3n-hsw-vic1385
40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.44 0.97
2. 1.45 0.97
3. 16 77 105 16 54 97
4. 96 281 316 91 278 310
5. 250 348 498 250 335 412
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.78 1.87
2. 2.80 1.88
3. 15 76 161 15 41 73
4. 152 261 286 142 254 284
5. 217 282 307 205 266 294
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 5.22 3.51
2. 5.35 3.59
3. 15 58 100 15 51 81
4. 46 94 109 52 88 113
5. 156 217 259 120 152 173
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.33 4.09
2. 0.34 4.16
3. 47 84 105 47 84 104
4. 196 468 532 200 456 518
5. 802 999 1244 813 1030 1285
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 8.02
2. 0.65 8.06
3. 47 139 205 47 97 187
4. 423 778 891 389 779 895
5. 1038 1375 1571 1052 1373 1517
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.26 15.56
2. 1.28 15.79
3. 47 109 193 47 103 187
4. 244 514 621 245 514 622
5. 475 635 760 470 626 759
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.80 2.40
2. 0.81 2.42
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.59 4.76
2. 1.62 4.83
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.12 9.33
2. 3.18 9.52
|
40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.18 0.80
2. 1.20 0.80
3. 15 53 98 15 24 81
4. 88 334 418 90 328 409
5. 250 390 458 249 386 457
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.28 1.53
2. 2.30 1.55
3. 15 45 94 15 41 90
4. 128 267 311 111 268 324
5. 298 343 398 248 334 358
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.28 2.87
2. 4.39 2.95
3. 15 53 121 15 49 80
4. 85 140 161 81 139 161
5. 110 171 206 104 129 194
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.31
2. 0.27 3.33
3. 39 68 82 38 53 71
4. 151 450 535 154 439 496
5. 557 871 918 547 864 928
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.52 6.45
2. 0.53 6.48
3. 38 100 127 38 99 127
4. 337 679 791 322 687 793
5. 1117 1481 1589 1125 1503 1597
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.02 12.51
2. 1.03 12.63
3. 39 92 192 38 85 188
4. 234 588 716 264 575 697
5. 429 621 725 435 623 726
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.68 2.02
2. 0.68 2.04
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.34 4.02
2. 1.36 4.08
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.52 7.53
2. 2.67 8.00
|
40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.47 1.66
2. 2.47 1.66
3. 12 50 93 11 16 52
4. 28 126 135 29 125 145
5. 133 177 201 130 178 217
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.49 3.02
2. 4.54 3.05
3. 12 18 101 11 13 30
4. 38 98 124 38 98 124
5. 60 84 103 56 81 95
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 8.27 5.56
2. 8.93 6.00
3. 12 32 60 11 25 55
4. 33 61 72 33 60 72
5. 97 127 146 52 67 86
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.81 9.99
2. 0.82 10.04
3. 15 46 67 15 33 55
4. 44 362 390 37 354 382
5. 387 559 653 358 512 608
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.13
2. 1.57 19.33
3. 15 32 53 15 30 52
4. 110 289 343 96 296 333
5. 292 395 431 301 417 445
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.03 37.25
2. 3.03 37.25
3. 15 30 47 15 27 44
4. 49 111 150 46 107 143
5. 101 127 147 87 119 134
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.71 5.11
2. 1.71 5.11
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.19 9.54
2. 3.22 9.63
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 6.25 18.70
2. 6.38 19.07
|
40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.38 1.60
2. 2.40 1.62
3. 12 71 100 12 27 93
4. 39 151 173 39 149 172
5. 165 202 223 168 202 233
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.43 2.98
2. 4.50 3.02
3. 12 53 145 11 40 110
4. 74 140 164 66 132 156
5. 166 194 208 145 183 199
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 8.28 5.57
2. 8.45 5.68
3. 12 51 71 11 43 70
4. 59 76 86 61 79 90
5. 78 101 116 65 88 102
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.71 8.70
2. 0.71 8.79
3. 16 73 96 16 52 80
4. 104 429 459 96 425 456
5. 451 747 834 446 739 846
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.39 17.09
2. 1.40 17.18
3. 16 48 75 15 46 70
4. 197 406 500 198 404 507
5. 395 494 532 384 473 527
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.69 33.05
2. 2.74 33.72
3. 16 28 55 15 24 40
4. 65 123 137 42 130 143
5. 136 175 204 120 160 184
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.58 4.74
2. 1.59 4.76
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.97 8.89
2. 3.02 9.02
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.86 17.52
2. 5.95 17.79
|
40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.44 0.30
2. 0.45 0.30
3. 23 48 115 23 47 115
4. 149 447 640 162 461 643
5. 1688 2497 3235 1563 2325 2937
