3n-skx-xxv710

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 2.51 3.25 2. 2.57 3.33 3. 71 192 302 86 223 335 4. 92 184 220 126 209 282 5. 184 236 298 201 237 299
1518b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.69 8.87 2. 0.69 8.91 3. 156 277 382 146 269 381 4. 199 321 420 256 473 577 5. 474 605 735 515 792 899
imix-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.54 5.57 2. 1.58 5.71

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.40 4.86 2. 4.54 5.01 3. 90 181 255 94 211 319 4. 81 98 114 81 154 214 5. 124 168 213 156 226 275
64b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.15 8.99 2. 8.35 9.22 3. 48 135 163 65 178 325 4. 47 65 82 47 65 77 5. 114 136 156 114 135 158
64b-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 13.24 14.62 2. 13.72 15.14 3. 21 31 39 23 32 39 4. 42 55 67 42 55 66 5. 76 151 210 75 149 210
1518b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.47 18.78 2. 1.51 19.26 3. 92 194 297 94 211 328 4. 77 135 230 81 175 270 5. 205 307 1884 206 276 1879
1518b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.71 34.52 2. 2.76 35.21 3. 91 192 265 94 224 312 4. 71 111 137 78 114 140 5. 131 163 310 130 153 274
imix-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.90 9.91 2. 3.01 10.32
imix-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.50 18.83 2. 5.78 19.80
imix-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.73 29.88 2. 9.13 31.26

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.18 4.62 2. 4.33 4.78 3. 82 200 307 63 202 316 4. 84 184 210 90 192 220 5. 167 243 303 157 225 310
64b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.79 8.60 2. 7.99 8.82 3. 62 177 201 46 103 159 4. 49 66 85 52 82 102 5. 115 140 167 109 131 152
64b-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 12.73 14.06 2. 13.19 14.56 3. 23 32 39 22 30 38 4. 42 53 66 40 52 63 5. 76 155 212 75 153 215
1518b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.21 15.36 2. 1.22 15.59 3. 111 169 261 103 215 291 4. 101 145 206 90 164 221 5. 230 356 483 222 324 499
1518b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.23 28.41 2. 2.26 28.84 3. 84 203 310 88 208 327 4. 73 142 185 97 153 216 5. 180 254 293 160 214 243
imix-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.65 9.07 2. 2.76 9.45
imix-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.97 17.01 2. 5.15 17.62
imix-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.03 27.48 2. 8.23 28.18

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 2.62 3.39 2. 2.65 3.44 3. 115 231 343 72 200 310 4. 106 208 250 157 286 402 5. 270 374 414 282 392 498
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.71 9.14 2. 0.71 9.14 3. 154 268 374 152 272 388 4. 189 295 385 173 267 418 5. 475 695 799 458 569 700
imix-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.65 5.98 2. 1.67 6.04

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.85 5.35 2. 4.89 5.40 3. 78 221 353 87 209 310 4. 74 111 148 75 162 196 5. 119 185 208 157 225 254
64b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.66 10.66 2. 9.80 10.82 3. 87 182 227 48 118 155 4. 53 80 94 48 63 75 5. 110 128 144 109 125 140
64b-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 17.84 19.69 2. 18.44 20.36 3. 23 32 38 22 30 37 4. 42 55 65 35 42 51 5. 77 139 194 76 137 193
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.65 20.98 2. 1.66 21.09 3. 99 164 252 85 216 329 4. 94 145 192 93 170 251 5. 157 200 233 150 191 238
1518b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.15 40.06 2. 3.16 40.26 3. 69 216 351 110 229 345 4. 66 153 171 82 114 134 5. 151 181 208 153 176 197
imix-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.46 11.83 2. 3.47 11.88
imix-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.89 23.59 2. 6.96 23.83
imix-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 11.56 39.58 2. 11.80 40.38

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.68 5.17 2. 4.73 5.22 3. 46 198 332 88 213 325 4. 82 121 149 109 215 240 5. 119 149 175 124 153 206
64b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.36 10.34 2. 9.51 10.50 3. 71 132 188 55 135 192 4. 56 73 87 42 53 63 5. 110 127 142 112 132 152
64b-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 17.23 19.02 2. 17.85 19.71 3. 23 31 39 21 29 35 4. 41 51 63 40 49 58 5. 77 144 202 76 143 201
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.30 16.58 2. 1.30 16.58 3. 95 200 265 110 210 319 4. 71 151 175 95 189 308 5. 194 273 315 178 288 332
1518b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.56 32.58 2. 2.57 32.74 3. 89 215 334 121 210 275 4. 74 125 163 79 116 148 5. 138 176 218 139 169 201
imix-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.11 10.64 2. 3.12 10.69
imix-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.22 21.30 2. 6.25 21.40
imix-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.64 36.42 2. 10.86 37.16

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 1.00 1.11 2. 1.01 1.11 3. 68 183 286 77 196 293 4. 163 495 721 213 498 704 5. 599 884 1146 628 1067 1335
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 0.64 8.20 2. 0.65 8.24 3. 136 245 342 135 253 344 4. 157 261 359 167 277 347 5. 430 696 884 450 730 1027
imix-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 0.90 3.08 2. 0.90 3.09

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.05 3.96 2. 3.08 4.00 3. 90 185 274 124 235 325 4. 79 110 132 121 187 200 5. 186 229 261 211 300 331
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.78 10.02 2. 0.78 10.02 3. 111 166 266 128 213 316 4. 162 283 381 159 266 314 5. 546 787 928 412 547 627
imix-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.93 6.97 2. 1.95 7.04

