 5.28

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.75      5.24 
2. 1.77 5.29

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.28      3.41 
2. 0.28 3.44
3. 59 93 110 59 68 86
4. 160 436 463 173 437 469
5. 546 850 898 545 848 888

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.56 
2. 0.54 6.63
3. 59 174 193 59 83 177
4. 343 749 783 340 751 796
5. 1147 1527 1616 1195 1564 1640

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.54      6.60 
2. 0.54 6.63
3. 59 172 204 59 83 183
4. 341 750 784 343 750 800
5. 1164 1538 1620 1197 1564 1642

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.42      0.96 
2. 1.44 0.97
3. 29 95 118 29 73 116
4. 98 305 323 101 312 329
5. 229 339 428 235 346 428

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.82      1.90 
2. 2.87 1.93
3. 29 112 213 29 108 214
4. 153 274 301 164 283 310
5. 248 315 423 247 322 390

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.85      1.91 
2. 2.88 1.93
3. 29 121 209 29 105 212
4. 153 274 301 159 279 303
5. 246 306 407 240 306 372

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.75      2.23 
2. 0.75 2.25

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.47      4.38 
2. 1.47 4.40

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.43      4.29 
2. 1.45 4.33

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.90      11.13 
2. 0.91 11.24
3. 29 78 103 29 76 100
4. 111 419 443 106 435 484
5. 383 488 594 378 492 599

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.79      22.05 
2. 1.80 22.16
3. 29 72 90 29 69 85
4. 162 314 363 152 315 358
5. 280 351 406 271 342 386

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.79      21.98 
2. 1.80 22.09
3. 29 67 85 29 68 89
4. 162 305 359 165 297 332
5. 274 349 405 265 341 383

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.87      2.60 
2. 3.91 2.62
3. 25 86 116 25 49 99
4. 45 105 123 46 100 118
5. 119 152 191 120 163 199

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 7.09      4.77 
2. 7.16 4.81
3. 25 74 89 25 86 108
4. 60 100 113 59 101 114
5. 101 129 147 101 129 146

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 7.22      4.86 
2. 7.33 4.93
3. 25 69 83 25 68 86
4. 59 107 128 64 111 131
5. 102 124 143 97 122 136

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.19      6.56 
2. 2.22 6.63

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.23      12.66 
2. 4.30 12.85

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.31      12.89 
2. 4.38 13.09

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.77      9.50 
2. 0.78 9.55
3. 29 82 107 29 73 100
4. 111 420 445 82 430 448
5. 485 675 741 469 667 735

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.54      18.97 
2. 1.55 19.07
3. 29 60 149 29 57 115
4. 151 367 444 143 355 441
5. 311 417 465 308 418 467

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.54      19.00 
2. 1.55 19.10
3. 29 66 114 29 61 113
4. 150 363 442 141 344 436
5. 311 425 474 307 430 480

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.61      2.43 
2. 3.67 2.47
3. 25 97 117 25 88 111
4. 53 128 144 53 131 145
5. 128 160 203 136 170 212

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.78      4.56 
2. 7.02 4.72
3. 25 95 112 25 91 115
4. 67 108 125 56 108 124
5. 105 133 152 106 132 153

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.80      4.57 
2. 6.94 4.66
3. 25 95 118 25 96 118
4. 63 107 126 54 108 126
5. 81 100 115 78 99 116

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.99      5.94 
2. 2.00 5.97

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.87      11.59 
2. 3.89 11.64

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.79      11.35 
2. 3.85 11.52

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.35      4.25 
2. 0.35 4.27
3. 69 108 128 69 107 129
4. 215 489 513 215 479 510
5. 753 932 1074 754 929 1071

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.13 
2. 0.66 8.17
3. 68 197 210 68 192 210
4. 359 763 802 355 766 805
5. 1033 1342 1479 967 1256 1409

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.14 
2. 0.67 8.18
3. 69 166 212 68 115 204
4. 363 764 806 359 767 812
5. 1017 1308 1433 1024 1308 1436

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.73      1.17 
2. 1.75 1.18
3. 30 65 80 30 54 81
4. 69 200 217 51 216 233
5. 235 288 338 237 295 349

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.42      2.30 
2. 3.46 2.32
3. 29 100 198 29 86 195
4. 130 218 256 119 214 255
5. 214 275 337 210 267 323

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 3.45      2.32 
2. 3.47 2.33
3. 29 111 215 29 102 213
4. 126 217 256 116 211 244
5. 206 266 319 204 265 318

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 0.88      2.63 
2. 0.89 2.66

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.69      5.06 
2. 1.72 5.14

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1. 1.71      5.10 
2. 1.72 5.15

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.28      3.39 
2. 0.28 3.42
3. 60 96 122 60 69 86
4. 168 450 490 169 448 478
5. 549 854 912 548 853 897

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.55 
2. 0.53 6.58
3. 60 164 194 60 88 184
4. 354 746 782 347 749 790
5. 1151 1533 1615 1205 1571 1642

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.52 
2. 0.54 6.58
3. 60 170 201 60 84 190
4. 356 748 785 345 744 795
5. 1179 1548 1633 1194 1561 1639

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.37      0.92 
2. 1.38 0.93
3. 29 95 120 29 74 116
4. 105 335 352 110 331 354
5. 240 358 443 249 374 450

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.71      1.82 
2. 2.76 1.85
3. 29 97 189 29 76 115
4. 188 303 326 171 257 316
5. 249 323 385 248 325 382

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 2.75      1.85 
2. 2.76 1.86
3. 29 97 193 29 78 161
4. 175 296 317 183 296 324
5. 236 306 352 241 314 365

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 0.73      2.18 
2. 0.74 2.20

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.42      4.26 
2. 1.44 4.30

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1. 1.41      4.21 
2. 1.43 4.27

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 0.89      10.90 
2. 0.89 10.95
3. 29 78 101 29 64 86
4. 116 429 451 111 428 454
5. 368 521 636 359 521 634

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.76      21.67 
2. 1.77 21.78
3. 29 67 98 29 65 87
4. 160 288 319 168 302 336
5. 279 367 433 279 364 427

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 1.76      21.62 
2. 1.77 21.73
3. 29 69 101 29 66 101
4. 161 291 320 168 302 331
5. 279 371 439 276 363 431

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.48      2.34 
2. 3.51 2.36
3. 25 93 117 25 78 115
4. 47 138 152 52 132 152
5. 125 161 204 127 167 207

