3n-tsh-x520¶

10ge2p1x520-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
1518b-1t1c-ethip4ipsec10000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.10 1.28 2. 0.10 1.29 3. 60 61 62 60 61 62 4. 161 391 462 157 285 340 5. 507 807 894 500 756 812
1518b-2t2c-ethip4ipsec10000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.19 2.47 2. 0.19 2.47 3. 61 62 78 60 61 77 4. 125 433 545 157 348 440 5. 491 820 920 509 839 938
1518b-4t4c-ethip4ipsec10000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.37 4.83 2. 0.37 4.83 3. 61 73 102 61 70 98 4. 131 352 461 140 236 306 5. 494 689 830 521 698 850
imix-1t1c-ethip4ipsec10000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.06 0.23 2. 0.20 0.72
imix-2t2c-ethip4ipsec10000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.38 1.36 2. 0.38 1.36
imix-4t4c-ethip4ipsec10000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.74 2.66 2. 0.74 2.66

10ge2p1x520-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 1518b-4t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr

 1.  0.97      12.31 
 2.  0.97      12.37 
  
 3.   42   57   83        42   59   80  
 4.   73  264  306        93  188  210  
 5.  289  378  430       270  343  392

 imix-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr

 1.  0.70       2.39 
 2.  0.70       2.39

 imix-4t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr

 1.  2.21       7.57 
 2.  2.22       7.60

10ge2p1x520-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
1518b-1t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 0.34 4.36 2. 0.34 4.36 3. 42 67 71 42 61 74 4. 159 355 453 166 370 471 5. 737 1059 1161 685 1021 1274
1518b-2t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 0.66 8.36 2. 0.66 8.36 3. 43 76 92 43 71 81 4. 146 456 544 151 386 485 5. 410 539 606 412 506 560
1518b-4t4c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 0.97 12.30 2. 0.97 12.37 3. 44 99 125 43 82 98 4. 121 267 306 147 220 268 5. 253 343 382 235 317 356
imix-1t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 0.03 0.10 2. 0.65 2.23
imix-2t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.13 3.88 2. 1.13 3.88
imix-4t4c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.10 7.19 2. 2.11 7.22

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.11 1.37 2. 0.11 1.39 3. 57 58 59 58 59 63 4. 97 394 425 129 279 333 5. 496 805 892 491 763 817
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.20 2.59 2. 0.20 2.59 3. 59 61 72 59 61 63 4. 114 422 491 123 344 411 5. 487 789 865 461 744 846
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.39 5.05 2. 0.39 5.05 3. 60 66 91 60 90 112 4. 131 427 510 161 354 418 5. 469 697 791 514 796 890
imix-1t1c-ethip4ipsec1000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.22 0.81 2. 0.23 0.82
imix-2t2c-ethip4ipsec1000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.20 0.74 2. 0.43 1.54
imix-4t4c-ethip4ipsec1000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.82 2.95 2. 0.82 2.98

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
1518b-1t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 0.44 5.55 2. 0.45 5.72 3. 40 65 78 40 65 72 4. 163 440 509 160 296 319 5. 539 715 809 470 689 773
1518b-2t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 0.78 9.97 2. 0.80 10.13 3. 41 62 78 42 66 82 4. 151 277 348 137 223 267 5. 461 578 666 446 543 604
1518b-4t4c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 0.96 12.28 2. 0.97 12.35 3. 41 52 76 41 68 97 4. 99 227 269 103 205 228 5. 202 294 332 175 271 305
imix-1t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 0.98 3.35 2. 0.99 3.37
imix-2t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.49 5.09 2. 1.50 5.12
imix-4t4c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.77 9.48 2. 2.80 9.58

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
1518b-1t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 0.40 5.09 2. 0.40 5.11 3. 41 48 53 41 62 85 4. 154 504 585 211 323 391 5. 624 904 1012 566 742 932
1518b-2t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 0.71 9.10 2. 0.72 9.15 3. 42 57 68 42 69 79 4. 200 433 510 183 286 314 5. 489 638 735 462 567 641
1518b-4t4c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 0.97 12.35 2. 0.97 12.35 3. 42 66 83 43 61 79 4. 105 180 220 90 168 213 5. 233 302 354 231 285 334
imix-1t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 0.92 3.14 2. 0.92 3.16
imix-2t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.43 4.89 2. 1.43 4.89
imix-4t4c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.65 9.08 2. 2.69 9.21