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.77 0.52
2. 0.78 0.53
3. 21 42 147 21 43 145
4. 220 635 907 213 618 890
5. 581 1042 1380 559 970 1234
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.53 1.03
2. 1.56 1.05
3. 21 29 69 21 29 69
4. 62 212 360 58 192 347
5. 227 399 534 217 382 515
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.22 2.71
2. 0.22 2.73
3. 54 75 104 54 73 104
4. 160 431 559 166 417 551
5. 1266 1975 2687 1353 2151 3107
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.43 5.31
2. 0.43 5.34
3. 53 119 201 52 59 137
4. 377 758 1000 337 748 1001
5. 1351 1943 2421 1354 1955 2469
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.84 10.29
2. 0.85 10.45
3. 53 122 239 52 98 218
4. 317 686 916 300 695 934
5. 776 1094 1340 769 1097 1345
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 1.05
2. 0.36 1.06
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 1.96
2. 0.66 1.98
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.25 3.74
2. 1.28 3.82
|
40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.42 0.28
2. 0.42 0.28
3. 23 43 101 22 36 60
4. 146 384 541 139 352 507
5. 1527 2213 2775 1518 2269 2861
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.75 0.50
2. 0.76 0.51
3. 20 46 120 20 46 116
4. 222 653 860 213 685 907
5. 796 1302 1592 758 1251 1563
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.46 0.98
2. 1.48 0.99
3. 20 26 108 20 25 110
4. 105 331 511 98 323 502
5. 351 529 696 361 563 759
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.19 2.33
2. 0.19 2.34
3. 44 49 63 44 49 61
4. 127 266 355 126 261 339
5. 1062 1632 2193 1034 1734 2303
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.37 4.55
2. 0.37 4.60
3. 44 78 138 43 51 75
4. 312 673 882 294 669 913
5. 1194 1738 2205 1159 1712 2155
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.72 8.90
2. 0.73 9.03
3. 45 86 203 44 84 199
4. 256 598 828 257 596 838
5. 778 1107 1355 772 1101 1356
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.33 0.99
2. 0.33 1.00
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.61 1.82
2. 0.61 1.84
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.19 3.57
2. 1.21 3.62
|
40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.52 0.35
2. 0.52 0.35
3. 17 35 108 17 26 62
4. 162 444 678 161 421 619
5. 996 1546 2035 987 1500 2042
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.90 0.60
2. 0.91 0.61
3. 16 19 86 16 19 85
4. 178 526 736 172 510 725
5. 396 690 909 362 662 836
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.74 1.17
2. 1.75 1.18
3. 17 58 175 16 57 174
4. 122 361 525 120 383 556
5. 320 541 722 316 534 720
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.36 4.45
2. 0.36 4.47
3. 21 43 82 21 43 83
4. 92 333 514 97 349 502
5. 1544 2287 3131 1623 2381 3265
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.63 7.79
2. 0.64 7.83
3. 20 47 107 19 23 76
4. 245 727 1033 204 693 994
5. 1043 1628 1989 969 1536 1919
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.21 14.93
2. 1.24 15.24
3. 21 62 156 20 58 148
4. 86 409 629 75 388 594
5. 401 659 872 369 623 828
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.45 1.34
2. 0.46 1.39
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.82 2.46
2. 0.83 2.48
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.61 4.82
2. 1.64 4.90
|
40ge2p1vic1385-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.50 0.34
2. 0.50 0.34
3. 18 47 125 18 44 123
4. 176 460 697 128 450 662
5. 1528 2183 2731 1408 2139 2633
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.89 0.60
2. 0.90 0.60
3. 16 20 63 16 19 59
4. 100 546 860 115 526 846
5. 441 713 1000 512 933 1236
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.67 1.12
2. 1.70 1.14
3. 17 48 126 17 45 123
4. 110 350 543 80 308 497
5. 298 511 679 288 510 681
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.34 4.17
2. 0.34 4.19
3. 22 34 78 21 34 78
4. 93 436 622 97 441 605
5. 1548 2395 3291 1684 2565 3539
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.62 7.62
2. 0.63 7.69
3. 21 51 116 21 42 102
4. 152 594 854 129 572 842
5. 863 1316 1636 908 1380 1682
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.21 14.95
2. 1.23 15.17
3. 21 45 113 20 34 91
4. 125 448 659 118 433 654
5. 404 655 839 391 638 811
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.44 1.31
2. 0.46 1.37
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.81 2.41
2. 0.81 2.43
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.58 4.71
2. 1.60 4.78
|
40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.78 1.20
2. 1.81 1.21
3. 15 89 122 15 40 116
4. 71 249 285 50 239 271
5. 257 343 404 259 352 416
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.39 2.28