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.40      4.30 
2. 6.46 4.34
3. 26 51 69 26 52 71
4. 66 118 135 66 122 139
5. 105 134 154 102 131 153

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 6.60      4.44 
2. 6.77 4.55
3. 26 73 110 25 58 119
4. 60 109 129 61 108 127
5. 109 135 149 107 130 147

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 2.04      6.10 
2. 2.07 6.20

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 4.02      12.02 
2. 4.08 12.20

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1. 3.97      11.86 
2. 4.03 12.04

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 0.75      9.20 
2. 0.75 9.25
3. 30 98 114 30 95 105
4. 81 423 498 88 408 485
5. 413 707 821 407 694 813

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.48      18.23 
2. 1.50 18.41
3. 29 68 134 29 62 110
4. 158 362 470 136 326 396
5. 320 444 497 313 441 492

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.51      18.55 
2. 1.52 18.64
3. 30 66 86 29 61 83
4. 157 361 459 140 327 430
5. 327 451 501 316 442 489

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.28      2.21 
2. 3.32 2.23
3. 26 93 118 26 77 113
4. 45 140 156 56 130 159
5. 132 171 217 135 176 223

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.05      4.07 
2. 6.08 4.09
3. 26 85 129 26 95 137
4. 85 129 147 74 120 151
5. 111 148 166 106 140 160

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 6.32      4.25 
2. 6.35 4.27
3. 26 70 89 26 74 98
4. 70 121 138 69 122 138
5. 107 136 151 109 135 152

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 1.86      5.56 
2. 1.88 5.62

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.62      10.84 
2. 3.68 11.00

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1. 3.53      10.56 
2. 3.62 10.83

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.16 
2. 0.34 4.18
3. 68 108 130 68 89 120
4. 214 483 540 214 472 502
5. 757 935 1068 765 932 1091

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.65      8.03 
2. 0.66 8.07
3. 68 202 211 68 115 208
4. 365 773 817 359 775 823
5. 1068 1368 1472 1051 1334 1448

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.30      15.96 
2. 1.31 16.12
3. 68 139 218 68 121 209
4. 248 541 694 264 549 633
5. 448 584 713 448 581 711

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.51      1.02 
2. 1.53 1.03
3. 29 94 123 29 73 117
4. 63 249 268 68 259 275
5. 224 325 388 259 323 391

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.86      1.92 
2. 2.94 1.98
3. 30 105 178 29 69 100
4. 119 239 269 116 233 260
5. 249 321 410 220 300 395

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.64      3.79 
2. 5.84 3.92
3. 30 74 149 30 54 92
4. 92 143 168 86 149 178
5. 150 181 219 154 192 239

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.82      2.45 
2. 0.82 2.46

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.62      4.83 
2. 1.65 4.93

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.20      9.56 
2. 3.26 9.75

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.32 
2. 0.27 3.33
3. 60 89 115 60 80 106
4. 163 447 476 164 435 467
5. 536 842 893 535 838 880

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.46 
2. 0.53 6.50
3. 60 175 195 60 85 184
4. 351 757 785 345 760 807
5. 1165 1572 1659 1161 1558 1650

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.04      12.83 
2. 1.05 12.96
3. 60 120 207 60 102 202
4. 352 666 803 334 649 747
5. 468 629 718 484 640 733

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.23      0.83 
2. 1.24 0.83
3. 29 96 117 29 71 112
4. 61 358 428 67 378 428
5. 254 390 485 263 397 485

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.39      1.61 
2. 2.44 1.64
3. 29 83 103 30 78 105
4. 89 175 222 77 172 220
5. 155 208 260 154 192 229

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.73      3.18 
2. 4.80 3.23
3. 29 108 134 29 123 152
4. 95 151 181 96 156 186
5. 167 192 218 168 198 225

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.69      2.05 
2. 0.69 2.07

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.37      4.09 
2. 1.38 4.13

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.71      8.11 
2. 2.75 8.23

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.83      10.18 
2. 0.83 10.23
3. 29 82 112 29 73 109
4. 114 430 450 73 436 455
5. 447 606 688 424 593 666

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.59      19.61 
2. 1.61 19.81
3. 29 67 108 29 60 86
4. 127 326 382 129 329 383
5. 297 387 454 288 382 436

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.17      38.98 
2. 3.22 39.57
3. 29 49 74 29 46 71
4. 52 103 126 51 103 116
5. 103 123 137 98 120 133

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.73      1.83 
2. 2.75 1.85
3. 25 88 116 25 72 115
4. 71 181 188 80 178 187
5. 131 177 225 139 177 239

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.12      3.44 
2. 5.22 3.51
3. 26 107 122 26 96 120
4. 74 126 150 67 126 153
5. 127 159 184 119 154 178

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 9.96      6.69 
2. 10.34 6.95
3. 26 44 73 26 42 69
4. 44 62 72 43 66 78
5. 81 105 130 79 98 119

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.78      5.32 
2. 1.80 5.38

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.40      10.17 
2. 3.43 10.27

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.84      20.44 
2. 6.94 20.75

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.72      8.86 
2. 0.72 8.90
3. 29 86 104 29 81 104
4. 114 424 445 102 425 443
5. 424 728 833 428 729 821

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.41      17.38 
2. 1.43 17.55
3. 29 69 129 30 64 109
4. 207 370 447 200 374 448
5. 358 460 523 348 450 515

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.80      34.50 
2. 2.83 34.85
3. 30 53 77 30 50 71
4. 91 121 145 92 123 143
5. 135 175 208 129 167 195

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.60      1.75 
2. 2.63 1.77
3. 26 90 116 25 74 115
4. 68 156 181 32 118 143
5. 137 189 229 150 195 242

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.94      3.32 
2. 5.00 3.36
3. 25 69 92 25 77 100
4. 87 150 177 78 142 172
5. 147 188 222 131 171 195

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 9.14      6.14 
2. 9.71 6.52
3. 26 36 51 26 36 51
4. 57 82 94 57 84 98
5. 96 119 151 107 141 178

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.64      4.91 
2. 1.65 4.94

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.15      9.42 
2. 3.18 9.51

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.28      18.77 
2. 6.44 19.25

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.20 
2. 0.35 4.25
3. 68 107 131 68 88 118
4. 218 491 559 221 472 518
5. 774 946 1094 777 942 1112