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.80 5.30 2. 6.58 7.27 3. 57 147 178 102 193 276 4. 60 80 119 64 84 126 5. 100 118 136 95 117 134
64b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.01 6.63 2. 6.68 7.37 3. 48 112 170 63 164 266 4. 44 59 69 48 66 85 5. 81 94 105 86 102 113
64b-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.63 7.32 2. 6.70 7.40 3. 19 20 28 19 33 42 4. 39 55 67 43 61 77 5. 79 92 103 83 98 112
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.95 24.81 2. 1.96 24.94 3. 82 172 273 93 200 305 4. 98 180 199 74 115 136 5. 150 199 229 172 222 257
1518b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.25 28.62 2. 2.27 28.91 3. 91 154 250 107 204 306 4. 61 133 151 107 196 245 5. 184 239 263 269 317 345
imix-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.33 14.81 2. 4.46 15.26
imix-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.38 15.01 2. 4.54 15.54
imix-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.54 15.54 2. 4.56 15.62

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.04 5.57 2. 6.42 7.08 3. 75 173 219 122 216 310 4. 74 101 117 93 127 159 5. 116 137 154 123 151 164
64b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.96 6.58 2. 6.52 7.20 3. 41 138 244 76 135 160 4. 39 52 61 74 99 113 5. 73 88 98 95 118 129
64b-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.54 7.22 2. 6.57 7.25 3. 19 28 35 19 28 43 4. 45 67 88 44 70 86 5. 89 111 125 79 94 110
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.50 19.15 2. 1.51 19.24 3. 105 203 278 102 198 307 4. 86 169 206 97 139 217 5. 235 314 361 170 238 268
1518b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.94 24.76 2. 1.95 24.89 3. 80 184 279 84 189 279 4. 85 152 235 86 182 223 5. 197 247 287 197 233 265
imix-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.90 13.35 2. 4.00 13.69
imix-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.26 14.59 2. 4.37 14.96
imix-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.36 14.93 2. 4.39 15.01

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 4.19 4.62 2. 5.89 6.50 3. 104 206 307 100 207 300 4. 80 125 153 105 160 189 5. 148 180 198 126 167 192
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 1.48 18.82 2. 1.50 19.11 3. 76 177 268 121 200 303 4. 81 181 261 127 263 333 5. 317 398 467 306 393 470
imix-2t1c-avf-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 3.72 12.73 2. 3.87 13.25

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.17 5.40 2. 4.23 5.49 3. 99 240 344 82 195 279 4. 91 132 174 80 103 125 5. 106 134 155 109 131 148
64b-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.06 6.56 2. 5.16 6.69 3. 95 237 341 104 208 337 4. 104 142 163 92 125 156 5. 150 166 185 152 170 193
1518b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.51 6.63 2. 0.51 6.63 3. 128 214 293 80 171 297 4. 129 219 287 96 203 259 5. 199 339 424 173 336 379
imix-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.19 4.30 2. 1.27 4.59
imix-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.92 17.77 2. 5.14 18.59

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.09 5.62 2. 5.14 5.67 3. 85 195 260 105 202 343 4. 73 104 117 65 90 116 5. 110 126 135 119 139 149
64b-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.95 5.46 2. 5.02 5.55 3. 129 242 339 133 241 349 4. 135 191 231 118 144 178 5. 155 168 182 202 233 252
1518b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 1.86 23.74 2. 1.89 24.10 3. 78 161 274 90 235 323 4. 76 146 167 95 202 305 5. 120 162 177 137 157 174
imix-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.17 17.68 2. 5.38 18.40
imix-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.37 14.96 2. 4.55 15.57

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.39 5.95 2. 5.52 6.10 3. 108 235 345 107 242 347 4. 108 136 172 75 112 126 5. 125 139 155 111 131 148
64b-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.95 5.46 2. 5.03 5.55 3. 88 206 303 112 227 330 4. 66 90 106 134 192 239 5. 159 199 233 160 193 250
1518b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 1.49 18.98 2. 1.50 19.17 3. 79 187 268 128 213 265 4. 76 126 162 109 158 245 5. 126 174 200 132 194 232
imix-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.10 17.47 2. 5.39 18.46
imix-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.43 15.18 2. 4.59 15.72

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.17 5.40 2. 4.19 5.43 3. 72 204 350 69 250 380 4. 110 181 255 149 247 312 5. 184 225 264 176 249 301
64b-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.11 5.33 2. 4.13 5.36 3. 73 200 293 66 210 290 4. 95 135 178 98 170 216 5. 243 287 330 137 255 302
1518b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.52 6.70 2. 0.52 6.70 3. 125 263 376 130 271 385 4. 88 221 326 106 260 347 5. 136 254 413 201 482 584
imix-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.19 4.30 2. 1.20 4.34
imix-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.21 15.20 2. 4.33 15.66

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.30 4.75 2. 4.39 4.85 3. 71 197 354 63 227 342 4. 75 142 188 81 168 202 5. 174 207 252 125 193 237
64b-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.19 4.62 2. 4.21 4.65 3. 83 211 319 76 212 313 4. 97 150 213 104 191 259 5. 332 391 445 148 278 331
1518b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 1.79 22.83 2. 1.81 23.06 3. 101 233 342 81 239 325 4. 101 176 279 91 222 300 5. 189 257 290 168 254 301
imix-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.38 15.00 2. 4.38 15.00
imix-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.02 13.76 2. 4.16 14.25

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.32 4.77 2. 4.43 4.89 3. 77 214 363 94 253 395 4. 107 170 277 118 228 276 5. 179 234 273 132 183 210
64b-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.21 4.64 2. 4.21 4.64 3. 88 220 332 85 218 293 4. 103 168 255 79 134 165 5. 332 400 458 147 248 296
1518b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 1.48 18.86 2. 1.49 19.00 3. 98 248 367 107 246 360 4. 83 167 261 103 198 293 5. 150 216 295 155 239 284
imix-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.36 14.91 2. 4.38 14.99
imix-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.12 14.10 2. 4.20 14.39

