3n-icx-e810cq

100ge2p1e810cq-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.98       3.86 
2. 3.05 3.96

3. 18 49 58 17 36 47
4. 61 97 130 52 73 82
5. 152 183 211 149 182 215

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.72       7.41 
2. 5.72 7.41

3. 18 29 40 18 28 37
4. 75 93 105 37 45 52
5. 169 197 220 169 197 221

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  9.97      12.93 
2. 10.07 13.06

3. 18 26 35 19 29 35
4. 45 60 71 46 60 70
5. 180 215 243 179 213 241

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.93      12.04 
2. 0.93 12.04

3. 38 74 89 42 60 73
4. 90 203 308 133 230 270
5. 391 489 577 363 479 579

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.84      23.73 
2. 1.84 23.73

3. 34 68 79 34 64 75
4. 105 164 202 98 176 235
5. 366 435 515 356 438 520

 1518b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.45      44.66 
2. 3.52 45.56

3. 34 80 104 34 67 94
4. 114 148 181 99 156 183
5. 372 441 489 374 437 487

100ge2p1e810cq-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.47       3.83 
2. 4.28 4.73

3. 14 30 46 14 26 43
4. 31 55 67 32 51 71
5. 80 102 228 80 103 246

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.44       8.21 
2. 7.89 8.71

3. 15 24 34 15 23 37
4. 33 46 60 32 46 63
5. 92 112 132 90 111 133

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 14.23      15.71 
2. 14.74 16.27

3. 17 25 33 15 21 27
4. 34 45 52 34 44 52
5. 109 136 169 107 134 166

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.97      25.11 
2. 2.03 25.87

3. 18 37 51 18 29 40
4. 37 135 157 39 76 93
5. 120 165 201 115 173 221

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.67      46.73 
2. 3.67 46.73

3. 18 28 36 18 34 54
4. 32 49 84 32 61 76
5. 92 113 129 83 107 135

 1518b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.41      81.70 
2. 6.41 81.70

3. 18 24 29 19 26 33
4. 32 45 54 32 47 57
5. 81 100 118 81 102 118

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.89       9.89 
2. 3.14 10.76

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.40      18.50 
2. 5.40 18.50

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.99      34.21 
2. 9.99 34.21

100ge2p1e810cq-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.04       3.94 
2. 3.10 4.02

3. 17 27 35 17 30 42
4. 55 83 99 43 64 91
5. 152 185 206 151 185 209

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.92       7.67 
2. 5.98 7.75

3. 20 25 35 19 28 33
4. 56 69 80 42 61 75
5. 175 201 219 176 199 216

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1. 11.09      14.37 
2. 11.23 14.56

3. 18 27 36 18 28 37
4. 48 60 71 51 62 71
5. 187 219 241 185 217 239

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.95      12.30 
2. 0.95 12.30

3. 33 103 118 33 47 113
4. 186 384 423 165 326 399
5. 391 486 582 358 454 546

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.87      24.23 
2. 1.88 24.35

3. 54 75 82 38 80 95
4. 116 159 180 118 188 244
5. 381 447 501 378 450 498

 1518b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.75      48.48 
2. 3.77 48.72

3. 34 87 107 34 63 94
4. 110 141 167 110 141 169
5. 392 461 513 394 461 513

100ge2p1e810cq-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.98       5.49 
2. 5.00 5.52

3. 14 22 30 14 19 24
4. 26 49 60 27 47 58
5. 76 92 104 76 92 103

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.02      11.06 
2. 10.08 11.13

3. 14 25 33 14 24 32
4. 31 42 48 30 40 48
5. 85 99 110 82 97 109

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 22.08      24.37 
2. 22.52 24.87

3. 15 21 25 14 20 25
4. 33 40 46 33 39 45
5. 110 142 173 109 142 174

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.76      35.14 
2. 2.76 35.14

3. 17 41 49 17 28 37
4. 30 49 59 35 58 75
5. 99 120 138 101 120 136

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.41      68.96 
2. 5.44 69.30

3. 17 28 36 18 27 36
4. 34 48 62 38 51 61
5. 109 129 145 107 127 144

 1518b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.68      136.03 
2. 10.90 138.78

3. 17 22 28 18 24 30
4. 36 45 52 37 47 54
5. 118 142 167 116 140 166

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.36      14.91 
2. 4.36 14.91

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.76      29.99 
2. 8.90 30.45

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 17.91      61.31 
2. 18.27 62.55

100ge2p1e810cq-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.27       4.24 
2. 3.31 4.28

3. 17 32 44 17 32 44
4. 47 95 133 47 73 92
5. 191 227 250 166 251 279

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  6.42       8.32 
2. 6.58 8.53

3. 18 30 36 17 28 50
4. 48 66 81 48 68 82
5. 176 233 263 155 230 264

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1. 10.17      13.18 
2. 10.74 13.93

3. 17 27 43 17 26 38
4. 39 54 67 41 60 70
5. 130 238 325 138 244 318

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.94      12.11 
2. 0.95 12.29

3. 36 77 93 35 62 80
4. 129 218 282 134 301 352
5. 396 527 626 384 556 654

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.79      23.15 
2. 1.80 23.27

3. 43 75 94 39 65 82
4. 111 166 201 84 162 182
5. 264 360 414 265 356 420

 1518b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.41      44.13 
2. 3.46 44.80