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.66      8.15 
2. 0.67 8.19
3. 68 200 216 68 115 210
4. 362 778 821 362 777 831
5. 1028 1332 1463 1030 1338 1505

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.20      14.77 
2. 1.22 14.97
3. 68 137 223 68 115 207
4. 272 566 694 223 533 638
5. 450 635 718 413 554 642

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.65      1.11 
2. 1.68 1.13
3. 29 103 127 29 83 117
4. 84 288 308 95 260 302
5. 264 332 415 274 338 433

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.20      2.15 
2. 3.27 2.20
3. 29 116 202 29 99 193
4. 138 234 285 123 226 273
5. 219 275 317 214 269 302

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.31      3.57 
2. 5.45 3.67
3. 30 58 90 30 56 83
4. 75 126 146 74 124 143
5. 95 134 157 87 117 138

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.85      2.55 
2. 0.86 2.57

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.70      5.07 
2. 1.71 5.12

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.93      8.75 
2. 3.00 8.96

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.35 
2. 0.28 3.39
3. 59 93 122 60 68 88
4. 174 448 465 171 439 465
5. 543 863 948 547 856 941

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.54 
2. 0.53 6.58
3. 60 154 194 60 145 179
4. 351 749 789 343 760 803
5. 1183 1555 1635 1211 1582 1653

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.95      11.64 
2. 0.97 11.88
3. 60 111 197 60 86 179
4. 252 580 730 240 574 740
5. 469 677 796 438 611 742

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.31      0.88 
2. 1.34 0.90
3. 29 92 120 29 74 115
4. 113 329 366 104 302 368
5. 236 400 451 236 380 451

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.58      1.73 
2. 2.61 1.76
3. 29 97 188 29 77 109
4. 144 251 287 115 231 263
5. 275 354 419 265 341 400

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.29      2.88 
2. 4.37 2.93
3. 29 90 180 29 65 161
4. 96 160 188 78 154 179
5. 106 162 212 92 127 187

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.71      2.13 
2. 0.72 2.15

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.42      4.26 
2. 1.44 4.30

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.43      7.26 
2. 2.48 7.41

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.86      10.55 
2. 0.86 10.60
3. 29 79 105 29 65 86
4. 115 435 459 75 431 454
5. 404 557 656 365 553 629

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.67      20.50 
2. 1.68 20.71
3. 29 64 90 29 65 84
4. 145 301 345 132 306 353
5. 306 424 499 290 401 485

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.79      34.30 
2. 2.83 34.87
3. 29 44 61 29 41 57
4. 62 97 120 61 82 98
5. 85 131 169 75 104 120

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.20      2.15 
2. 3.28 2.20
3. 26 93 119 25 48 102
4. 55 137 163 51 123 153
5. 143 177 219 145 183 226

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 5.91      3.97 
2. 6.18 4.15
3. 25 77 98 25 77 92
4. 82 130 145 77 124 138
5. 121 150 174 113 143 166

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 9.66      6.49 
2. 9.76 6.56
3. 25 26 39 25 27 39
4. 45 69 80 48 72 81
5. 64 86 98 64 84 100

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.95      5.84 
2. 1.97 5.90

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.77      11.26 
2. 3.82 11.43

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.24      18.66 
2. 6.40 19.13

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.74      9.12 
2. 0.75 9.17
3. 29 87 106 29 82 104
4. 95 421 487 98 412 467
5. 420 715 824 415 712 816

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.46      17.95 
2. 1.47 18.13
3. 29 84 133 29 73 129
4. 182 338 406 145 341 406
5. 325 448 502 327 443 497

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.45      30.08 
2. 2.48 30.56
3. 29 54 91 30 45 81
4. 53 134 173 47 115 151
5. 104 151 179 89 130 151

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.06      2.06 
2. 3.09 2.08
3. 26 104 120 26 102 115
4. 38 155 192 42 154 193
5. 140 177 230 151 187 233

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.65      3.80 
2. 5.85 3.93
3. 26 70 134 25 43 90
4. 83 133 154 76 129 149
5. 130 163 198 118 152 180

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 9.50      6.39 
2. 9.68 6.50
3. 25 27 48 25 33 52
4. 51 73 84 48 76 83
5. 68 91 105 60 80 94

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.79      5.34 
2. 1.80 5.37

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.46      10.36 
2. 3.51 10.51

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.81      17.37 
2. 5.91 17.67

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.24 
2. 0.35 4.26
3. 68 106 131 68 88 118
4. 209 477 557 209 470 537
5. 721 918 1006 723 915 1011

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.67      8.18 
2. 0.67 8.23
3. 68 200 219 68 115 209
4. 359 775 819 363 775 836
5. 1020 1312 1464 1020 1335 1487

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.72      8.88 
2. 0.73 8.97
3. 68 85 131 68 70 93
4. 185 316 341 70 206 227
5. 373 545 630 161 300 339

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.71      1.15 
2. 1.73 1.16
3. 29 97 119 29 79 117
4. 76 262 277 79 261 277
5. 216 320 372 232 327 375

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.29      2.21 
2. 3.36 2.26
3. 29 98 164 29 69 162
4. 123 220 268 110 224 272
5. 220 278 329 206 266 318

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.28      2.20 
2. 3.36 2.26
3. 29 87 112 29 51 72
4. 50 91 137 45 68 87
5. 116 161 187 55 97 111

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.87      2.60 
2. 0.88 2.62

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.71      5.11 
2. 1.73 5.19

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.79      5.36 
2. 1.82 5.43

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.37 
2. 0.28 3.39
3. 59 96 119 59 68 86
4. 162 444 523 163 439 491
5. 538 846 915 536 837 879

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.53      6.58 
2. 0.54 6.61
3. 59 171 193 59 88 184
4. 342 753 788 341 756 807
5. 1215 1581 1663 1121 1513 1592

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.57      7.00 
2. 0.57 7.07
3. 59 86 151 60 63 113
4. 224 532 583 60 360 392
5. 664 1023 1121 243 644 741

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.36      0.91 
2. 1.37 0.92
3. 29 94 119 29 72 117
4. 102 331 358 104 325 352
5. 249 349 446 248 361 453

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.64      1.78 
2. 2.68 1.80
3. 29 95 182 29 81 164
4. 177 265 337 135 247 338
5. 265 334 403 256 331 404