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.87 2.42 2. 1.91 2.47 3. 83 210 339 75 204 313 4. 174 308 380 229 388 501 5. 358 524 976 337 510 1011
1518b-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.64 8.25 2. 0.64 8.25 3. 157 276 385 129 253 369 4. 147 247 355 137 281 426 5. 525 738 900 499 749 898
imix-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.25 4.51 2. 1.28 4.63

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.93 3.24 2. 3.01 3.32 3. 55 165 277 52 180 291 4. 84 181 257 121 234 346 5. 169 245 919 171 265 885
64b-4t2c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.37 5.93 2. 5.45 6.02 3. 95 195 286 63 192 324 4. 49 68 88 51 78 103 5. 102 120 148 103 127 153
64b-8t4c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 10.32 11.40 2. 10.43 11.51 3. 20 32 39 20 26 34 4. 41 51 63 39 57 67 5. 113 127 150 109 128 150
1518b-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.27 16.12 2. 1.27 16.20 3. 121 245 362 114 218 317 4. 96 187 303 79 158 245 5. 178 259 298 161 231 265
1518b-4t2c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.39 30.48 2. 2.39 30.48 3. 79 212 339 77 197 302 4. 80 149 176 73 99 159 5. 129 181 206 127 168 193
imix-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.13 7.29 2. 2.17 7.44
imix-4t2c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.09 14.01 2. 4.20 14.37
imix-8t4c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.01 27.42 2. 8.01 27.42

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.75 3.04 2. 2.84 3.13 3. 87 211 328 87 215 326 4. 134 216 317 121 228 335 5. 213 310 1192 187 262 1232
64b-4t2c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.16 5.69 2. 5.21 5.75 3. 70 172 247 107 227 347 4. 58 94 117 57 88 116 5. 117 129 152 95 124 160
64b-8t4c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.89 10.92 2. 9.94 10.98 3. 20 31 44 20 28 39 4. 42 54 63 39 51 60 5. 114 138 155 113 135 153
1518b-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.05 13.37 2. 1.05 13.37 3. 124 210 298 137 247 351 4. 107 196 331 142 250 351 5. 261 361 454 276 445 565
1518b-4t2c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.03 25.83 2. 2.03 25.83 3. 120 218 330 132 244 348 4. 87 144 171 86 145 186 5. 132 194 226 136 177 206
imix-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.93 6.62 2. 1.98 6.79
imix-4t2c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.77 12.89 2. 3.84 13.15
imix-8t4c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.45 25.48 2. 7.45 25.48

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 2.73 3.54 2. 2.78 3.60 3. 91 182 264 60 195 294 4. 105 161 198 135 226 323 5. 187 257 304 192 271 331
1518b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.72 9.25 2. 0.72 9.29 3. 153 263 358 159 277 387 4. 163 241 306 200 319 387 5. 474 673 829 455 666 793
imix-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.68 6.06 2. 1.69 6.12

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.58 6.16 2. 5.78 6.38 3. 62 181 287 56 203 310 4. 60 93 112 90 167 208 5. 118 155 179 114 157 205
64b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 11.15 12.31 2. 11.26 12.43 3. 54 86 150 91 140 237 4. 46 60 75 49 65 85 5. 97 124 141 90 120 137
64b-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 22.17 24.48 2. 23.08 25.48 3. 26 36 43 27 34 40 4. 45 56 65 46 57 65 5. 116 179 226 117 173 220
1518b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.78 22.62 2. 1.79 22.85 3. 80 189 303 89 223 333 4. 89 140 156 94 194 238 5. 194 276 304 173 236 288
1518b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.29 41.90 2. 3.30 42.05 3. 94 202 312 102 196 273 4. 82 113 135 76 124 144 5. 143 186 211 147 194 225
imix-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.74 12.81 2. 3.88 13.26
imix-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.26 24.86 2. 7.26 24.86
imix-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 14.03 48.03 2. 14.17 48.51

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.43 5.99 2. 5.66 6.25 3. 71 176 284 72 199 310 4. 71 108 173 75 133 155 5. 126 171 202 118 160 202
64b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.88 12.02 2. 10.94 12.08 3. 69 175 254 55 137 217 4. 50 67 85 51 71 88 5. 97 122 138 89 116 132
64b-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 21.91 24.19 2. 22.47 24.80 3. 23 31 38 23 32 38 4. 46 56 65 46 55 63 5. 115 174 218 116 171 219
1518b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.40 17.88 2. 1.42 18.06 3. 95 188 295 106 200 270 4. 80 151 190 74 139 183 5. 211 288 351 189 288 353
1518b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.53 32.20 2. 2.54 32.36 3. 101 219 307 62 216 342 4. 73 124 222 74 164 216 5. 153 205 240 131 177 218
imix-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.49 11.93 2. 3.52 12.05
imix-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.46 22.12 2. 6.49 22.23
imix-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 12.90 44.14 2. 13.03 44.59

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 2.16 2.80 2. 2.18 2.83 3. 74 218 335 90 203 331 4. 129 238 328 138 271 393 5. 195 272 312 181 340 485
1518b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.60 7.76 2. 0.60 7.80 3. 132 246 377 156 276 391 4. 167 274 382 155 275 362 5. 499 723 838 378 655 856
imix-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.32 4.77 2. 1.33 4.81