2. 3.42 2.30
3. 15 82 189 15 84 190
4. 105 206 242 102 209 252
5. 213 263 302 195 252 284
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.30 2.22
2. 3.35 2.25
3. 15 143 191 15 66 98
4. 123 218 259 103 208 250
5. 218 262 286 195 242 274
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 4.29
2. 0.35 4.33
3. 47 93 128 47 70 111
4. 203 497 582 195 483 522
5. 895 1165 1478 876 1134 1492
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.67 8.23
2. 0.67 8.28
3. 47 124 206 46 101 202
4. 406 762 871 398 766 873
5. 1023 1314 1481 1018 1299 1488
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.17
2. 0.67 8.25
3. 47 134 206 46 119 205
4. 407 758 869 390 756 868
5. 1010 1321 1505 1001 1311 1510
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.90 2.68
2. 0.91 2.71
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.76 5.26
2. 1.78 5.31
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.70 5.10
2. 1.74 5.20
|
40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.40 0.94
2. 1.41 0.95
3. 15 74 104 15 34 97
4. 92 295 337 94 296 336
5. 254 343 437 259 337 437
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.67 1.80
2. 2.73 1.83
3. 15 74 166 15 71 179
4. 190 307 325 193 306 325
5. 250 320 344 248 319 356
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.75 1.85
2. 2.78 1.87
3. 15 124 160 15 96 162
4. 157 276 306 175 293 314
5. 225 291 333 209 280 311
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.28 3.41
2. 0.28 3.43
3. 38 80 95 38 80 94
4. 131 463 544 128 451 535
5. 548 883 968 536 860 942
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.54 6.60
2. 0.54 6.63
3. 38 88 182 38 76 176
4. 393 726 854 379 717 843
5. 1135 1544 1650 1148 1548 1652
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.57
2. 0.54 6.63
3. 38 93 182 37 73 162
4. 392 737 868 373 723 847
5. 1156 1555 1684 1150 1546 1674
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.74 2.22
2. 0.75 2.24
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.47 4.40
2. 1.48 4.43
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.46 4.37
2. 1.47 4.41
|
40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.61 2.42
2. 3.66 2.46
3. 11 25 114 11 25 113
4. 30 126 141 35 126 146
5. 130 175 228 131 177 230
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 7.05 4.74
2. 7.19 4.83
3. 11 66 89 11 73 96
4. 64 108 126 63 108 126
5. 105 132 151 103 129 149
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 7.10 4.77
2. 7.24 4.87
3. 11 71 89 11 66 85
4. 64 110 129 64 109 129
5. 100 125 142 102 126 147
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.90 11.13
2. 0.91 11.18
3. 15 54 83 15 27 78
4. 114 432 470 108 431 467
5. 345 475 633 335 484 616
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.77 21.84
2. 1.78 21.95
3. 15 60 122 15 58 110
4. 150 290 324 153 288 318
5. 287 360 402 286 371 407
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.76 21.68
2. 1.78 21.90
3. 15 51 71 14 48 69
4. 153 291 325 162 299 330
5. 289 362 410 293 377 418
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.16 6.46
2. 2.18 6.53
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.34 12.99
2. 4.41 13.18
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.35 13.00
2. 4.39 13.13
|
40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.44 2.31
2. 3.47 2.33
3. 12 92 116 11 79 114
4. 47 128 151 40 121 147
5. 122 155 203 123 158 212
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.49 4.36
2. 6.79 4.56
3. 12 55 108 11 29 66
4. 53 106 127 53 103 123
5. 119 146 170 116 143 166
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.06 4.08
2. 6.18 4.15
3. 12 35 47 12 31 43
4. 42 72 86 37 67 80
5. 94 122 141 81 109 130
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.78 9.55
2. 0.78 9.60
3. 15 92 105 15 90 103
4. 80 422 490 79 412 467
5. 504 711 816 467 664 785
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.53 18.87
2. 1.53 18.87
3. 15 57 121 15 50 97
4. 158 358 437 131 363 446
5. 336 450 479 315 424 469
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.53 18.88
2. 1.55 19.07
3. 15 55 101 15 51 84
4. 164 367 446 149 362 439
5. 332 435 496 331 438 513
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.98 5.91
2. 1.99 5.94
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.93 11.74
2. 3.94 11.80
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.82 11.41
2. 3.87 11.59
|
40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.69 1.13
2. 1.71 1.15
3. 16 65 78 15 63 78
4. 83 205 271 17 212 231
5. 313 399 463 311 397 453
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 3.38 2.27
2. 3.41 2.29
3. 16 65 96 15 74 104
4. 71 140 173 76 142 181
5. 156 192 228 156 190 231