3. 33 69 97 34 73 108
4. 89 134 176 97 142 175
5. 296 528 726 283 528 738

100ge2p1e810cq-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.71       7.41 
2. 6.82 7.52

3. 14 20 35 14 23 29
4. 30 43 56 28 42 52
5. 95 125 140 84 121 137

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 13.05      14.40 
2. 13.38 14.77

3. 14 20 25 14 21 28
4. 30 41 48 30 38 46
5. 85 112 128 78 109 126

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 25.94      28.64 
2. 26.47 29.22

3. 14 19 22 14 18 21
4. 32 41 47 31 39 46
5. 86 142 186 84 137 178

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.17      40.39 
2. 3.20 40.79

3. 17 34 40 17 27 43
4. 37 61 83 35 56 69
5. 120 159 176 118 153 179

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.04      76.91 
2. 6.16 78.46

3. 19 29 40 19 26 34
4. 43 66 77 30 40 50
5. 109 143 167 98 141 165

 1518b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 11.72      149.29 
2. 12.02 153.08

3. 17 24 35 17 23 31
4. 37 47 56 37 50 60
5. 105 192 244 106 189 243

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.30      18.14 
2. 5.35 18.33

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.37      35.51 
2. 10.69 36.59

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 20.01      68.49 
2. 20.52 70.23

100ge2p1e810cq-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.44       3.16 
2. 2.46 3.19

3. 17 21 29 17 26 36
4. 41 107 134 46 106 129
5. 127 167 191 107 174 196

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.04       3.94 
2. 3.07 3.98

3. 17 30 45 17 24 30
4. 33 48 58 21 40 70
5. 122 145 175 28 138 163

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  4.71       6.11 
2. 4.78 6.20

3. 17 27 36 17 23 32
4. 31 45 54 24 43 59
5. 84 150 185 36 176 204

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.80      10.36 
2. 0.80 10.36

3. 44 70 105 40 65 71
4. 184 374 392 101 265 349
5. 288 460 531 202 442 543

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.99      12.81 
2. 0.99 12.81

3. 39 62 69 36 58 68
4. 81 145 196 55 126 132
5. 190 256 344 102 220 313

 1518b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.39      17.97 
2. 1.43 18.52

3. 36 59 71 34 54 84
4. 56 134 177 44 125 191
5. 159 264 319 55 286 335

100ge2p1e810cq-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.66       5.14 
2. 4.73 5.22

3. 14 15 30 14 18 21
4. 26 44 55 21 40 49
5. 83 101 116 45 101 116

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.14       6.77 
2. 6.20 6.84

3. 14 19 22 14 18 21
4. 37 51 60 18 38 52
5. 74 89 101 22 80 99

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.33      11.40 
2. 10.59 11.69

3. 14 19 25 14 17 22
4. 24 34 41 18 31 40
5. 52 91 103 23 93 112

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.49      31.66 
2. 2.50 31.81

3. 17 38 41 17 32 36
4. 38 69 89 28 56 78
5. 109 138 161 67 135 161

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.98      37.92 
2. 3.02 38.50

3. 17 31 46 17 19 30
4. 25 51 70 19 31 46
5. 95 126 146 31 97 140

 1518b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.75      60.48 
2. 4.87 62.02

3. 17 30 41 17 25 33
4. 29 45 54 23 37 56
5. 77 135 150 30 137 160

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.94      13.49 
2. 4.00 13.70

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.78      16.37 
2. 4.86 16.62

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.02      27.45 
2. 8.22 28.14

100ge2p1e810cq-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.69       7.39 
2. 6.90 7.61

3. 16 27 36 17 29 38
4. 41 60 71 42 60 72
5. 130 160 196 128 161 203

 1518b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.79      22.85 
2. 1.79 22.85

3. 18 31 40 19 24 37
4. 40 97 125 37 90 145
5. 129 184 218 136 204 250

 1518b-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.46      69.50 
2. 5.46 69.50

3. 20 26 35 20 29 39
4. 33 53 70 40 61 77
5. 112 141 166 110 139 164

 imix-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.71      16.12 
2. 4.71 16.12

100ge2p1e810cq-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 13.22      14.60 
2. 13.36 14.75

3. 17 23 32 18 24 32
4. 48 58 67 47 58 66
5. 152 186 215 150 185 216

 1518b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.04      38.66 
2. 3.04 38.66

3. 17 24 30 17 32 43
4. 50 63 71 42 78 106
5. 130 163 192 137 168 190

 1518b-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.13      103.59 
2. 8.17 104.11

3. 18 28 37 20 26 35
4. 36 52 62 35 49 60
5. 69 98 119 66 86 102

 imix-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.14      17.59 
2. 5.19 17.76

100ge2p1e810cq-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.77       7.48 
2. 6.77 7.48

3. 15 22 31 18 23 34
4. 40 53 66 41 55 65
5. 125 153 179 106 130 151

 64b-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.17      10.12 
2. 9.21 10.17

3. 17 25 31 14 20 25
4. 35 46 58 27 41 54
5. 103 132 152 61 112 137

 1518b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.82      61.43 
2. 4.85 61.74

3. 19 29 37 19 25 32
4. 46 65 77 36 57 74
5. 186 232 271 85 166 202

 imix-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.66      12.53 
2. 3.70 12.65

 imix-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.33      18.25 
2. 5.39 18.44