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.54 5.01 2. 4.58 5.06 3. 105 241 356 100 207 345 4. 68 155 203 90 143 208 5. 123 161 201 97 144 170
64b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.19 5.73 2. 5.27 5.82 3. 85 197 268 68 209 332 4. 60 123 179 73 133 190 5. 102 157 177 85 128 145
64b-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.05 9.99 2. 9.14 10.09 3. 19 26 33 19 24 34 4. 23 63 86 35 46 55 5. 73 130 159 40 112 140
1518b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.43 18.21 2. 1.43 18.21 3. 124 223 319 110 208 318 4. 85 191 254 95 156 222 5. 193 273 316 170 262 339
1518b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.70 21.64 2. 1.71 21.75 3. 61 192 283 72 223 340 4. 98 201 282 108 225 348 5. 178 264 333 105 226 328
imix-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.00 10.27 2. 3.03 10.38
imix-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.53 12.08 2. 3.55 12.14
imix-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.97 20.43 2. 6.06 20.74

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.41 4.87 2. 4.48 4.94 3. 119 241 348 102 212 332 4. 78 161 197 128 249 315 5. 124 164 214 111 183 238
64b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.12 5.65 2. 5.17 5.71 3. 63 195 314 63 208 332 4. 68 132 205 79 162 203 5. 100 144 198 77 132 158
64b-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.77 9.68 2. 8.90 9.82 3. 19 26 37 19 27 47 4. 34 55 70 29 53 66 5. 73 129 150 37 118 143
1518b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.18 15.07 2. 1.18 15.07 3. 90 220 332 107 228 340 4. 95 233 357 108 208 326 5. 203 295 366 148 267 370
1518b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.46 18.63 2. 1.46 18.63 3. 69 180 274 70 220 336 4. 75 187 283 100 216 327 5. 179 257 328 142 250 357
imix-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.81 9.60 2. 2.84 9.73
imix-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.33 11.41 2. 3.35 11.47
imix-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.40 18.50 2. 5.49 18.78

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.13 5.36 2. 4.20 5.44 3. 77 198 350 64 239 363 4. 135 205 274 155 252 328 5. 206 263 309 188 267 328
64b-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.11 5.33 2. 4.11 5.33 3. 94 247 365 72 196 280 4. 118 192 293 106 182 245 5. 290 346 400 176 307 376
1518b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.52 6.72 2. 0.52 6.75 3. 127 266 382 106 265 359 4. 116 243 341 135 271 400 5. 157 343 434 205 447 562
imix-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.17 4.21 2. 1.19 4.30
imix-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.18 15.11 2. 4.35 15.73

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.26 4.70 2. 4.37 4.82 3. 65 238 361 48 224 297 4. 94 152 227 124 235 305 5. 166 212 278 146 222 267
64b-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.21 4.65 2. 4.23 4.67 3. 101 234 355 75 214 330 4. 98 146 230 111 168 226 5. 357 424 478 163 280 342
1518b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 1.83 23.36 2. 1.86 23.72 3. 91 214 324 59 228 340 4. 98 200 265 83 201 307 5. 193 267 317 162 223 287
imix-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.35 14.87 2. 4.36 14.92
imix-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.01 13.74 2. 4.17 14.26

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.26 4.70 2. 4.39 4.84 3. 67 197 345 63 232 373 4. 80 130 177 103 207 269 5. 161 197 240 119 223 267
64b-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.16 4.60 2. 4.21 4.64 3. 87 226 330 86 214 304 4. 93 149 186 82 134 174 5. 349 410 458 149 250 296
1518b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 1.48 18.81 2. 1.48 18.86 3. 58 238 364 76 223 308 4. 95 182 266 96 222 270 5. 145 208 273 132 201 250
imix-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.28 14.64 2. 4.32 14.78
imix-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.95 13.53 2. 4.18 14.30

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.11 5.33 2. 4.19 5.44 3. 89 235 361 104 252 388 4. 114 186 272 121 235 301 5. 210 270 301 156 248 302
64b-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.08 5.29 2. 4.10 5.31 3. 110 230 340 119 242 341 4. 97 153 200 90 169 228 5. 267 316 362 144 293 341
1518b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.51 6.58 2. 0.51 6.65 3. 136 249 325 145 277 389 4. 96 200 302 116 248 372 5. 163 281 366 227 447 590
imix-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.18 4.28 2. 1.20 4.32
imix-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.15 15.00 2. 4.34 15.69

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.28 4.72 2. 4.38 4.84 3. 90 207 304 72 214 368 4. 99 155 207 103 193 278 5. 180 236 263 117 224 279
64b-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.17 4.60 2. 4.21 4.65 3. 101 224 347 88 231 362 4. 110 171 229 88 139 171 5. 364 427 477 149 247 291
1518b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 1.80 22.93 2. 1.82 23.16 3. 66 233 338 71 219 331 4. 119 229 335 84 208 302 5. 212 303 328 172 255 296
imix-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.32 14.78 2. 4.36 14.93
imix-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.95 13.54 2. 4.14 14.16

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.19 4.63 2. 4.30 4.74 3. 64 203 351 78 211 344 4. 107 166 264 95 200 262 5. 160 208 245 137 199 229
64b-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.17 4.60 2. 4.17 4.60 3. 93 220 316 95 229 342 4. 84 169 221 80 127 162 5. 339 400 451 138 244 287
1518b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 1.48 18.83 2. 1.49 19.03 3. 86 221 355 98 230 341 4. 102 174 268 114 205 305 5. 151 223 264 169 253 325
imix-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.30 14.70 2. 4.32 14.77
imix-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.99 13.65 2. 4.07 13.93