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.64      1.78 
2. 2.68 1.80
3. 29 85 162 29 34 115
4. 114 205 242 31 83 115
5. 182 246 277 82 153 179

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.73      2.18 
2. 0.73 2.18

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.45      4.32 
2. 1.45 4.34

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.48      4.43 
2. 1.50 4.50

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.87      10.77 
2. 0.88 10.82
3. 29 77 110 29 63 87
4. 107 425 450 63 430 452
5. 376 525 633 347 510 572

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.70      20.95 
2. 1.72 21.16
3. 29 71 94 29 65 95
4. 157 290 320 152 297 326
5. 278 391 462 269 374 452

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.70      20.98 
2. 1.72 21.22
3. 29 77 97 29 40 58
4. 74 193 212 29 76 89
5. 155 237 281 49 86 106

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.42      2.30 
2. 3.45 2.32
3. 25 86 116 25 72 112
4. 53 126 150 54 121 144
5. 112 153 197 116 160 202

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.42      4.32 
2. 6.51 4.38
3. 26 60 94 26 48 76
4. 50 81 102 48 80 102
5. 59 71 82 58 70 81

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.50      4.37 
2. 6.57 4.42
3. 25 48 80 25 48 76
4. 46 90 105 38 66 82
5. 68 89 102 46 62 73

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.04      6.09 
2. 2.05 6.12

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.97      11.87 
2. 4.03 12.05

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.00      11.96 
2. 4.08 12.21

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.75      9.26 
2. 0.76 9.31
3. 29 89 106 29 84 107
4. 114 425 448 88 427 447
5. 461 687 782 405 698 804

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.49      18.39 
2. 1.51 18.58
3. 29 66 94 29 59 79
4. 146 337 454 139 328 406
5. 308 432 476 309 434 478

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.50      18.47 
2. 1.52 18.67
3. 29 44 93 29 33 55
4. 67 254 290 30 112 150
5. 145 258 271 57 128 141

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.25      2.19 
2. 3.29 2.21
3. 25 91 114 25 82 107
4. 51 142 159 52 137 159
5. 122 159 195 131 162 215

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.01      4.04 
2. 6.10 4.10
3. 25 61 90 25 60 81
4. 52 86 102 51 84 96
5. 84 108 127 81 103 123

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 6.24      4.19 
2. 6.33 4.26
3. 25 48 63 25 42 55
4. 53 104 113 42 76 86
5. 84 104 116 54 73 82

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.86      5.57 
2. 1.87 5.60

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.68      11.01 
2. 3.72 11.12

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 3.71      11.09 
2. 3.75 11.22

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.34      4.15 
2. 0.34 4.15
3. 68 110 132 68 110 130
4. 211 476 544 211 471 519
5. 734 926 1033 749 922 1057

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.64      7.93 
2. 0.65 8.01
3. 68 196 210 69 182 210
4. 366 766 808 353 767 810
5. 1060 1343 1468 1068 1336 1465

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.27      15.60 
2. 1.28 15.75
3. 69 141 223 69 122 213
4. 272 551 628 254 525 623
5. 445 598 783 445 584 696

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.46      0.98 
2. 1.48 0.99
3. 29 98 123 29 72 117
4. 91 286 306 95 284 304
5. 233 322 391 229 312 391

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 2.83      1.90 
2. 2.86 1.92
3. 29 150 207 29 95 201
4. 143 272 303 157 284 315
5. 261 339 433 254 320 397

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 5.29      3.56 
2. 5.48 3.68
3. 30 83 108 30 91 109
4. 99 163 181 103 164 189
5. 136 169 203 140 176 219

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 0.80      2.39 
2. 0.81 2.42

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 1.59      4.76 
2. 1.61 4.80

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1. 3.09      9.26 
2. 3.11 9.30

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.27      3.31 
2. 0.27 3.32
3. 60 84 130 60 68 87
4. 169 452 471 170 420 457
5. 543 847 901 529 846 884

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.52      6.41 
2. 0.53 6.48
3. 60 170 193 60 85 182
4. 343 745 782 341 747 798
5. 1200 1584 1692 1165 1551 1695

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.02      12.58 
2. 1.03 12.71
3. 60 153 209 60 151 202
4. 349 692 823 257 635 725
5. 489 659 757 504 674 773

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.20      0.81 
2. 1.20 0.81
3. 29 93 115 29 77 115
4. 76 412 455 92 392 449
5. 263 404 486 263 402 486

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.26      1.52 
2. 2.29 1.54
3. 29 65 127 29 45 121
4. 76 203 292 68 195 283
5. 201 260 316 196 241 294

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 4.40      2.95 
2. 4.51 3.03
3. 29 108 203 29 94 192
4. 93 169 200 97 174 206
5. 180 206 229 128 195 223

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 0.68      2.02 
2. 0.68 2.03

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 1.35      4.04 
2. 1.36 4.06

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1. 2.63      7.86 
2. 2.66 7.94

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 0.80      9.85 
2. 0.82 10.04
3. 29 78 107 29 64 90
4. 106 423 441 112 419 438
5. 444 613 688 416 609 668

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.53      18.88 
2. 1.57 19.36
3. 29 65 105 29 57 86
4. 136 334 392 119 331 389
5. 301 381 446 284 371 427

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.05      37.54 
2. 3.07 37.73
3. 29 48 80 29 47 82
4. 64 119 154 63 118 146
5. 98 116 136 98 119 132

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 2.57      1.72 
2. 2.58 1.73
3. 25 90 115 25 68 111
4. 42 132 167 45 122 151
5. 131 188 210 130 194 225

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 4.68      3.14 
2. 4.79 3.22
3. 25 111 132 25 109 139
4. 76 151 167 75 157 174
5. 166 197 249 155 184 210

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 8.33      5.60 
2. 8.75 5.88
3. 26 62 88 26 65 87
4. 58 82 93 66 90 104
5. 69 91 113 76 97 122

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 1.69      5.07 
2. 1.71 5.12

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 3.22      9.63 
2. 3.25 9.73

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 6.27      18.76 
2. 6.37 19.04

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 0.71      8.71 
2. 0.71 8.75
3. 30 79 91 30 63 85
4. 116 426 448 92 425 446
5. 443 737 771 443 704 763

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.38      17.04 
2. 1.40 17.21
3. 29 43 61 29 38 63
4. 208 373 436 199 373 440
5. 293 381 431 288 367 418