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 3.23 2.17
2. 3.26 2.19
3. 16 56 158 15 59 162
4. 103 190 224 103 191 231
5. 176 234 280 180 237 273
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 4.25
2. 0.35 4.29
3. 47 86 110 47 86 109
4. 209 492 564 191 468 525
5. 957 1272 1684 932 1182 1382
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.16
2. 0.67 8.20
3. 47 136 208 47 95 200
4. 412 762 875 397 766 877
5. 1018 1318 1499 990 1307 1496
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.12
2. 0.66 8.16
3. 47 143 208 47 94 204
4. 425 760 874 383 765 877
5. 1005 1317 1503 986 1309 1499
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.88 2.64
2. 0.89 2.66
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.71 5.12
2. 1.73 5.17
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.70 5.08
2. 1.72 5.16
|
40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.34 0.90
2. 1.35 0.91
3. 15 64 86 15 57 86
4. 99 226 308 102 241 306
5. 239 336 401 249 356 421
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 2.63 1.77
2. 2.71 1.82
3. 15 62 154 15 48 80
4. 167 281 311 166 267 308
5. 238 308 342 235 301 335
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 2.69 1.81
2. 2.72 1.83
3. 15 81 180 15 81 189
4. 192 287 328 182 311 333
5. 261 332 371 255 326 356
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.28 3.39
2. 0.28 3.41
3. 39 69 95 38 62 95
4. 157 447 501 156 441 481
5. 560 881 956 553 874 931
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.55
2. 0.54 6.58
3. 38 119 181 38 104 181
4. 369 719 852 360 721 848
5. 1157 1558 1657 1142 1541 1661
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.50
2. 0.53 6.57
3. 38 139 157 38 139 155
4. 384 722 853 367 711 838
5. 1151 1546 1649 1144 1545 1641
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.73 2.19
2. 0.74 2.20
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.44 4.30
2. 1.44 4.32
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.43 4.27
2. 1.44 4.31
|
40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 3.28 2.21
2. 3.32 2.23
3. 12 78 102 11 36 91
4. 42 128 150 28 111 155
5. 125 166 212 132 171 222
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 6.35 4.27
2. 6.50 4.37
3. 12 13 28 11 12 20
4. 29 54 69 33 59 75
5. 90 112 129 91 113 131
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 5.95 4.00
2. 5.95 4.00
3. 12 21 34 12 29 35
4. 26 45 63 23 41 58
5. 69 95 114 68 93 115
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.88 10.85
2. 0.89 10.90
3. 15 68 94 15 46 90
4. 106 431 467 108 434 460
5. 351 521 658 340 502 655
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.75 21.49
2. 1.76 21.60
3. 15 43 93 15 37 79
4. 133 284 329 135 285 319
5. 289 385 442 288 374 423
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.75 21.49
2. 1.76 21.60
3. 15 39 64 15 36 56
4. 109 234 287 106 237 302
5. 259 330 378 258 336 391
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 2.05 6.13
2. 2.07 6.19
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 4.05 12.10
2. 4.07 12.16
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 3.98 11.89
2. 4.06 12.13
|
40ge2p1vic1385-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.13 2.10
2. 3.16 2.12
3. 13 24 31 12 26 34
4. 37 60 81 35 61 81
5. 169 211 249 171 219 256
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 6.05 4.06
2. 6.14 4.13
3. 12 62 87 12 57 87
4. 63 110 129 57 106 125
5. 111 139 156 112 143 163
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 6.12 4.11
2. 6.18 4.15
3. 12 57 82 11 45 79
4. 41 64 85 38 64 81
5. 83 105 121 84 106 121
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.75 9.29
2. 0.76 9.38
3. 16 89 98 15 86 95
4. 114 437 468 100 427 455
5. 506 720 805 469 707 834
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.48 18.27
2. 1.50 18.46
3. 16 112 152 15 88 142
4. 183 379 459 168 372 454
5. 336 419 475 315 425 465
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.50 18.50
2. 1.50 18.50
3. 15 42 84 15 42 79
4. 169 359 450 173 383 468
5. 332 452 475 328 451 493
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.86 5.57
2. 1.88 5.63
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.60 10.77
2. 3.66 10.93
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.65 10.93
2. 3.69 11.04
|
40ge2p1vic1385-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.46 0.98
2. 1.49 1.00
3. 16 44 96 15 42 88
4. 71 267 293 71 264 294
5. 255 337 408 255 330 418
|
64b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.86 1.92
2. 2.89 1.94
3. 16 50 148 15 45 146
4. 119 239 268 127 246 283
5. 223 283 344 218 280 341
|
64b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 5.50 3.70
2. 5.64 3.79
3. 16 38 59 15 38 61