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec10000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 2.34 3.03 2. 2.36 3.06 3. 23 37 48 23 47 69 4. 70 205 244 82 150 172 5. 188 268 370 207 278 533
1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.64 8.27 2. 0.64 8.32 3. 48 89 126 49 99 142 4. 185 323 438 162 359 441 5. 529 721 849 503 644 817
imix-2t1c-ethip4ipsec10000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.40 5.06 2. 1.42 5.13

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.98 4.39 2. 4.06 4.48 3. 20 59 79 20 43 83 4. 58 85 105 56 85 105 5. 138 171 219 134 164 222
64b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.19 7.93 2. 7.32 8.08 3. 26 51 66 32 58 75 4. 48 61 76 47 62 74 5. 110 129 150 111 131 151
64b-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 13.46 14.86 2. 13.73 15.16 3. 31 52 74 33 52 78 4. 45 55 63 42 52 64 5. 129 151 171 128 150 170
1518b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.29 16.38 2. 1.32 16.80 3. 33 61 84 25 56 80 4. 69 114 138 53 156 180 5. 198 258 333 194 253 324
1518b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.37 30.24 2. 2.37 30.24 3. 25 45 55 34 62 88 4. 70 124 143 64 78 91 5. 141 175 199 139 164 183
imix-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.52 8.62 2. 2.57 8.79
imix-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.66 15.96 2. 4.69 16.04
imix-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.69 29.75 2. 8.69 29.75

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.80 4.19 2. 3.84 4.24 3. 19 46 73 20 62 87 4. 57 81 103 48 84 98 5. 132 167 211 127 166 224
64b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.81 7.51 2. 6.87 7.59 3. 34 56 76 22 50 82 4. 49 66 83 49 65 77 5. 111 132 155 109 128 149
64b-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 12.88 14.22 2. 12.95 14.29 3. 33 55 83 28 52 75 4. 45 56 65 45 57 67 5. 120 140 157 120 140 158
1518b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.10 13.98 2. 1.10 14.06 3. 26 67 86 25 44 65 4. 68 171 213 55 234 273 5. 191 255 320 175 324 380
1518b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.03 25.85 2. 2.03 25.85 3. 26 46 72 26 51 73 4. 58 103 121 55 125 162 5. 141 176 214 140 191 222
imix-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.33 7.96 2. 2.36 8.08
imix-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.29 14.68 2. 4.40 15.05
imix-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.12 27.81 2. 8.12 27.81

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 2.54 3.29 2. 2.54 3.29 3. 23 65 99 23 43 62 4. 63 113 155 71 100 141 5. 219 272 321 224 284 328
1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.68 8.77 2. 0.68 8.81 3. 53 101 132 57 89 129 4. 135 233 320 147 232 277 5. 449 604 716 433 529 629
imix-2t1c-ethip4ipsec1000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.57 5.69 2. 1.57 5.69

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.51 4.98 2. 4.51 4.98 3. 19 36 71 19 31 42 4. 61 123 137 48 100 139 5. 134 164 190 125 165 190
64b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.03 9.97 2. 9.07 10.02 3. 23 52 81 24 51 76 4. 41 52 63 50 63 80 5. 114 133 148 113 131 148
64b-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 18.83 20.79 2. 18.83 20.79 3. 33 52 73 35 54 73 4. 47 59 72 49 58 66 5. 127 147 164 126 145 162
1518b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.54 19.60 2. 1.55 19.70 3. 24 35 46 24 56 76 4. 52 106 141 69 129 169 5. 208 296 361 210 270 329
1518b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.84 36.12 2. 2.84 36.12 3. 31 58 76 26 63 83 4. 57 92 118 67 96 111 5. 136 161 181 141 171 192
imix-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.09 10.57 2. 3.10 10.62
imix-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.00 20.54 2. 6.00 20.54
imix-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 11.88 40.66 2. 11.88 40.66

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.35 4.80 2. 4.35 4.80 3. 19 32 56 19 34 59 4. 51 90 104 59 98 116 5. 123 170 196 129 161 196
64b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.75 9.66 2. 8.75 9.66 3. 35 58 82 22 51 77 4. 42 58 72 40 54 64 5. 114 132 148 113 131 146
64b-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 18.25 20.15 2. 18.25 20.15 3. 31 52 80 34 53 73 4. 45 54 62 43 51 59 5. 128 147 163 128 148 164
1518b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.25 15.93 2. 1.25 15.93 3. 25 53 82 25 52 64 4. 68 168 198 69 151 195 5. 179 241 285 181 262 314
1518b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.33 29.68 2. 2.33 29.68 3. 26 59 88 28 60 85 4. 63 96 131 54 111 137 5. 169 257 281 147 193 227
imix-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.81 9.62 2. 2.81 9.62
imix-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.54 18.95 2. 5.54 18.95
imix-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 11.17 38.24 2. 11.17 38.24

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 0.97 1.07 2. 0.98 1.09 3. 25 55 67 25 49 67 4. 75 207 357 65 260 372 5. 439 646 823 454 652 844
1518b-2t1c-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 0.63 8.08 2. 0.64 8.12 3. 29 65 93 28 49 84 4. 74 176 287 72 166 274 5. 568 951 1188 568 972 1217
imix-2t1c-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 0.88 3.01 2. 0.88 3.01

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 2.95 3.83 2. 2.97 3.85 3. 23 56 85 23 50 71 4. 92 166 213 91 211 255 5. 190 249 287 219 299 352
1518b-2t1c-ethip4ipsec1tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.76 9.79 2. 0.76 9.89 3. 44 81 101 45 88 105 4. 153 327 421 140 325 386 5. 578 719 820 438 636 784
imix-2t1c-ethip4ipsec1tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.83 6.63 2. 1.85 6.69