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr¶

IPv4 IPsec tunnel mode performance test suite.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  0.30       0.33 
 2.  0.30       0.33 
  
 3.   36   53   80        37   52   68  
 4.  114  497  783       157  458  659  
 5. 1614 2535 3145      1631 2431 2977

 64b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  0.02       0.02 
 2.  0.40       0.44 
  
 3.   36   45   88        38   54  137  
 4.  147  406  583       169  476  702  
 5. 1775 2763 3691      1778 2843 3741

 64b-4t4c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  0.79       0.88 
 2.  0.79       0.88 
  
 3.   37   46   65        38   65  101  
 4.  101  329  523       133  405  604  
 5.  406  769  936       395  768  947

10ge2p1x520-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr¶

IPv4 IPsec tunnel mode performance test suite.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  1.99       2.20 
 2.  2.00       2.21 
  
 3.   28   69  101        29   87  100  
 4.  101  185  215        99  175  219  
 5.  282  333  383       294  350  396

 64b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  3.49       3.86 
 2.  3.51       3.88 
  
 3.   28   75  126        29   77  117  
 4.   70  120  134        63  134  148  
 5.  143  172  204       150  183  211

 64b-4t4c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  3.49       3.86 
 2.  3.51       3.88 
  
 3.   28   72   97        29   51   70  
 4.   73  101  113        63  118  139  
 5.  144  180  204       148  183  212

10ge2p1x520-ethip4ipsec40tnlsw-ip4base-policy-aes256gcm-ndrpdr¶

IPv4 IPsec tunnel mode performance test suite.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-1t1c-ethip4ipsec40tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  1.65       1.82 
 2.  1.66       1.83 
  
 3.   29   60   72        29   35   65  
 4.   74  173  192        63  165  175  
 5.  296  354  395       294  346  406

 64b-2t2c-ethip4ipsec40tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  2.78       3.07 
 2.  2.86       3.16 
  
 3.   29   63   82        29   48   59  
 4.   91  155  181        88  151  179  
 5.  230  276  310       235  283  317

 64b-4t4c-ethip4ipsec40tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  4.50       4.97 
 2.  4.64       5.12 
  
 3.   31   46   54        30   49   56  
 4.   61   69   76       100  109  116  
 5.  177  206  228       178  205  227

10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
1518b-1t1c-ethip4ipsec4tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.11 1.48 2. 0.12 1.49 3. 56 56 57 56 57 61 4. 103 479 521 124 342 396 5. 512 819 897 501 779 841
1518b-2t2c-ethip4ipsec4tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.22 2.79 2. 0.22 2.79 3. 58 62 79 58 59 75 4. 107 414 524 143 362 460 5. 523 872 1016 578 810 999
1518b-4t4c-ethip4ipsec4tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.29 3.75 2. 0.29 3.75 3. 58 61 87 58 62 96 4. 136 440 564 62 264 443 5. 569 893 1051 385 649 862
imix-1t1c-ethip4ipsec4tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.24 0.89 2. 0.25 0.89
imix-2t2c-ethip4ipsec4tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.47 1.70 2. 0.47 1.70
imix-4t4c-ethip4ipsec4tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 0.62 2.24 2. 0.62 2.26

10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
1518b-1t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 0.55 7.04 2. 0.56 7.12 3. 39 64 72 39 88 105 4. 105 482 531 155 339 399 5. 447 614 660 457 556 671
1518b-2t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 0.97 12.39 2. 0.98 12.52 3. 39 71 107 40 66 101 4. 136 259 330 167 283 366 5. 488 588 665 486 592 667
1518b-4t4c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 0.98 12.52 2. 0.99 12.58 3. 40 73 121 40 48 85 4. 111 240 321 77 221 284 5. 265 371 460 239 365 438
imix-1t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.29 4.43 2. 1.29 4.43
imix-2t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.12 7.24 2. 2.14 7.31
imix-4t4c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.88 9.87 2. 2.88 9.87

10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
1518b-1t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 0.48 6.18 2. 0.49 6.24 3. 39 48 65 39 70 77 4. 115 425 487 164 314 394 5. 573 767 848 521 730 852
1518b-2t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 0.88 11.15 2. 0.88 11.26 3. 41 66 101 41 77 126 4. 169 359 431 167 364 493 5. 519 622 707 525 631 713
imix-1t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.20 4.12 2. 1.21 4.15
imix-2t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.00 6.86 2. 2.02 6.92
imix-4t4c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.72 9.31 2. 2.75 9.40