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.69      33.06 
2. 2.70 33.23
3. 30 50 73 30 49 66
4. 60 143 154 49 145 156
5. 125 160 182 123 160 182

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.45      1.65 
2. 2.48 1.67
3. 26 102 116 26 91 112
4. 48 154 167 54 156 174
5. 142 188 238 142 186 245

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 4.56      3.06 
2. 4.63 3.11
3. 26 136 164 26 109 159
4. 82 154 174 73 136 168
5. 183 207 243 156 181 207

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 8.76      5.89 
2. 8.89 5.98
3. 26 64 95 26 58 78
4. 57 87 98 59 90 103
5. 68 85 114 75 89 117

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 1.56      4.67 
2. 1.57 4.69

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 2.97      8.89 
2. 3.00 8.98

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 5.86      17.53 
2. 5.95 17.80

ip4

10ge2p1vic1227-dot1q-ip4base-ndrpdr

RFC2544: Pkt throughput IPv4 routing with IEEE 802.1Q test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 for IPv4 routing. IEEE 802.1Q tagging is applied on link between DUT1 and DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and two static IPv4 /30 route entries. DUT1 and DUT2 tested with Cisco-VIC-1227.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, 254 flows per flow-group) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces.

  • [Ref] Applicable standard specifications: RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c- 
dot1q-ip4base-ndrpdr

 1. 1.39      17.08 
2. 1.61 19.85
3. 22 22 24 22 22 23
4. 25 30 33 23 29 33
5. 26 33 37 25 29 35

 1518b-2t2c- 
dot1q-ip4base-ndrpdr

 1. 1.61      19.75 
2. 1.61 19.85
3. 22 22 24 22 22 24
4. 21 27 29 21 27 30
5. 22 29 30 21 29 31

 1518b-4t4c- 
dot1q-ip4base-ndrpdr

 1. 1.59      19.55 
2. 1.61 19.85
3. 22 22 23 22 22 24
4. 22 27 29 21 23 28
5. 21 25 27 20 25 27

 64b-1t1c-dot1q-ip4base-ndrpdr 

 1. 8.08      5.43 
2. 10.07 6.77
3. 18 26 50 17 21 38
4. 36 56 63 33 56 64
5. 95 115 130 96 115 134

 64b-2t2c-dot1q-ip4base-ndrpdr 

 1. 12.38      8.32 
2. 16.47 11.07
3. 17 21 24 17 21 23
4. 18 22 26 21 29 35
5. 38 45 50 36 44 48

 64b-4t4c-dot1q-ip4base-ndrpdr 

 1. 14.20      9.54 
2. 17.61 11.83
3. 15 17 21 17 18 20
4. 17 25 28 17 24 27
5. 21 25 27 21 24 28

 imix-1t1c-dot1q-ip4base-ndrpdr 

 1. 4.64      13.88 
2. 6.58 19.69

 imix-2t2c-dot1q-ip4base-ndrpdr 

 1. 4.48      13.40 
2. 6.58 19.69

 imix-4t4c-dot1q-ip4base-ndrpdr 

 1. 4.41      13.20 
2. 6.58 19.69

10ge2p1vic1227-ethip4-ip4base-copwhtlistbase-ndrpdr

RFC2544: Pkt throughput IPv4 whitelist test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 for IPv4 routing.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing, two static IPv4 /24 routes and IPv4 COP security whitelist ingress /24 filter entries applied on links TG - DUT1 and DUT2 - TG. DUT1 and DUT2 tested with Cisco-VIC-1227.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, 253 flows per flow-group) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces.

  • [Ref] Applicable standard specifications: RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4- 
ip4base-copwhtlistbase-ndrpdr

 1. 1.54      18.93 
2. 1.62 19.90
3. 22 22 24 22 23 24
4. 22 29 32 22 27 31
5. 26 33 37 26 33 37

 1518b-2t2c-ethip4- 
ip4base-copwhtlistbase-ndrpdr

 1. 1.34      16.46 
2. 1.62 19.90
3. 22 22 25 22 22 25
4. 22 25 28 22 25 28
5. 22 29 32 21 25 30

 1518b-4t4c-ethip4- 
ip4base-copwhtlistbase-ndrpdr

 1. 1.56      19.21 
2. 1.62 19.90
3. 22 22 23 22 22 23
4. 22 25 28 22 24 28
5. 21 28 30 20 24 26

 64b-1t1c-ethip4- 
ip4base-copwhtlistbase-ndrpdr

 1. 7.33      4.92 
2. 9.36 6.29
3. 17 21 30 17 21 33
4. 28 44 52 31 45 53
5. 71 86 100 75 90 104

 64b-2t2c-ethip4- 
ip4base-copwhtlistbase-ndrpdr

 1. 12.96      8.71 
2. 17.32 11.64
3. 17 25 35 17 20 26
4. 27 40 49 26 38 47
5. 38 45 52 37 44 50

 64b-4t4c-ethip4- 
ip4base-copwhtlistbase-ndrpdr

 1. 13.08      8.79 
2. 18.38 12.35
3. 17 18 20 17 18 19
4. 16 20 24 16 19 24
5. 20 24 28 21 24 28

 imix-1t1c-ethip4- 
ip4base-copwhtlistbase-ndrpdr

 1. 4.78      14.31 
2. 6.65 19.90

 imix-2t2c-ethip4- 
ip4base-copwhtlistbase-ndrpdr

 1. 4.67      13.95 
2. 6.65 19.90

 imix-4t4c-ethip4- 
ip4base-copwhtlistbase-ndrpdr

 1. 4.53      13.54 
2. 6.65 19.90

10ge2p1vic1227-ethip4-ip4base-iacldstbase-ndrpdr

RFC2544: Pkt throughput IPv4 iAcl whitelist test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 for IPv4 routing.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing, two static IPv4 /24 routes and IPv4 iAcl security whitelist ingress /24 filter entries applied on links TG - DUT1 and DUT2 - TG. DUT1 and DUT2 tested with Cisco-VIC-1227.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, 253 flows per flow-group) with all packets containing Ethernet header, IPv6 header and generated payload. MAC addresses are matching MAC addresses of the TG node interfaces.