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.02 6.65 2. 6.05 6.68 3. 32 54 72 31 55 80 4. 43 58 71 47 65 79 5. 86 101 113 95 120 136
64b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.23 6.88 2. 6.26 6.91 3. 33 56 83 30 55 77 4. 53 79 97 48 66 75 5. 77 93 106 79 95 106
64b-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.26 6.92 2. 6.30 6.95 3. 37 65 84 26 53 63 4. 45 77 96 41 54 67 5. 97 120 136 80 97 108
1518b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.84 23.48 2. 1.84 23.48 3. 24 55 74 24 64 71 4. 56 165 185 82 226 282 5. 229 319 354 197 266 321
1518b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.09 26.64 2. 2.09 26.64 3. 24 48 76 24 61 74 4. 79 170 193 56 129 170 5. 163 199 228 140 174 190
imix-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.95 13.51 2. 3.97 13.58
imix-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.18 14.32 2. 4.21 14.40
imix-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.17 14.27 2. 4.19 14.34

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.94 6.56 2. 5.97 6.59 3. 19 39 66 19 61 84 4. 45 72 91 46 68 82 5. 108 136 153 85 100 112
64b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.12 6.75 2. 6.15 6.79 3. 36 55 78 24 63 75 4. 39 54 70 45 66 85 5. 86 106 121 88 111 128
64b-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.13 6.76 2. 6.16 6.80 3. 27 59 80 34 54 80 4. 39 55 63 46 65 82 5. 90 108 124 98 121 139
1518b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.45 18.47 2. 1.45 18.47 3. 24 71 77 24 52 72 4. 59 230 271 51 215 246 5. 283 371 420 314 430 506
1518b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.83 23.28 2. 1.83 23.28 3. 24 55 68 35 67 83 4. 63 132 164 93 172 229 5. 169 214 241 198 237 272
imix-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.58 12.25 2. 3.60 12.31
imix-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.91 13.39 2. 3.91 13.39
imix-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.91 13.38 2. 3.91 13.38

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 5.44 6.00 2. 5.46 6.03 3. 26 55 73 19 82 143 4. 44 72 87 78 151 168 5. 106 126 141 137 160 175
1518b-2t1c-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 1.43 18.24 2. 1.44 18.34 3. 27 54 77 24 53 74 4. 61 105 138 91 268 317 5. 261 332 388 276 364 405
imix-2t1c-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 3.37 11.54 2. 3.39 11.60

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.14 5.36 2. 4.20 5.44 3. 25 63 112 25 62 78 4. 71 120 137 71 110 132 5. 121 150 167 120 150 173
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.43 5.75 2. 4.48 5.81 3. 27 61 83 27 72 104 4. 65 98 133 73 122 147 5. 170 204 236 154 178 204
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.50 6.45 2. 0.50 6.45 3. 45 65 96 45 64 94 4. 68 115 141 71 205 235 5. 209 337 395 181 486 545
imix-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.16 4.20 2. 1.27 4.59
imix-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.94 14.25 2. 4.08 14.76

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.56 5.03 2. 4.60 5.08 3. 22 71 89 21 66 85 4. 61 81 92 65 119 134 5. 107 139 149 99 132 147
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.57 5.05 2. 4.64 5.13 3. 24 44 54 23 43 76 4. 81 115 126 71 113 127 5. 237 274 296 221 274 303
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 1.78 22.63 2. 1.88 23.92 3. 27 51 79 27 46 72 4. 56 131 155 51 125 141 5. 215 275 302 233 295 323
imix-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.27 14.60 2. 4.44 15.19
imix-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.76 12.88 2. 3.84 13.14

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.57 5.05 2. 4.71 5.20 3. 22 48 68 22 55 66 4. 50 74 89 50 69 87 5. 97 123 137 108 125 137
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.46 4.93 2. 4.53 5.00 3. 27 54 74 36 55 71 4. 48 87 108 53 82 108 5. 251 283 305 225 269 294
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 1.43 18.21 2. 1.44 18.40 3. 33 60 93 27 52 60 4. 59 134 176 58 126 156 5. 106 154 172 113 170 189
imix-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.21 14.42 2. 4.41 15.08
imix-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.73 12.75 2. 3.86 13.21

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.00 5.19 2. 4.00 5.19 3. 25 58 78 25 75 122 4. 73 125 152 57 111 147 5. 238 292 327 167 271 318
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.77 4.89 2. 3.81 4.94 3. 28 58 82 27 40 71 4. 88 117 141 67 111 135 5. 360 427 493 154 337 399
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.42 5.47 2. 0.42 5.47 3. 48 82 93 45 66 91 4. 61 123 168 67 138 238 5. 162 424 554 157 338 434
imix-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.13 4.08 2. 1.16 4.18
imix-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.55 12.82 2. 3.71 13.41

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.08 4.50 2. 4.18 4.61 3. 24 48 66 22 57 76 4. 65 94 118 46 102 125 5. 224 265 294 120 200 244
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.87 4.27 2. 3.89 4.29 3. 25 47 66 24 36 57 4. 75 107 132 56 118 154 5. 489 559 622 125 312 408
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 1.65 21.05 2. 1.67 21.26 3. 30 59 82 27 48 82 4. 60 129 156 51 93 158 5. 234 282 323 191 240 278
imix-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.70 12.66 2. 3.70 12.66
imix-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.48 11.90 2. 3.55 12.14