4. 53 112 130 57 116 134
5. 162 206 254 141 178 215
|
1518b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.14
2. 0.34 4.16
3. 47 91 112 47 90 112
4. 158 437 521 158 430 499
5. 845 1061 1307 818 1024 1228
|
1518b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 8.05
2. 0.66 8.09
3. 47 118 189 47 84 160
4. 314 657 774 284 652 769
5. 896 1164 1326 897 1154 1287
|
1518b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.25 15.41
2. 1.27 15.62
3. 47 101 187 47 95 185
4. 200 445 564 214 457 575
5. 417 576 702 414 570 698
|
imix-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.82 2.44
2. 0.82 2.47
|
imix-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.60 4.78
2. 1.61 4.83
|
imix-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.14 9.39
2. 3.19 9.54
|
40ge2p1vic1385-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.20 0.80
2. 1.22 0.82
3. 15 40 92 15 39 82
4. 79 375 435 82 341 427
5. 295 421 522 291 414 499
|
64b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.35 1.58
2. 2.37 1.59
3. 15 53 146 15 49 114
4. 131 279 311 125 272 307
5. 279 334 367 266 317 395
|
64b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.46 2.99
2. 4.64 3.12
3. 15 56 133 15 56 131
4. 61 133 154 57 129 154
5. 189 215 243 170 198 221
|
1518b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.31
2. 0.27 3.33
3. 38 63 80 38 48 80
4. 80 383 466 82 372 444
5. 576 849 959 564 829 917
|
1518b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.46
2. 0.53 6.50
3. 38 100 159 38 58 152
4. 295 663 793 284 658 777
5. 1046 1429 1554 1024 1392 1533
|
1518b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.00 12.35
2. 1.02 12.54
3. 38 80 172 38 76 156
4. 231 608 722 229 595 714
5. 464 656 749 459 649 747
|
imix-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.68 2.04
2. 0.69 2.06
|
imix-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.37 4.09
2. 1.38 4.13
|
imix-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.64 7.89
2. 2.68 8.01
|
40ge2p1vic1385-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.63 1.77
2. 2.65 1.78
3. 12 69 102 11 24 74
4. 50 106 152 13 88 106
5. 152 204 246 158 208 257
|
64b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.80 3.22
2. 4.95 3.32
3. 11 29 50 11 17 49
4. 58 103 128 48 97 119
5. 126 161 181 117 150 176
|
64b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 9.06 6.09
2. 9.52 6.40
3. 12 26 43 11 29 46
4. 38 59 73 38 61 74
5. 91 118 141 66 86 103
|
1518b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.83 10.17
2. 0.83 10.22
3. 15 75 91 15 66 86
4. 77 367 393 71 359 387
5. 421 554 651 412 540 644
|
1518b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.59 19.51
2. 1.59 19.60
3. 15 91 116 15 88 121
4. 95 207 249 84 201 236
5. 286 359 425 284 342 405
|
1518b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.03 37.24
2. 3.10 38.19
3. 15 24 63 15 22 45
4. 44 102 125 43 90 116
5. 106 139 164 96 126 146
|
imix-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.77 5.28
2. 1.78 5.33
|
imix-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.35 10.02
2. 3.38 10.12
|
imix-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 6.52 19.49
2. 6.72 20.08
|
40ge2p1vic1385-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.48 1.67
2. 2.53 1.70
3. 12 31 96 12 34 79
4. 39 128 146 40 121 139
5. 171 219 260 174 216 262
|
64b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.55 3.06
2. 4.69 3.15
3. 12 98 136 11 93 128
4. 71 146 162 73 141 159
5. 158 179 195 147 168 185
|
64b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 9.20 6.18
2. 9.39 6.31
3. 12 33 53 11 35 58
4. 44 66 81 46 71 85
5. 105 134 155 74 92 110
|
1518b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.71 8.79
2. 0.72 8.84
3. 16 47 73 15 27 57
4. 112 414 458 70 410 443
5. 450 758 863 444 742 853
|
1518b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.40 17.23
2. 1.42 17.49
3. 16 66 133 15 55 128
4. 180 338 430 175 356 427
5. 326 427 481 313 422 459
|
1518b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.78 34.15
2. 2.82 34.67
3. 16 32 55 15 32 50
4. 66 100 145 66 98 125
5. 146 191 225 136 172 204
|
imix-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.63 4.87
2. 1.64 4.89
|
imix-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.12 9.32
2. 3.17 9.47
|
imix-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.18 18.48
2. 6.30 18.85
|
40ge2p1vic1385-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.60 1.08
2. 1.64 1.10
3. 15 109 123 15 89 120
4. 96 282 314 92 230 307
5. 253 329 393 265 327 395
|
64b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.12 2.10
2. 3.17 2.13
3. 15 103 161 15 89 165
4. 106 184 219 97 169 215
5. 222 304 347 216 287 329
|