  • [Ref] Applicable standard specifications: RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4- 
ip4base-iacldstbase-ndrpdr

 1. 1.59      19.51 
2. 1.62 19.90
3. 22 28 33 22 28 34
4. 25 32 35 23 33 37
5. 27 34 38 27 34 38

 1518b-2t2c-ethip4- 
ip4base-iacldstbase-ndrpdr

 1. 1.59      19.51 
2. 1.62 19.90
3. 22 22 27 22 23 27
4. 22 27 30 21 25 30
5. 22 29 31 21 29 31

 1518b-4t4c-ethip4- 
ip4base-iacldstbase-ndrpdr

 1. 1.47      18.10 
2. 1.62 19.90
3. 22 22 25 22 23 25
4. 22 25 28 22 25 28
5. 21 27 30 21 24 26

 64b-1t1c-ethip4- 
ip4base-iacldstbase-ndrpdr

 1. 6.76      4.54 
2. 8.26 5.55
3. 17 49 59 17 42 59
4. 64 70 74 59 70 76
5. 94 119 136 101 123 140

 64b-2t2c-ethip4- 
ip4base-iacldstbase-ndrpdr

 1. 12.15      8.17 
2. 14.99 10.08
3. 17 21 27 17 20 26
4. 23 38 47 22 37 45
5. 47 55 64 46 54 62

 64b-4t4c-ethip4- 
ip4base-iacldstbase-ndrpdr

 1. 12.97      8.72 
2. 18.40 12.37
3. 17 18 20 17 18 23
4. 20 27 32 19 25 31
5. 25 29 35 24 29 34

 imix-1t1c-ethip4- 
ip4base-iacldstbase-ndrpdr

 1. 4.93      14.74 
2. 6.65 19.90

 imix-2t2c-ethip4- 
ip4base-iacldstbase-ndrpdr

 1. 4.64      13.89 
2. 6.65 19.90

 imix-4t4c-ethip4- 
ip4base-iacldstbase-ndrpdr

 1. 4.29      12.82 
2. 6.65 19.90

10ge2p1vic1227-ethip4-ip4base-ipolicemarkbase-ndrpdr

RFC2544: Pkt throughput IPv4 policer test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 for IPv4 routing.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and two static IPv4 /24 route entries and policer with 2R3C color-aware configuration. Policer is applied on links TG - DUT1 and DUT2 - TG. DUT1 and DUT2 tested with Cisco-VIC-1227.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, 253 flows per flow-group) with all packets containing Ethernet header, IPv6 header and generated payload. MAC addresses are matching MAC addresses of the TG node interfaces.

  • [Ref] Applicable standard specifications: RFC2544, RFC2698.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4- 
ip4base-ipolicemarkbase-ndrpdr

 1. 1.61      19.80 
2. 1.62 19.90
3. 22 22 23 22 22 23
4. 22 33 37 23 34 37
5. 27 34 38 27 35 38

 1518b-2t2c-ethip4- 
ip4base-ipolicemarkbase-ndrpdr

 1. 1.61      19.80 
2. 1.62 19.90
3. 22 22 26 22 22 25
4. 22 26 29 20 23 30
5. 22 30 33 22 25 32

 1518b-4t4c-ethip4- 
ip4base-ipolicemarkbase-ndrpdr

 1. 1.23      15.19 
2. 1.62 19.90
3. 22 22 23 22 22 23
4. 22 25 27 21 22 24
5. 21 28 30 21 28 30

 64b-1t1c-ethip4- 
ip4base-ipolicemarkbase-ndrpdr

 1. 6.56      4.41 
2. 8.05 5.41
3. 17 40 55 17 18 43
4. 49 59 65 35 53 61
5. 96 120 138 103 124 141

 64b-2t2c-ethip4- 
ip4base-ipolicemarkbase-ndrpdr

 1. 11.62      7.81 
2. 14.34 9.63
3. 17 24 36 17 24 38
4. 24 37 46 25 37 45
5. 46 55 63 43 52 61

 64b-4t4c-ethip4- 
ip4base-ipolicemarkbase-ndrpdr

 1. 12.88      8.66 
2. 18.28 12.28
3. 17 22 33 17 20 30
4. 21 31 37 19 30 34
5. 29 38 47 26 32 39

 imix-1t1c-ethip4- 
ip4base-ipolicemarkbase-ndrpdr

 1. 4.60      13.75 
2. 6.65 19.90

 imix-2t2c-ethip4- 
ip4base-ipolicemarkbase-ndrpdr

 1. 4.60      13.75 
2. 6.65 19.90

 imix-4t4c-ethip4- 
ip4base-ipolicemarkbase-ndrpdr

 1. 4.57      13.68 
2. 6.65 19.90

10ge2p1vic1227-ethip4-ip4base-ndrpdr

RFC2544: Pkt throughput IPv4 routing test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 for IPv4 routing.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and two static IPv4 /24 route entries. DUT1 and DUT2 tested with Cisco-VIC-1227.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, 253 flows per flow-group) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces.

  • [Ref] Applicable standard specifications: RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c- 
ethip4-ip4base-ndrpdr

 1. 1.58      19.41 
2. 1.62 19.90
3. 22 26 31 22 24 32
4. 22 30 34 22 31 34
5. 26 32 35 24 31 35

 1518b-2t2c- 
ethip4-ip4base-ndrpdr

 1. 1.59      19.51 
2. 1.62 19.90
3. 22 22 22 22 22 23
4. 22 23 27 22 23 27
5. 22 28 31 22 28 31

 1518b-4t4c- 
ethip4-ip4base-ndrpdr

 1. 1.59      19.51 
2. 1.62 19.90
3. 22 23 26 22 23 26
4. 22 22 27 21 22 27
5. 21 28 30 21 28 30

 64b-1t1c-ethip4-ip4base-ndrpdr 

 1. 8.52      5.73 
2. 10.30 6.92
3. 17 45 51 17 34 50
4. 37 52 57 39 53 57
5. 91 111 134 95 115 140

 64b-2t2c-ethip4-ip4base-ndrpdr 

 1. 12.54      8.42 
2. 17.35 11.66
3. 17 27 34 17 27 34
4. 28 39 48 27 38 45
5. 36 44 53 35 43 48

 64b-4t4c-ethip4-ip4base-ndrpdr 

 1. 12.83      8.62 
2. 18.47 12.42
3. 17 17 19 17 18 21
4. 17 21 25 16 21 25
5. 19 23 27 18 22 26

 imix-1t1c- 
ethip4-ip4base-ndrpdr

 1. 4.93      14.74 
2. 6.65 19.90

 imix-2t2c- 
ethip4-ip4base-ndrpdr

 1. 4.76      14.24 
2. 6.65 19.90

 imix-4t4c- 
ethip4-ip4base-ndrpdr

 1. 4.42      13.21 
2. 6.65 19.90

10ge2p1vic1227-ethip4-ip4scale200k-ndrpdr

RFC2544: Pkt throughput IPv4 routing test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 for IPv4 routing.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and 2x100k static IPv4 /32 route entries. DUT1 and DUT2 tested with Cisco-VIC-1227.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, 100k flows per flow-group) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces.