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.01 4.42 2. 4.15 4.58 3. 22 52 69 22 37 67 4. 60 114 135 43 88 109 5. 202 233 259 108 194 235
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.85 4.25 2. 3.86 4.27 3. 24 55 78 24 31 43 4. 68 112 139 53 101 138 5. 468 535 597 146 325 407
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 1.35 17.18 2. 1.37 17.44 3. 29 52 69 28 36 68 4. 56 125 162 62 136 199 5. 133 201 249 161 238 277
imix-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.67 12.54 2. 3.68 12.61
imix-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.44 11.77 2. 3.56 12.19

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.77 2.29 2. 1.80 2.34 3. 24 74 113 24 79 101 4. 106 254 301 96 272 373 5. 227 340 457 244 359 492
1518b-2t1c-ethip4ipsec40000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.61 7.87 2. 0.61 7.87 3. 49 96 128 46 80 106 4. 123 250 322 115 304 361 5. 466 678 848 498 719 865
imix-2t1c-ethip4ipsec40000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.19 4.31 2. 1.20 4.35

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.74 3.02 2. 2.75 3.04 3. 20 49 75 20 80 97 4. 51 115 141 53 168 191 5. 144 206 261 153 209 283
64b-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.97 5.48 2. 4.97 5.48 3. 20 56 79 22 46 69 4. 49 69 83 49 67 80 5. 102 120 151 117 135 160
64b-8t4c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.49 10.48 2. 9.49 10.48 3. 27 57 76 25 53 72 4. 52 65 76 54 68 78 5. 116 136 157 116 135 155
1518b-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.17 14.92 2. 1.17 14.92 3. 25 54 69 25 50 79 4. 71 111 135 60 121 203 5. 192 271 351 195 321 380
1518b-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.20 28.02 2. 2.20 28.02 3. 32 65 87 26 46 69 4. 60 86 101 56 97 121 5. 150 210 241 165 203 234
imix-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.96 6.71 2. 2.00 6.85
imix-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.78 12.94 2. 3.78 12.94
imix-8t4c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.16 24.52 2. 7.16 24.52

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.60 2.88 2. 2.60 2.88 3. 20 47 77 20 43 71 4. 72 134 202 57 156 192 5. 211 253 341 154 238 342
64b-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.78 5.27 2. 4.82 5.33 3. 20 50 79 20 45 81 4. 55 78 91 66 88 104 5. 126 150 174 116 143 176
64b-8t4c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.09 10.03 2. 9.09 10.03 3. 31 56 81 32 55 77 4. 54 68 79 51 63 73 5. 116 137 158 118 141 164
1518b-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.01 12.89 2. 1.01 12.89 3. 26 60 87 26 63 81 4. 75 192 241 52 214 287 5. 212 293 339 223 332 429
1518b-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.90 24.25 2. 1.90 24.25 3. 26 53 85 28 64 81 4. 47 93 116 66 112 133 5. 159 210 259 148 192 230
imix-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.83 6.25 2. 1.85 6.32
imix-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.58 12.27 2. 3.58 12.27
imix-8t4c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.73 23.05 2. 6.73 23.05

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 2.62 3.39 2. 2.65 3.43 3. 23 53 67 23 48 59 4. 68 136 156 68 167 203 5. 197 265 314 187 260 337
1518b-2t1c-ethip4ipsec40tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.68 8.81 2. 0.69 8.86 3. 50 96 115 59 87 111 4. 130 193 237 121 216 272 5. 409 562 671 385 573 694
imix-2t1c-ethip4ipsec40tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.57 5.69 2. 1.58 5.72

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.24 5.78 2. 5.29 5.84 3. 19 43 67 24 51 79 4. 54 90 108 52 75 102 5. 140 171 209 96 161 185
64b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 10.31 11.39 2. 10.52 11.62 3. 24 45 62 27 54 75 4. 48 65 79 45 59 70 5. 106 135 155 102 139 161
64b-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 19.75 21.81 2. 19.95 22.03 3. 29 51 72 32 55 79 4. 48 60 73 48 62 73 5. 113 160 199 113 161 200
1518b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.63 20.73 2. 1.64 20.84 3. 24 44 64 24 57 87 4. 59 108 129 52 86 117 5. 164 228 277 157 229 265
1518b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.02 38.48 2. 3.06 39.03 3. 25 63 85 30 53 81 4. 67 98 117 53 70 80 5. 168 225 255 144 188 217
imix-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.34 11.44 2. 3.36 11.49
imix-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.47 22.16 2. 6.51 22.27
imix-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 11.71 40.10 2. 11.71 40.10

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.11 5.64 2. 5.16 5.70 3. 19 40 52 19 39 54 4. 45 71 89 42 71 88 5. 122 159 182 104 169 188
64b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.06 11.10 2. 10.31 11.39 3. 23 47 75 23 42 63 4. 48 61 72 46 58 70 5. 113 149 169 99 141 156
64b-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 19.19 21.18 2. 19.38 21.40 3. 36 56 77 30 52 74 4. 50 63 75 49 63 73 5. 112 158 196 112 159 197
1518b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.31 16.69 2. 1.32 16.86 3. 27 57 75 24 52 78 4. 55 127 185 57 136 156 5. 171 288 335 167 250 302
1518b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.40 30.59 2. 2.40 30.59 3. 25 58 86 26 58 84 4. 54 82 100 56 75 101 5. 122 155 182 122 169 201
imix-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.10 10.61 2. 3.12 10.67
imix-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.98 20.46 2. 6.01 20.56
imix-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.90 37.29 2. 10.90 37.29

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec4tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 2.03 2.62 2. 2.04 2.64 3. 23 34 69 23 38 59 4. 66 129 182 44 121 159 5. 180 244 307 110 234 277
1518b-2t1c-ethip4ipsec4tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.57 7.36 2. 0.57 7.39 3. 47 82 120 45 73 100 4. 124 401 537 74 304 400 5. 519 875 1048 350 602 806
imix-2t1c-ethip4ipsec4tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.24 4.49 2. 1.24 4.49

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.18 4.61 2. 4.21 4.65 3. 19 63 80 19 49 66 4. 46 88 105 39 71 94 5. 113 159 190 85 137 181
64b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.85 5.36 2. 4.90 5.41 3. 19 35 67 19 28 57 4. 43 69 86 26 60 89 5. 103 130 141 35 105 144
64b-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.09 8.93 2. 8.21 9.07 3. 20 46 72 19 50 78 4. 40 65 82 39 66 90 5. 74 130 155 51 121 157
1518b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.32 16.82 2. 1.33 16.99 3. 24 52 74 24 45 60 4. 56 157 204 47 115 158 5. 159 245 288 109 229 269
1518b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.59 20.20 2. 1.59 20.20 3. 24 42 73 24 40 71 4. 39 87 126 34 77 95 5. 147 198 238 63 159 226
imix-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.68 9.18 2. 2.69 9.20
imix-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.15 10.78 2. 3.15 10.78
imix-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.11 17.49 2. 5.14 17.58

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.07 4.50 2. 4.12 4.54 3. 19 46 68 19 34 55 4. 48 81 100 37 72 87 5. 118 153 174 77 156 188
64b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.75 5.25 2. 4.80 5.30 3. 19 39 53 19 33 63 4. 45 71 85 32 60 75 5. 95 122 142 40 106 141
64b-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.95 8.78 2. 8.07 8.91 3. 20 50 80 19 43 69 4. 44 64 83 37 65 86 5. 77 131 156 51 125 159
1518b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.09 13.86 2. 1.09 13.93 3. 24 41 61 24 54 81 4. 67 282 323 39 218 260 5. 192 301 362 155 283 350
1518b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.33 16.98 2. 1.33 16.98 3. 24 40 55 24 39 83 4. 56 217 308 38 92 179 5. 245 340 387 61 234 354
imix-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.48 8.50 2. 2.50 8.55
imix-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.96 10.12 2. 2.96 10.12
imix-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.74 16.22 2. 4.76 16.30

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.88 5.02 2. 3.93 5.10 3. 25 58 115 25 58 91 4. 73 119 157 54 101 136 5. 227 273 306 159 240 284
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.75 4.86 2. 3.79 4.91 3. 28 52 81 27 65 95 4. 80 111 146 60 120 143 5. 363 437 508 157 349 421
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.45 5.76 2. 0.45 5.76 3. 47 81 91 45 57 97 4. 63 130 165 60 137 205 5. 290 480 701 287 550 741
imix-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.14 4.11 2. 1.16 4.21
imix-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.57 12.90 2. 3.68 13.31

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.03 4.45 2. 4.15 4.58 3. 23 44 56 22 31 44 4. 63 129 151 53 89 116 5. 239 284 313 117 199 251
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.84 4.24 2. 3.86 4.26 3. 30 58 75 24 40 55 4. 71 106 130 56 92 109 5. 478 542 598 137 311 372
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 1.63 20.76 2. 1.68 21.39 3. 29 48 61 28 53 73 4. 71 106 153 62 97 115 5. 214 289 317 223 277 305
imix-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.63 12.42 2. 3.65 12.49
imix-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.39 11.61 2. 3.49 11.96

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.09 4.52 2. 4.18 4.61 3. 22 49 62 22 42 54 4. 66 124 157 50 99 123 5. 223 259 286 118 195 233
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.84 4.24 2. 3.88 4.28 3. 28 63 79 24 45 60 4. 67 118 144 64 98 119 5. 476 539 591 148 295 357
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 1.35 17.17 2. 1.37 17.43 3. 31 57 76 29 53 77 4. 62 96 111 56 85 104 5. 149 207 251 154 237 290
imix-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.64 12.44 2. 3.65 12.51
imix-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.43 11.73 2. 3.53 12.09

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.80 4.92 2. 3.85 5.00 3. 27 45 67 26 51 65 4. 71 100 121 58 99 129 5. 192 220 245 134 215 248
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.76 4.87 2. 3.77 4.89 3. 28 48 68 27 66 82 4. 71 127 154 64 114 139 5. 358 430 498 165 347 413
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.41 5.29 2. 0.41 5.29 3. 46 82 104 45 64 94 4. 69 155 211 73 168 282 5. 246 433 564 315 526 725
imix-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.17 4.24 2. 1.22 4.42
imix-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.55 12.85 2. 3.66 13.24

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.06 4.48 2. 4.14 4.57 3. 23 54 75 22 38 66 4. 61 85 100 46 77 110 5. 214 248 274 118 192 228
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.83 4.23 2. 3.87 4.28 3. 26 51 66 24 56 84 4. 70 115 136 56 90 122 5. 488 548 599 143 283 350
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 1.63 20.78 2. 1.68 21.41 3. 32 48 67 27 40 53 4. 63 108 131 49 97 119 5. 219 256 294 176 237 289
imix-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.64 12.45 2. 3.67 12.57
imix-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.46 11.84 2. 3.55 12.14

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.06 4.48 2. 4.16 4.60 3. 22 38 70 22 38 55 4. 68 135 156 52 95 120 5. 242 287 317 117 221 265
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.84 4.23 2. 3.87 4.27 3. 24 47 69 24 45 65 4. 78 120 153 53 109 137 5. 476 545 602 149 305 383
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 1.34 17.04 2. 1.35 17.21 3. 27 59 84 27 50 82 4. 70 132 170 50 113 158 5. 175 267 322 135 226 266
imix-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.65 12.49 2. 3.67 12.55
imix-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.44 11.77 2. 3.51 12.01