64b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 4.26 2.86
2. 4.30 2.89
3. 16 39 89 15 39 75
4. 42 142 161 48 152 170
5. 101 160 192 98 152 185
|
1518b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.20
2. 0.35 4.25
3. 47 71 113 47 71 113
4. 209 491 544 189 484 530
5. 898 1168 1514 872 1128 1490
|
1518b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.16
2. 0.67 8.20
3. 47 134 209 47 98 203
4. 452 761 873 431 762 872
5. 1037 1373 1532 1018 1332 1520
|
1518b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.83 10.16
2. 0.83 10.25
3. 47 94 186 47 85 182
4. 190 564 673 182 562 678
5. 556 768 891 552 770 891
|
imix-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.85 2.55
2. 0.86 2.57
|
imix-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.71 5.11
2. 1.73 5.16
|
imix-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.12 6.35
2. 2.15 6.44
|
40ge2p1vic1385-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.29 0.87
2. 1.31 0.88
3. 15 74 117 15 31 95
4. 31 299 384 35 288 368
5. 261 378 487 262 374 479
|
64b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.50 1.68
2. 2.54 1.71
3. 15 44 111 15 41 107
4. 71 156 196 68 154 200
5. 171 223 257 160 215 249
|
64b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 3.39 2.28
2. 3.43 2.30
3. 15 46 144 15 45 135
4. 47 143 169 45 138 169
5. 136 198 222 135 196 228
|
1518b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.36
2. 0.27 3.38
3. 38 68 95 38 68 94
4. 149 438 512 149 437 504
5. 563 876 945 554 866 920
|
1518b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.56
2. 0.54 6.59
3. 38 117 187 38 77 180
4. 389 731 857 377 733 855
5. 1177 1572 1703 1169 1564 1701
|
1518b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.66 8.17
2. 0.67 8.24
3. 38 77 173 38 46 138
4. 163 543 652 116 548 662
5. 558 911 1093 554 905 1105
|
imix-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.71 2.13
2. 0.72 2.14
|
imix-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.42 4.23
2. 1.43 4.28
|
imix-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.78 5.31
2. 1.80 5.38
|
40ge2p1vic1385-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.04 2.04
2. 3.12 2.10
3. 11 77 115 11 27 109
4. 18 145 186 21 142 184
5. 128 177 237 140 179 220
|
64b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.52 3.71
2. 5.69 3.82
3. 11 35 54 11 30 47
4. 61 124 143 66 126 142
5. 122 153 177 108 141 162
|
64b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 8.30 5.58
2. 8.52 5.73
3. 12 60 77 11 57 76
4. 51 73 85 54 75 86
5. 68 94 110 72 97 113
|
1518b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.85 10.52
2. 0.86 10.62
3. 15 60 73 15 48 66
4. 121 317 386 110 312 393
5. 306 425 477 293 414 455
|
1518b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.65 20.31
2. 1.67 20.51
3. 15 53 80 15 43 62
4. 137 291 356 122 300 361
5. 315 409 458 303 402 452
|
1518b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.26 27.80
2. 2.28 28.07
3. 15 31 105 15 34 97
4. 31 178 218 35 173 225
5. 129 214 260 121 216 252
|
imix-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.94 5.79
2. 1.96 5.85
|
imix-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.67 10.96
2. 3.72 11.13
|
imix-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.21 15.58
2. 5.26 15.74
|
40ge2p1vic1385-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.92 1.97
2. 2.98 2.01
3. 12 72 117 11 27 87
4. 36 145 156 37 143 158
5. 150 194 224 150 198 228
|
64b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.40 3.63
2. 5.48 3.68
3. 12 64 87 11 67 86
4. 83 145 157 85 141 155
5. 113 149 174 100 133 163
|
64b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 7.70 5.17
2. 7.81 5.25
3. 12 14 62 11 15 63
4. 14 62 90 14 31 47
5. 67 95 110 74 103 121
|
1518b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.74 9.10
2. 0.74 9.15
3. 16 89 103 15 16 59
4. 114 436 466 106 431 459
5. 438 736 838 429 721 831
|
1518b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.45 17.89
2. 1.47 18.07
3. 15 59 108 15 53 78
4. 187 374 433 174 354 452
5. 354 487 531 350 478 510
|
1518b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.90 23.33
2. 1.91 23.53
3. 15 34 60 15 30 52
4. 34 225 260 38 224 257
5. 163 239 275 157 238 290
|
imix-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.78 5.31
2. 1.78 5.34
|
imix-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.41 10.20
2. 3.46 10.35
|
imix-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.70 14.05
2. 4.75 14.22
|
40ge2p1vic1385-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.67 1.12
2. 1.68 1.13
3. 15 86 118 15 43 115
4. 73 279 298 64 264 298
5. 228 313 394 229 304 370
|
64b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.19 2.14