  • [Ref] Applicable standard specifications: RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c- 
ethip4-ip4scale200k-ndrpdr

 1. 1.57      19.31 
2. 1.62 19.90
3. 22 23 29 22 23 28
4. 23 30 34 22 27 31
5. 26 33 37 25 32 36

 1518b-2t2c- 
ethip4-ip4scale200k-ndrpdr

 1. 1.61      19.80 
2. 1.62 19.90
3. 22 22 22 22 22 23
4. 22 24 28 21 22 26
5. 22 30 33 22 25 31

 1518b-4t4c- 
ethip4-ip4scale200k-ndrpdr

 1. 1.46      18.01 
2. 1.62 19.90
3. 22 22 25 22 22 25
4. 22 23 27 21 22 25
5. 22 28 30 21 29 31

 64b-1t1c- 
ethip4-ip4scale200k-ndrpdr

 1. 7.91      5.31 
2. 9.80 6.59
3. 17 23 41 17 20 29
4. 26 46 53 25 46 52
5. 101 123 148 106 130 153

 64b-2t2c- 
ethip4-ip4scale200k-ndrpdr

 1. 12.90      8.67 
2. 17.32 11.64
3. 17 23 32 17 20 33
4. 21 36 41 20 34 40
5. 36 44 50 35 43 48

 64b-4t4c- 
ethip4-ip4scale200k-ndrpdr

 1. 13.01      8.74 
2. 18.37 12.35
3. 15 17 19 17 18 19
4. 17 21 24 17 21 25
5. 18 22 26 18 22 25

 imix-1t1c- 
ethip4-ip4scale200k-ndrpdr

 1. 5.05      15.12 
2. 6.65 19.90

 imix-2t2c- 
ethip4-ip4scale200k-ndrpdr

 1. 4.57      13.68 
2. 6.65 19.90

 imix-4t4c- 
ethip4-ip4scale200k-ndrpdr

 1. 4.53      13.54 
2. 6.65 19.90

10ge2p1vic1227-ethip4-ip4scale20k-ndrpdr

RFC2544: Pkt throughput IPv4 routing test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 for IPv4 routing.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and 2x10k static IPv4 /32 route entries. DUT1 and DUT2 tested with Cisco-VIC-1227.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, 10k flows per flow-group) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces.

  • [Ref] Applicable standard specifications: RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c- 
ethip4-ip4scale20k-ndrpdr

 1. 1.62      19.90 
2. 1.62 19.90
3. 22 23 24 22 23 24
4. 25 29 32 24 29 32
5. 27 31 34 26 30 33

 1518b-2t2c- 
ethip4-ip4scale20k-ndrpdr

 1. 1.62      19.90 
2. 1.62 19.90
3. 22 22 23 22 22 23
4. 22 23 28 21 23 28
5. 22 28 31 22 28 31

 1518b-4t4c- 
ethip4-ip4scale20k-ndrpdr

 1. 1.61      19.80 
2. 1.62 19.90
3. 22 22 25 22 22 25
4. 22 24 27 22 23 26
5. 22 29 31 22 29 31

 64b-1t1c- 
ethip4-ip4scale20k-ndrpdr

 1. 7.97      5.35 
2. 9.73 6.54
3. 16 21 26 17 19 21
4. 25 43 49 25 44 50
5. 92 111 130 99 118 142

 64b-2t2c- 
ethip4-ip4scale20k-ndrpdr

 1. 12.91      8.68 
2. 17.34 11.65
3. 17 28 37 17 20 26
4. 25 36 44 24 35 42
5. 40 47 56 38 45 51

 64b-4t4c- 
ethip4-ip4scale20k-ndrpdr

 1. 15.02      10.09 
2. 18.35 12.33
3. 15 17 22 17 18 21
4. 16 20 24 16 20 24
5. 19 23 27 18 22 26

 imix-1t1c- 
ethip4-ip4scale20k-ndrpdr

 1. 4.78      14.31 
2. 6.65 19.90

 imix-2t2c- 
ethip4-ip4scale20k-ndrpdr

 1. 4.60      13.75 
2. 6.65 19.90

 imix-4t4c- 
ethip4-ip4scale20k-ndrpdr

 1. 4.67      13.95 
2. 6.65 19.90

10ge2p1vic1227-ethip4-ip4scale2m-ndrpdr

RFC2544: Pkt throughput IPv4 routing test cases

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 for IPv4 routing.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and 2x1M static IPv4 /32 route entries. DUT1 and DUT2 tested with Cisco-VIC-1227.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, 1M flows per flow-group) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces.

  • [Ref] Applicable standard specifications: RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c- 
ethip4-ip4scale2m-ndrpdr

 1. 1.61      19.80 
2. 1.62 19.90
3. 22 23 27 22 22 24
4. 22 29 32 22 26 32
5. 26 29 35 25 29 34

 1518b-2t2c- 
ethip4-ip4scale2m-ndrpdr

 1. 1.61      19.80 
2. 1.62 19.90
3. 22 23 29 22 23 29
4. 22 26 29 22 26 29
5. 23 29 31 23 29 32

 1518b-4t4c- 
ethip4-ip4scale2m-ndrpdr

 1. 1.49      18.37 
2. 1.62 19.90
3. 22 23 27 22 23 26
4. 22 24 27 22 24 27
5. 22 30 32 22 26 29

 64b-1t1c- 
ethip4-ip4scale2m-ndrpdr

 1. 6.78      4.56 
2. 8.58 5.77
3. 17 41 53 17 40 49
4. 39 52 59 41 53 61
5. 96 119 138 103 122 143

 64b-2t2c- 
ethip4-ip4scale2m-ndrpdr

 1. 12.76      8.58 
2. 16.39 11.01
3. 16 29 39 17 21 36
4. 21 28 35 28 36 42
5. 48 56 63 47 55 62