2. 3.25 2.18
3. 15 80 187 15 79 182
4. 130 218 264 101 214 239
5. 201 266 297 200 265 292
|
64b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.26 2.19
2. 3.32 2.23
3. 15 124 150 15 74 106
4. 50 133 162 94 182 220
5. 139 189 206 212 275 297
|
1518b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 4.25
2. 0.35 4.27
3. 47 70 112 47 71 112
4. 193 513 606 192 490 572
5. 834 1068 1331 805 1035 1312
|
1518b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.67 8.20
2. 0.67 8.24
3. 47 136 208 47 114 206
4. 416 768 877 394 768 878
5. 1039 1336 1503 1010 1319 1509
|
1518b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.18
2. 0.67 8.22
3. 47 141 174 47 165 202
4. 251 603 671 388 763 876
5. 684 934 1092 1007 1322 1517
|
imix-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.87 2.60
2. 0.87 2.61
|
imix-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.73 5.17
2. 1.75 5.22
|
imix-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.72 5.16
2. 1.74 5.21
|
40ge2p1vic1385-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.33 0.89
2. 1.34 0.90
3. 15 93 106 15 85 107
4. 96 289 361 23 276 354
5. 243 351 453 240 348 454
|
64b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.55 1.72
2. 2.59 1.74
3. 15 69 167 15 67 168
4. 124 234 274 108 238 275
5. 259 341 381 251 331 377
|
64b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.62 1.76
2. 2.63 1.77
3. 15 30 134 15 57 161
4. 54 168 212 89 202 227
5. 138 205 225 210 296 322
|
1518b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.38
2. 0.28 3.40
3. 38 72 92 38 71 93
4. 139 456 543 137 450 534
5. 540 870 950 540 868 940
|
1518b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.54 6.58
2. 0.54 6.62
3. 38 143 181 38 142 182
4. 370 727 851 354 727 853
5. 1170 1564 1705 1157 1553 1655
|
1518b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.54
2. 0.54 6.61
3. 38 118 150 38 140 181
4. 231 572 642 364 731 854
5. 779 1148 1257 1147 1549 1667
|
imix-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.72 2.15
2. 0.73 2.18
|
imix-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.44 4.32
2. 1.46 4.36
|
imix-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.44 4.30
2. 1.45 4.34
|
40ge2p1vic1385-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.23 2.17
2. 3.26 2.19
3. 11 40 109 11 21 106
4. 44 132 155 44 121 152
5. 115 159 194 118 155 195
|
64b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.88 3.95
2. 5.96 4.01
3. 11 94 119 11 95 122
4. 58 112 129 55 116 132
5. 98 126 147 97 125 145
|
64b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 6.27 4.21
2. 6.37 4.28
3. 11 32 42 11 54 84
4. 36 88 105 59 114 136
5. 77 100 113 115 140 155
|
1518b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.87 10.74
2. 0.88 10.79
3. 15 90 101 15 87 99
4. 114 432 467 93 429 463
5. 390 528 673 344 503 647
|
1518b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.69 20.74
2. 1.70 20.95
3. 15 45 62 15 43 62
4. 138 270 314 139 279 326
5. 291 404 473 285 395 480
|
1518b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.71 21.00
2. 1.72 21.21
3. 15 31 78 15 46 69
4. 86 201 243 141 271 305
5. 185 273 319 280 374 425
|
imix-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.02 6.03
2. 2.03 6.06
|
imix-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.88 11.60
2. 3.96 11.83
|
imix-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.03 12.06
2. 4.11 12.30
|
40ge2p1vic1385-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.08 2.07
2. 3.11 2.09
3. 12 73 84 11 64 83
4. 28 133 170 23 131 156
5. 152 184 237 144 177 223
|
64b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.70 3.83
2. 5.79 3.89
3. 12 20 53 11 13 42
4. 25 48 60 22 42 57
5. 66 84 98 57 76 92
|
64b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.02 4.05
2. 6.12 4.11
3. 12 52 72 11 74 95
4. 49 90 106 59 107 138
5. 74 104 116 118 149 178
|
1518b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.75 9.21
2. 0.75 9.26
3. 15 93 105 15 84 102
4. 108 431 456 97 420 450
5. 426 704 805 418 699 807
|
1518b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.49 18.30
2. 1.50 18.49
3. 15 53 75 15 47 70
4. 167 365 444 143 365 453
5. 326 439 468 319 447 485
|
1518b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.50 18.49
2. 1.52 18.68
3. 15 33 95 15 50 74
4. 77 261 331 139 354 402
5. 196 309 330 335 466 486
|
imix-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.84 5.52
2. 1.85 5.55
|
imix-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.59 10.75
2. 3.65 10.91
|
imix-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.72 11.12
2. 3.76 11.23
|
40ge2p1vic1385-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.39 0.94
2. 1.42 0.95
3. 16 50 97 15 47 89
4. 79 276 307 78 272 300
5. 223 309 400 223 301 390
|
64b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.72 1.83
2. 2.76 1.85
3. 16 107 139 15 107 139
4. 147 264 277 139 256 269
5. 226 303 333 220 282 322
|
64b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 5.02 3.38
2. 5.15 3.46
3. 16 45 123 15 42 118
4. 57 118 137 52 123 145
5. 147 180 206 133 162 180
|
1518b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.33 4.06
2. 0.34 4.13
3. 47 88 112 47 88 110
4. 171 418 507 166 426 503
5. 834 1036 1232 832 1055 1325
|
1518b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 8.02
2. 0.66 8.06
3. 47 145 198 47 120 189
4. 388 746 838 354 742 835
5. 1010 1303 1448 1017 1302 1457
|
1518b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.29 15.84
2. 1.30 16.00
3. 47 125 194 47 118 199
4. 200 446 570 209 457 581
5. 498 644 771 492 638 764
|
imix-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.79 2.36
2. 0.79 2.37
|
imix-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.57 4.70
2. 1.61 4.82
|
imix-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.06 9.15
2. 3.14 9.38
|
40ge2p1vic1385-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.16 0.78
2. 1.17 0.79
3. 15 44 76 15 45 72
4. 101 323 374 104 321 375
5. 245 363 444 254 368 454
|
64b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.24 1.51
2. 2.27 1.52
3. 15 32 99 15 30 87
4. 100 250 315 92 247 312
5. 310 370 439 239 330 369
|
64b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.18 2.81
2. 4.27 2.87
3. 16 39 137 15 32 60
4. 76 139 159 64 135 155
5. 115 174 205 90 143 175
|
1518b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.26 3.24
2. 0.27 3.31
3. 38 59 75 38 58 74
4. 148 441 513 148 429 485
5. 539 860 925 528 853 897
|
1518b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.52 6.43
2. 0.52 6.46
3. 38 100 159 38 58 144
4. 333 665 794 308 667 792
5. 1078 1407 1540 1084 1393 1525
|
1518b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.03 12.72
2. 1.04 12.84
3. 38 84 175 38 79 167
4. 289 597 716 296 605 717
5. 444 639 752 449 641 750
|
imix-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.67 2.00
2. 0.67 2.02
|
imix-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.25 3.73
2. 1.34 4.01
|
imix-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.63 7.86
2. 2.67 7.97
|
40ge2p1vic1385-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.35 1.58
2. 2.38 1.60
3. 12 26 88 11 26 83
4. 45 137 164 46 138 160
5. 136 181 262 136 181 238
|
64b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.27 2.87
2. 4.29 2.88
3. 12 13 47 11 13 41
4. 45 138 158 44 136 156
5. 87 124 164 79 117 142
|
64b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 8.18 5.50
2. 8.43 5.66
3. 12 58 78 11 32 67
4. 58 73 82 64 78 89
5. 84 108 124 75 101 121
|
1518b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.81 9.95
2. 0.81 10.00
3. 15 52 73 15 26 58
4. 110 379 408 50 375 404
5. 394 527 591 379 502 574
|
1518b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.53 18.80
2. 1.55 19.08
3. 15 16 17 15 16 18
4. 34 220 307 29 214 287
5. 254 341 384 247 335 394
|
1518b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.96 36.36
2. 2.99 36.73
3. 15 17 43 15 17 41
4. 32 119 142 39 106 139
5. 99 128 151 92 118 141
|
imix-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.67 4.99
2. 1.69 5.04
|
imix-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.03 9.07
2. 3.11 9.30
|
imix-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.89 17.62
2. 5.95 17.79
|
40ge2p1vic1385-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.29 1.54
2. 2.29 1.54
3. 12 54 84 12 51 83
4. 28 131 148 26 130 158
5. 172 216 259 136 210 248
|
64b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.31 2.90
2. 4.38 2.95
3. 12 57 128 11 54 90
4. 60 97 118 54 91 113
5. 81 127 175 79 102 149
|
64b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 7.70 5.17
2. 8.01 5.39
3. 12 31 47 12 19 32
4. 13 53 82 12 13 19
5. 73 95 107 68 89 102
|
1518b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.70 8.67
2. 0.71 8.71
3. 16 47 53 16 45 52
4. 110 231 275 85 227 240
5. 372 599 691 390 599 678
|
1518b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.38 16.93
2. 1.39 17.10
3. 16 69 124 15 58 125
4. 187 361 441 163 374 465
5. 335 434 483 328 427 492
|
1518b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.62 32.21
2. 2.68 33.02
3. 16 37 67 15 35 64
4. 58 92 107 41 99 113
5. 131 176 221 116 155 186
|
imix-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.55 4.62
2. 1.55 4.64
|
imix-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.92 8.72
2. 2.94 8.81
|
imix-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.55 16.60
2. 5.66 16.93
|