 64b-4t4c- 
ethip4-ip4scale2m-ndrpdr

 1. 13.04      8.76 
2. 18.13 12.18
3. 17 21 28 17 19 27
4. 21 29 35 20 28 32
5. 20 24 28 19 24 28

 imix-1t1c- 
ethip4-ip4scale2m-ndrpdr

 1. 5.11      15.27 
2. 6.65 19.90

 imix-2t2c- 
ethip4-ip4scale2m-ndrpdr

 1. 4.69      14.02 
2. 6.65 19.90

 imix-4t4c- 
ethip4-ip4scale2m-ndrpdr

 1. 4.26      12.75 
2. 6.65 19.90

10ge2p1vic1227-ethip4udp-ip4base-iacl1sf-100flows-ndrpdr

RFC2544: Packet throughput IPv4 test cases with ACL

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4-UDP for IPv4 routing.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and one static IPv4 /24 route entries. Required ACL rules are applied to input paths of both DUT1 intefaces. DUT1 and DUT2 are tested with Cisco-VIC-1227.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, 100 flows per flow-group) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces.

  • [Ref] Applicable standard specifications: RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4udp- 
ip4base-iacl1sf-100flows-ndrpdr

 1. 1.51      18.55 
2. 1.62 19.90
3. 22 22 23 22 22 23
4. 25 30 33 22 28 31
5. 27 33 37 25 33 37

 1518b-2t2c-ethip4udp- 
ip4base-iacl1sf-100flows-ndrpdr

 1. 1.61      19.80 
2. 1.62 19.90
3. 22 22 26 22 22 26
4. 22 25 27 21 22 26
5. 22 29 31 22 29 32

 1518b-4t4c-ethip4udp- 
ip4base-iacl1sf-100flows-ndrpdr

 1. 1.56      19.21 
2. 1.62 19.90
3. 22 22 26 22 23 26
4. 22 23 26 22 23 26
5. 22 29 31 21 25 28

 64b-1t1c-ethip4udp- 
ip4base-iacl1sf-100flows-ndrpdr

 1. 5.51      3.70 
2. 5.68 3.82
3. 17 22 29 17 25 35
4. 22 76 94 35 93 99
5. 64 95 123 76 96 108

 64b-2t2c-ethip4udp- 
ip4base-iacl1sf-100flows-ndrpdr

 1. 9.75      6.55 
2. 11.16 7.50
3. 17 25 32 17 20 26
4. 30 46 55 29 45 53
5. 52 68 78 50 63 71

 64b-4t4c-ethip4udp- 
ip4base-iacl1sf-100flows-ndrpdr

 1. 12.58      8.46 
2. 17.33 11.65
3. 15 22 28 17 18 20
4. 23 34 39 19 29 35
5. 28 36 47 30 39 51

 imix-1t1c-ethip4udp- 
ip4base-iacl1sf-100flows-ndrpdr

 1. 4.80      14.34 
2. 5.66 16.92

 imix-2t2c-ethip4udp- 
ip4base-iacl1sf-100flows-ndrpdr

 1. 4.29      12.82 
2. 6.65 19.90

 imix-4t4c-ethip4udp- 
ip4base-iacl1sf-100flows-ndrpdr

 1. 4.50      13.47 
2. 6.65 19.90

10ge2p1vic1227-ethip4udp-ip4base-iacl1sf-100kflows-ndrpdr

RFC2544: Packet throughput IPv4 test cases with ACL

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4-UDP for IPv4 routing.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and one static IPv4 /24 route entries. Required ACL rules are applied to input paths of both DUT1 intefaces. DUT1 and DUT2 are tested with Cisco-VIC-1227.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, 100k flows per flow-group) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces.

  • [Ref] Applicable standard specifications: RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load, one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 1518b-1t1c-ethip4udp- 
ip4base-iacl1sf-100kflows-ndrpdr

 1. 1.61      19.80 
2. 1.62 19.90
3. 22 23 30 22 23 30
4. 25 31 35 23 29 34
5. 27 35 39 26 33 38

 1518b-2t2c-ethip4udp- 
ip4base-iacl1sf-100kflows-ndrpdr

 1. 1.61      19.80 
2. 1.62 19.90
3. 22 24 26 22 23 26
4. 22 25 28 21 22 26
5. 22 29 32 22 26 31

 1518b-4t4c-ethip4udp- 
ip4base-iacl1sf-100kflows-ndrpdr

 1. 1.61      19.80 
2. 1.62 19.90
3. 22 23 28 22 23 28
4. 22 27 30 22 24 29
5. 22 25 27 21 24 26

 64b-1t1c-ethip4udp- 
ip4base-iacl1sf-100kflows-ndrpdr

 1. 5.55      3.73 
2. 5.63 3.78
3. 17 20 28 17 21 28
4. 22 68 82 21 76 85
5. 69 97 124 71 99 114

 64b-2t2c-ethip4udp- 
ip4base-iacl1sf-100kflows-ndrpdr

 1. 9.98      6.71 
2. 10.92 7.34
3. 17 22 29 17 20 26
4. 29 49 57 29 46 55
5. 42 52 61 45 55 62

 64b-4t4c-ethip4udp- 
ip4base-iacl1sf-100kflows-ndrpdr

 1. 13.01      8.74 
2. 17.39 11.68
3. 17 26 33 17 18 25
4. 23 33 37 20 33 40
5. 30 36 43 34 47 66

 imix-1t1c-ethip4udp- 
ip4base-iacl1sf-100kflows-ndrpdr

 1. 4.93      14.74 
2. 5.59 16.70

 imix-2t2c-ethip4udp- 
ip4base-iacl1sf-100kflows-ndrpdr

 1. 4.53      13.54 
2. 6.65 19.90

 imix-4t4c-ethip4udp- 
ip4base-iacl1sf-100kflows-ndrpdr

 1. 4.62      13.81 
2. 6.65 19.90

10ge2p1vic1227-ethip4udp-ip4base-iacl1sf-10kflows-ndrpdr

RFC2544: Packet throughput IPv4 test cases with ACL

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4-UDP for IPv4 routing.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with IPv4 routing and one static IPv4 /24 route entries. Required ACL rules are applied to input paths of both DUT1 intefaces. DUT1 and DUT2 are tested with Cisco-VIC-1227.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch li