3n-hsw-x520
10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.48 0.99
2. 1.49 1.00
3. 26 43 65 26 32 39
4. 73 254 298 44 253 289
5. 197 263 300 211 263 304
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.87 1.93
2. 2.92 1.96
3. 26 95 168 26 84 142
4. 132 252 270 133 252 272
5. 229 297 387 213 278 363
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 5.32 3.58
2. 5.40 3.63
3. 26 94 127 26 97 131
4. 99 155 164 64 122 134
5. 146 175 192 143 172 187
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.15
2. 0.34 4.17
3. 62 104 109 63 83 102
4. 214 509 532 216 508 531
5. 774 953 1019 780 947 1018
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 8.02
2. 0.66 8.06
3. 63 143 160 63 93 154
4. 211 498 546 157 493 507
5. 689 864 980 682 863 975
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.29 15.92
2. 1.30 16.00
3. 63 100 122 63 97 118
4. 181 313 361 178 318 373
5. 373 474 550 369 467 543
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.81 2.43
2. 0.82 2.45
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.61 4.83
2. 1.63 4.87
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.16 9.45
2. 3.21 9.59
|
10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.21 0.81
2. 1.21 0.81
3. 26 78 100 22 30 34
4. 77 317 374 75 316 379
5. 270 381 450 272 378 446
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.33 1.57
2. 2.36 1.58
3. 25 65 110 25 47 86
4. 119 255 324 112 262 315
5. 292 366 437 272 361 430
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.42 2.97
2. 4.51 3.03
3. 26 75 173 25 69 91
4. 91 168 186 93 168 189
5. 191 211 223 164 202 219
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.32
2. 0.27 3.34
3. 54 79 105 54 65 106
4. 159 401 430 159 401 427
5. 515 840 910 504 837 907
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.52 6.45
2. 0.53 6.48
3. 54 101 145 54 63 139
4. 304 641 719 310 639 706
5. 975 1266 1508 953 1253 1414
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.04 12.76
2. 1.05 12.89
3. 54 86 117 54 81 110
4. 194 412 511 190 407 509
5. 329 448 514 329 447 519
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.68 2.05
2. 0.69 2.06
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.36 4.06
2. 1.36 4.06
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.68 8.01
2. 2.70 8.09
|
10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.59 1.74
2. 2.61 1.75
3. 22 66 97 22 61 94
4. 67 148 175 44 109 148
5. 116 185 195 125 183 193
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.69 3.15
2. 4.86 3.26
3. 21 81 115 21 92 121
4. 57 115 142 55 110 139
5. 79 98 113 68 87 102
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 8.94 6.01
2. 8.98 6.04
3. 22 34 71 20 36 53
4. 36 68 77 37 68 79
5. 78 96 107 61 82 102
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.81 9.93
2. 0.82 10.12
3. 31 53 80 31 49 76
4. 79 371 389 60 365 383
5. 424 551 610 416 545 600
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 30 31 42 31 32 39
4. 66 102 114 65 100 107
5. 92 118 129 86 109 116
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 36 44 31 35 45
4. 32 47 52 31 45 51
5. 42 52 56 43 52 57
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.73 5.17
2. 1.75 5.23
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.33 9.97
2. 3.35 10.02
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.43 1.64
2. 2.45 1.64
3. 22 63 85 22 55 84
4. 27 130 160 25 126 160
5. 140 172 190 139 167 190
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.60 3.09
2. 4.71 3.17
3. 22 56 74 22 40 61
4. 44 68 83 50 72 89
5. 137 156 169 120 144 159
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 8.89 5.97
2. 8.93 6.00
3. 23 61 86 20 46 62
4. 42 70 81 41 68 82
5. 72 98 115 64 76 96
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.71 8.72
2. 0.72 8.81
3. 31 64 76 31 65 74
4. 85 330 363 81 328 355
5. 417 581 622 409 563 599
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.41 17.32
2. 1.42 17.49
3. 31 38 53 31 34 52
4. 62 129 144 62 128 143
5. 139 185 205 131 177 197
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 32 39 31 32 39
4. 32 49 54 32 51 59
5. 45 55 61 47 56 63
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.60 4.78
2. 1.61 4.81
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.11 9.30
2. 3.14 9.39
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.45 0.30
2. 0.45 0.30
3. 32 62 131 32 52 92
4. 160 488 662 153 501 655
5. 1441 2195 2843 1355 2063 2809
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.79 0.53
2. 0.80 0.54
3. 31 93 220 31 44 169
4. 277 768 1076 244 735 996
5. 814 1263 1604 841 1311 1689
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.52 1.02
2. 1.53 1.03
3. 31 87 223 31 68 202
4. 119 417 619 109 393 588
5. 410 644 798 405 633 771
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.22 2.72
2. 0.22 2.74
3. 69 90 115 69 86 115
4. 226 477 586 216 471 599
5. 1174 1793 2455 1166 1946 2483
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.43 5.25
2. 0.43 5.28
3. 68 151 216 68 151 215
4. 299 743 971 290 733 966
5. 1043 1592 1984 1008 1562 1962
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.85 10.44
2. 0.85 10.49
3. 68 107 177 68 103 178
4. 235 549 732 233 537 731
5. 627 897 1086 621 893 1086
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.36 1.07
2. 0.36 1.08
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 1.97
2. 0.67 1.99
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.27 3.79
2. 1.28 3.83
|
10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.42 0.28
2. 0.43 0.29
3. 32 55 105 32 54 105
4. 181 438 601 166 435 580
5. 1759 2495 3005 1748 2511 2949
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.76 0.51
2. 0.77 0.51
3. 31 91 215 31 45 131
4. 257 733 1039 221 767 1098
5. 877 1337 1669 916 1421 1771
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.42 0.96
2. 1.44 0.96
3. 31 89 208 30 36 142
4. 139 453 677 119 433 657
5. 371 630 798 338 591 762
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.19 2.33
2. 0.19 2.34
3. 60 65 88 60 65 75
4. 179 409 525 179 400 517
5. 990 1574 2049 983 1736 2209
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.37 4.58
2. 0.37 4.60
3. 59 118 177 59 100 178
4. 353 752 983 321 747 993
5. 1068 1561 1936 1073 1579 1948
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.73 8.98
2. 0.73 9.02
3. 59 98 172 59 90 163
4. 179 522 709 175 523 712
5. 706 1005 1215 739 1066 1286
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.33 1.00
2. 0.33 1.00
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.62 1.85
2. 0.62 1.86
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.22 3.66
2. 1.23 3.69
|
10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.52 0.35
2. 0.52 0.35
3. 27 48 129 27 40 100
4. 160 453 668 158 482 663
5. 1755 2465 2917 1736 2431 2931
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.90 0.60
2. 0.90 0.61
3. 26 81 216 26 73 212
4. 218 717 1030 194 672 945
5. 624 1072 1382 592 1062 1387
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.74 1.17
2. 1.75 1.17
3. 27 64 165 26 50 126
4. 119 349 537 107 338 529
5. 343 567 738 343 561 728
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.36 4.43
2. 0.36 4.45
3. 36 52 97 36 47 74
4. 133 425 625 121 427 583
5. 1610 2383 3081 1678 2427 2983
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.65 8.00
2. 0.66 8.08
3. 35 51 96 35 39 82
4. 151 587 802 146 603 869
5. 891 1362 1632 904 1419 1716
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.24 15.32
2. 1.25 15.37
3. 35 40 68 35 39 59
4. 66 311 485 62 298 463
5. 286 472 594 277 431 538
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.47 1.42
2. 0.48 1.42
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.82 2.45
2. 0.83 2.48
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.63 4.88
2. 1.65 4.93
|
10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.50 0.34
2. 0.51 0.34
3. 28 47 120 28 46 122
4. 122 446 644 123 465 647
5. 1677 2391 2899 1582 2363 2879
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.89 0.60
2. 0.89 0.60
3. 26 59 141 25 30 101
4. 178 613 923 176 694 1020
5. 733 1223 1657 708 1210 1628
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.73 1.16
2. 1.74 1.17
3. 27 58 131 26 31 119
4. 106 335 498 107 345 522
5. 320 541 702 327 534 677
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.34 4.20
2. 0.34 4.20
3. 37 45 90 37 44 82
4. 96 351 541 100 366 533
5. 1575 2191 2723 1598 2233 2747
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.62 7.63
2. 0.62 7.68
3. 36 48 68 35 43 66
4. 121 525 794 114 506 769
5. 889 1415 1751 821 1317 1682
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.17 14.41
2. 1.18 14.48
3. 36 48 106 36 40 97
4. 77 330 532 67 308 491
5. 314 523 649 269 442 561
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.46 1.37
2. 0.46 1.38
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.80 2.38
2. 0.80 2.40
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.59 4.76
2. 1.61 4.81
|
10ge2p1x520-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.83 1.23
2. 1.85 1.24
3. 25 92 121 25 78 115
4. 53 257 275 57 252 275
5. 217 287 320 218 296 322
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.65 2.45
2. 3.67 2.46
3. 25 91 190 25 91 186
4. 126 219 250 134 221 253
5. 192 257 287 193 258 287
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.68 2.47
2. 3.70 2.48
3. 25 94 191 25 96 147
4. 123 218 246 126 218 250
5. 188 251 280 188 253 279
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 4.31
2. 0.35 4.35
3. 63 115 136 63 115 136
4. 203 496 541 203 493 536
5. 811 975 1052 808 970 1048
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.67 8.24
2. 0.67 8.28
3. 62 148 174 62 148 174
4. 367 668 730 374 668 744
5. 838 1111 1277 841 1109 1278
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.67 8.25
2. 0.67 8.29
3. 62 148 175 62 149 174
4. 366 664 736 369 664 746
5. 842 1109 1276 837 1113 1284
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.91 2.73
2. 0.92 2.74
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.76 5.25
2. 1.77 5.31
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.77 5.28
2. 1.78 5.31
|
10ge2p1x520-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.43 0.96
2. 1.44 0.97
3. 25 82 102 25 51 86
4. 91 300 319 93 302 319
5. 226 326 402 219 311 423
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.85 1.92
2. 2.88 1.94
3. 25 87 184 25 82 184
4. 140 265 294 146 270 294
5. 241 303 399 245 305 329
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.73 1.83
2. 2.75 1.85
3. 25 76 113 25 75 111
4. 149 265 277 144 260 274
5. 224 298 331 214 292 320
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.28 3.43
2. 0.28 3.45
3. 54 90 104 54 75 102
4. 113 464 486 115 444 475
5. 570 867 922 545 860 921
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.54 6.59
2. 0.54 6.62
3. 54 136 154 54 136 153
4. 310 639 720 322 638 724
5. 899 1219 1353 897 1218 1366
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.54 6.59
2. 0.54 6.65
3. 54 136 140 54 99 140
4. 325 660 735 323 650 728
5. 891 1214 1346 895 1218 1342
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.75 2.25
2. 0.76 2.27
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.46 4.38
2. 1.48 4.42
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.46 4.38
2. 1.48 4.42
|
10ge2p1x520-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.85 2.59
2. 3.87 2.60
3. 21 77 106 21 57 102
4. 40 104 122 23 104 120
5. 108 131 153 110 132 157
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 7.35 4.94
2. 7.39 4.97
3. 22 59 74 22 59 75
4. 46 96 111 50 98 117
5. 98 122 144 97 121 146
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 7.39 4.97
2. 7.43 4.99
3. 21 58 71 21 60 79
4. 44 91 110 45 93 109
5. 92 114 132 91 114 131
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.91 11.25
2. 0.92 11.30
3. 30 54 90 30 46 89
4. 113 343 367 104 342 367
5. 338 395 417 336 390 408
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 30 34 47 30 33 48
4. 32 73 76 32 73 76
5. 66 78 84 66 77 83
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 30 31 45 30 31 42
4. 37 73 79 42 71 75
5. 68 80 86 65 78 82
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.23 6.66
2. 2.25 6.73
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.32 12.93
2. 4.39 13.12
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.21 12.59
2. 4.25 12.72
|
10ge2p1x520-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.57 2.40
2. 3.62 2.43
3. 22 82 111 22 67 109
4. 42 126 144 45 127 145
5. 107 138 158 108 140 157
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.96 4.68
2. 7.00 4.70
3. 22 83 98 22 91 105
4. 59 103 122 52 103 119
5. 98 121 137 99 120 137
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.98 4.69
2. 7.01 4.71
3. 22 77 95 18 70 104
4. 56 98 113 47 96 112
5. 101 126 143 101 125 141
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.78 9.63
2. 0.79 9.68
3. 31 62 85 31 57 81
4. 88 381 398 70 371 394
5. 453 598 658 451 591 646
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.52 18.75
2. 1.54 18.94
3. 31 47 56 31 47 56
4. 73 110 116 74 113 124
5. 102 125 134 108 127 133
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.55 19.03
2. 1.56 19.23
3. 31 52 58 31 52 58
4. 60 114 119 70 112 116
5. 111 134 143 110 133 141
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.02 6.03
2. 2.03 6.06
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.92 11.72
2. 3.94 11.78
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.92 11.73
2. 3.94 11.79
|
10ge2p1x520-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.74 1.17
2. 1.76 1.18
3. 26 83 107 26 62 104
4. 67 223 240 68 219 239
5. 236 316 381 241 328 389
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 3.42 2.30
2. 3.45 2.32
3. 26 85 142 26 88 145
4. 108 208 234 108 208 235
5. 206 260 293 205 260 295
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 3.48 2.34
2. 3.49 2.35
3. 26 82 119 26 68 119
4. 81 146 185 81 146 195
5. 168 211 248 162 209 236
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 4.26
2. 0.35 4.28
3. 63 139 142 63 106 109
4. 205 501 521 206 501 520
5. 784 954 1026 785 955 1028
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.16
2. 0.67 8.20
3. 63 92 113 63 93 112
4. 269 581 617 270 581 619
5. 809 1090 1233 783 1061 1220
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.18
2. 0.67 8.22
3. 63 150 155 63 110 155
4. 370 692 741 373 691 737
5. 851 1113 1283 871 1174 1289
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.89 2.65
2. 0.89 2.67
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.72 5.15
2. 1.73 5.17
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.72 5.13
2. 1.73 5.18
|
10ge2p1x520-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.38 0.93
2. 1.39 0.93
3. 26 91 105 26 66 102
4. 84 275 299 89 234 303
5. 244 360 418 246 334 420
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 2.73 1.83
2. 2.76 1.85
3. 26 70 128 26 66 128
4. 190 309 321 195 316 328
5. 223 296 326 223 298 329
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 2.75 1.85
2. 2.78 1.87
3. 26 57 78 26 52 78
4. 74 185 201 75 184 200
5. 169 218 263 169 216 265
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.28 3.40
2. 0.28 3.42
3. 54 83 104 54 83 105
4. 156 448 496 158 447 496
5. 569 872 920 562 873 925
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.57
2. 0.53 6.57
3. 54 116 157 54 77 139
4. 234 553 596 232 556 595
5. 850 1158 1215 859 1163 1242
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.57
2. 0.54 6.60
3. 54 124 154 54 120 154
4. 279 582 652 277 588 652
5. 922 1182 1256 934 1183 1251
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.74 2.21
2. 0.74 2.22
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.43 4.28
2. 1.45 4.32
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.43 4.28
2. 1.45 4.32
|
10ge2p1x520-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 3.47 2.33
2. 3.50 2.35
3. 22 59 74 22 45 70
4. 35 131 143 36 123 143
5. 102 136 147 106 135 155
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 6.56 4.41
2. 6.60 4.43
3. 22 34 48 22 26 44
4. 42 94 110 46 95 111
5. 96 121 146 101 123 141
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 6.67 4.48
2. 6.81 4.57
3. 22 55 94 22 32 78
4. 49 91 108 49 91 115
5. 114 136 146 111 135 144
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.89 10.94
2. 0.89 11.00
3. 31 50 78 31 41 71
4. 75 351 370 69 346 365
5. 357 418 449 352 415 442
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 39 50 31 37 49
4. 48 80 86 48 79 83
5. 74 88 94 71 84 91
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 37 51 31 36 50
4. 47 78 84 46 77 81
5. 72 85 89 69 82 88
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 2.09 6.25
2. 2.10 6.28
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 4.10 12.27
2. 4.14 12.39
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 4.11 12.30
2. 4.17 12.48
|
10ge2p1x520-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.27 2.20
2. 3.31 2.22
3. 22 76 103 22 63 94
4. 44 127 149 45 121 147
5. 121 150 174 126 152 180
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 6.24 4.19
2. 6.33 4.25
3. 22 62 80 22 63 83
4. 69 118 137 70 119 137
5. 110 139 153 113 139 154
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 6.32 4.25
2. 6.45 4.33
3. 22 36 49 22 36 48
4. 59 108 126 58 109 126
5. 91 110 126 90 111 127
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.75 9.27
2. 0.76 9.32
3. 31 55 87 31 61 83
4. 114 380 392 75 382 399
5. 453 609 651 470 621 669
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.51 18.62
2. 1.52 18.71
3. 31 48 58 31 48 59
4. 76 120 130 77 122 137
5. 114 135 142 115 137 145
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.52 18.67
2. 1.52 18.76
3. 31 38 50 31 37 50
4. 72 121 130 76 120 136
5. 119 145 152 113 136 144
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.90 5.69
2. 1.91 5.71
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.67 10.96
2. 3.72 11.13
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.72 11.12
2. 3.76 11.23
|
10ge2p1x520-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.52 1.02
2. 1.53 1.03
3. 26 85 107 26 81 106
4. 52 234 271 59 241 276
5. 224 313 336 223 305 327
|
64b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.90 1.95
2. 3.02 2.03
3. 26 66 130 26 63 123
4. 101 207 239 86 208 245
5. 205 266 295 177 228 272
|
64b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 5.75 3.86
2. 5.89 3.96
3. 26 52 101 26 54 99
4. 64 119 136 60 120 142
5. 143 175 204 123 154 179
|
1518b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.16
2. 0.34 4.18
3. 63 98 132 63 98 132
4. 208 391 441 208 389 446
5. 708 874 963 701 865 941
|
1518b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.06
2. 0.66 8.10
3. 63 145 154 63 136 154
4. 385 676 725 385 679 727
5. 867 1146 1333 850 1125 1317
|
1518b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.30 15.95
2. 1.31 16.11
3. 63 99 129 63 100 129
4. 194 362 425 193 361 427
5. 383 478 546 379 491 571
|
imix-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.83 2.47
2. 0.83 2.49
|
imix-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.64 4.89
2. 1.65 4.94
|
imix-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.24 9.69
2. 3.27 9.79
|
10ge2p1x520-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.23 0.83
2. 1.24 0.83
3. 25 77 104 25 73 103
4. 55 344 412 57 330 407
5. 253 389 452 256 379 455
|
64b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.41 1.62
2. 2.43 1.64
3. 25 67 94 25 51 82
4. 124 272 306 118 270 310
5. 254 312 352 239 301 329
|
64b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.66 3.13
2. 4.75 3.20
3. 25 103 130 25 108 144
4. 67 142 161 77 153 175
5. 176 197 213 165 191 206
|
1518b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.33
2. 0.27 3.34
3. 54 65 91 54 66 88
4. 98 382 453 98 383 451
5. 583 823 884 586 819 879
|
1518b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.52 6.45
2. 0.53 6.51
3. 54 137 141 54 137 141
4. 260 563 657 241 564 653
5. 831 1109 1268 840 1146 1276
|
1518b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.05 12.86
2. 1.05 12.93
3. 54 90 132 54 88 118
4. 186 413 504 181 407 501
5. 323 427 495 321 428 505
|
imix-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.69 2.08
2. 0.70 2.09
|
imix-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.38 4.12
2. 1.39 4.16
|
imix-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.74 8.18
2. 2.76 8.27
|
10ge2p1x520-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.76 1.85
2. 2.80 1.88
3. 22 92 111 22 83 105
4. 62 175 183 71 176 185
5. 130 171 214 135 167 191
|
64b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.13 3.45
2. 5.20 3.49
3. 22 97 115 22 88 105
4. 57 100 117 49 103 118
5. 85 104 119 76 97 113
|
64b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 10.08 6.77
2. 10.23 6.88
3. 22 59 74 21 35 64
4. 49 74 81 46 75 86
5. 84 101 112 78 97 113
|
1518b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.84 10.29
2. 0.84 10.34
3. 31 63 77 31 62 76
4. 141 334 361 129 335 356
5. 401 494 526 397 485 508
|
1518b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 41 50 31 39 46
4. 65 97 104 70 95 102
5. 87 111 122 84 106 115
|
1518b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 32 42 31 32 43
4. 31 43 49 31 44 49
5. 42 52 55 43 52 57
|
imix-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.82 5.43
2. 1.82 5.46
|
imix-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.41 10.21
2. 3.47 10.37
|
imix-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x520-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.65 1.78
2. 2.65 1.78
3. 22 55 74 22 43 69
4. 47 92 132 52 70 86
5. 147 193 216 157 195 226
|
64b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.92 3.30
2. 5.07 3.40
3. 22 39 57 22 33 54
4. 60 106 124 51 113 128
5. 123 155 175 112 145 163
|
64b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 9.66 6.49
2. 9.75 6.55
3. 22 23 35 19 23 34
4. 33 51 62 34 53 65
5. 87 105 125 81 97 113
|
1518b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.72 8.88
2. 0.73 8.93
3. 31 56 75 31 41 66
4. 127 337 364 95 334 354
5. 429 606 655 438 600 658
|
1518b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 33 40 31 33 39
4. 31 47 53 31 49 56
5. 45 56 59 47 58 64
|
imix-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.65 4.93
2. 1.66 4.96
|
imix-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.21 9.61
2. 3.25 9.71
|
imix-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x520-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.66 1.12
2. 1.69 1.13
3. 26 86 119 26 74 115
4. 76 255 294 78 249 294
5. 244 310 365 256 310 375
|
64b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.21 2.16
2. 3.29 2.21
3. 26 95 195 26 90 193
4. 127 223 249 127 223 251
5. 217 280 308 210 271 301
|
64b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 6.29 4.22
2. 6.44 4.33
3. 26 62 76 26 66 93
4. 76 133 148 83 141 158
5. 134 162 186 136 164 188
|
1518b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.22
2. 0.35 4.25
3. 63 106 128 63 107 125
4. 221 513 540 221 524 544
5. 798 970 1048 804 967 1051
|
1518b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.17
2. 0.67 8.22
3. 63 150 157 63 143 158
4. 387 672 735 388 640 744
5. 861 1138 1321 854 1128 1311
|
1518b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.33 16.30
2. 1.33 16.38
3. 63 99 138 63 99 130
4. 187 317 369 187 317 355
5. 369 448 512 358 437 502
|
imix-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.86 2.57
2. 0.86 2.58
|
imix-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.71 5.12
2. 1.72 5.15
|
imix-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.38 10.11
2. 3.43 10.26
|
10ge2p1x520-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.33 0.89
2. 1.34 0.90
3. 25 65 80 25 56 75
4. 47 288 314 49 279 309
5. 266 347 394 253 346 392
|
64b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.60 1.75
2. 2.62 1.76
3. 25 88 181 25 85 140
4. 134 219 297 100 217 233
5. 234 299 336 227 291 330
|
64b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 5.09 3.42
2. 5.19 3.49
3. 25 83 155 25 74 154
4. 81 142 166 81 150 178
5. 162 193 209 157 192 212
|
1518b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.36
2. 0.27 3.38
3. 54 77 103 54 77 104
4. 136 444 486 136 443 476
5. 582 878 928 574 873 920
|
1518b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.53
2. 0.54 6.60
3. 54 82 163 54 75 162
4. 305 706 736 304 669 732
5. 920 1238 1386 917 1235 1395
|
1518b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.06 13.05
2. 1.07 13.18
3. 54 84 131 54 84 129
4. 164 386 462 160 380 455
5. 350 473 535 347 471 534
|
imix-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.72 2.14
2. 0.72 2.15
|
imix-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.44 4.29
2. 1.44 4.32
|
imix-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.84 8.48
2. 2.88 8.61
|
10ge2p1x520-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.22 2.16
2. 3.29 2.21
3. 22 95 115 22 74 107
4. 46 145 159 49 134 154
5. 131 168 202 135 166 213
|
64b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.99 4.02
2. 6.20 4.17
3. 22 72 89 22 71 88
4. 61 119 132 55 116 130
5. 126 155 172 116 150 174
|
64b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 11.56 7.77
2. 11.85 7.96
3. 22 53 63 22 32 67
4. 39 60 67 39 60 73
5. 66 81 95 75 98 127
|
1518b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.86 10.63
2. 0.87 10.69
3. 31 46 83 31 39 71
4. 109 365 386 75 358 374
5. 398 462 523 384 448 520
|
1518b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 30 39 52 30 38 54
4. 52 88 96 63 86 94
5. 80 98 107 79 98 105
|
1518b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 30 31 40 30 31 37
4. 31 45 50 31 43 49
5. 41 51 55 42 51 55
|
imix-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.98 5.91
2. 2.00 5.97
|
imix-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.83 11.46
2. 3.87 11.57
|
imix-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x520-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.08 2.07
2. 3.13 2.10
3. 22 77 115 22 36 84
4. 24 145 187 25 149 190
5. 128 172 191 136 174 199
|
64b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.65 3.80
2. 5.91 3.97
3. 22 90 122 22 98 121
4. 68 122 142 68 121 140
5. 132 163 195 120 151 176
|
64b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 11.06 7.43
2. 11.46 7.70
3. 22 35 45 19 37 56
4. 44 64 72 44 65 75
5. 74 91 107 84 113 157
|
1518b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.74 9.14
2. 0.75 9.18
3. 31 60 88 31 41 79
4. 109 385 406 61 376 394
5. 481 639 676 477 629 668
|
1518b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.47 18.05
2. 1.48 18.23
3. 31 47 58 31 47 59
4. 59 126 135 57 124 136
5. 133 166 187 124 158 175
|
1518b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 32 39 31 32 37
4. 31 50 56 31 50 58
5. 45 54 59 46 55 61
|
imix-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.81 5.40
2. 1.82 5.43
|
imix-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.53 10.55
2. 3.56 10.65
|
imix-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.73 1.16
2. 1.74 1.17
3. 25 90 102 25 87 99
4. 60 246 270 68 249 275
5. 204 302 355 217 303 343
|
64b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.31 2.22
2. 3.34 2.25
3. 26 83 113 26 81 110
4. 107 224 252 96 223 250
5. 196 258 283 195 256 277
|
64b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 6.57 4.42
2. 6.71 4.51
3. 26 48 67 26 41 67
4. 60 112 130 68 126 147
5. 107 131 147 130 161 189
|
1518b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 4.25
2. 0.35 4.27
3. 62 107 131 63 82 120
4. 202 494 530 202 489 526
5. 762 945 1012 769 936 1004
|
1518b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.67 8.22
2. 0.67 8.26
3. 63 109 153 63 84 132
4. 305 610 691 307 607 688
5. 829 1092 1232 819 1091 1244
|
1518b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.33 16.31
2. 1.33 16.39
3. 63 110 133 63 118 147
4. 207 335 372 223 348 383
5. 350 442 509 368 459 529
|
imix-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.87 2.61
2. 0.88 2.64
|
imix-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.73 5.18
2. 1.74 5.21
|
imix-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.44 10.28
2. 3.47 10.39
|
10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.36 0.91
2. 1.37 0.92
3. 25 79 97 25 73 96
4. 87 280 309 92 218 304
5. 235 349 426 239 344 417
|
64b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.65 1.78
2. 2.68 1.80
3. 25 80 138 25 78 136
4. 168 289 321 106 225 234
5. 241 322 361 237 314 359
|
64b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 5.24 3.52
2. 5.37 3.61
3. 25 102 138 25 115 151
4. 75 144 162 75 135 164
5. 145 175 189 162 191 210
|
1518b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.28 3.40
2. 0.28 3.41
3. 54 78 106 54 65 89
4. 137 439 487 136 442 467
5. 568 870 922 552 861 920
|
1518b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.54 6.60
2. 0.54 6.63
3. 54 136 157 54 134 150
4. 313 660 740 322 660 739
5. 911 1233 1368 901 1226 1351
|
1518b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.07 13.11
2. 1.08 13.24
3. 54 103 184 54 102 152
4. 211 416 516 219 457 531
5. 334 444 531 375 476 562
|
imix-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.73 2.19
2. 0.73 2.20
|
imix-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.45 4.34
2. 1.46 4.36
|
imix-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.88 8.60
2. 2.91 8.69
|
10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.42 2.30
2. 3.44 2.31
3. 21 75 110 21 47 92
4. 49 119 133 34 120 135
5. 101 138 166 101 134 172
|
64b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 6.39 4.30
2. 6.46 4.34
3. 21 37 47 21 35 46
4. 60 109 125 53 111 126
5. 105 135 157 103 127 148
|
64b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 11.52 7.74
2. 12.48 8.39
3. 22 29 43 22 28 40
4. 36 54 63 39 60 73
5. 53 65 74 75 98 133
|
1518b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.88 10.84
2. 0.89 10.90
3. 30 47 81 30 42 66
4. 139 353 374 117 342 362
5. 365 424 453 352 407 448
|
1518b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 30 37 50 30 35 48
4. 48 80 92 46 78 83
5. 74 89 96 70 85 90
|
1518b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 30 31 37 30 31 35
4. 31 42 47 30 39 42
5. 39 48 51 39 48 51
|
imix-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.05 6.15
2. 2.09 6.24
|
imix-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.03 12.04
2. 4.11 12.28
|
imix-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.25 2.19
2. 3.29 2.21
3. 22 78 112 22 73 97
4. 49 124 156 49 117 149
5. 107 149 163 111 144 164
|
64b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.13 4.12
2. 6.19 4.16
3. 22 65 86 22 63 83
4. 73 116 131 60 109 129
5. 124 153 176 115 146 167
|
64b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 11.40 7.66
2. 12.20 8.20
3. 22 37 53 22 40 56
4. 47 66 71 51 71 81
5. 62 78 91 105 204 526
|
1518b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.75 9.29
2. 0.76 9.38
3. 31 56 88 31 39 75
4. 140 378 396 129 366 386
5. 457 612 660 447 600 643
|
1518b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.50 18.41
2. 1.51 18.59
3. 31 51 59 31 51 59
4. 68 118 129 68 116 128
5. 109 135 141 102 127 132
|
1518b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 32 40 31 32 38
4. 31 43 48 31 42 47
5. 41 50 53 41 49 53
|
imix-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.89 5.64
2. 1.90 5.67
|
imix-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.68 11.01
2. 3.74 11.18
|
imix-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x520-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.47 0.99
2. 1.48 1.00
3. 26 80 104 26 62 97
4. 67 263 293 73 267 293
5. 231 311 4231 228 286 1631
|
64b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.55 1.72
2. 2.77 1.86
3. 26 58 87 26 45 85
4. 46 144 158 50 141 160
5. 147 201 234 137 193 232
|
64b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 5.09 3.42
2. 5.22 3.51
3. 26 46 116 26 49 112
4. 58 105 126 54 110 130
5. 130 162 184 122 159 188
|
1518b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.33 4.08
2. 0.34 4.16
3. 63 115 119 63 115 117
4. 179 415 454 179 414 450
5. 714 911 990 717 906 987
|
1518b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 8.00
2. 0.65 8.04
3. 63 112 161 63 80 156
4. 382 683 725 389 679 728
5. 865 1134 1325 847 1124 1331
|
1518b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.28 15.75
2. 1.29 15.83
3. 63 100 131 63 100 131
4. 199 366 430 195 366 441
5. 370 469 541 360 461 532
|
imix-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.81 2.41
2. 0.81 2.42
|
imix-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.61 4.83
2. 1.62 4.85
|
imix-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.11 9.31
2. 3.15 9.41
|
10ge2p1x520-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.20 0.80
2. 1.21 0.81
3. 26 76 101 26 41 88
4. 52 315 375 53 311 370
5. 241 363 444 251 363 424
|
64b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.30 1.54
2. 2.31 1.55
3. 26 58 93 26 52 95
4. 123 271 299 116 268 294
5. 310 362 427 250 356 386
|
64b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.31 2.90
2. 4.35 2.92
3. 26 62 151 26 54 117
4. 81 130 151 59 141 165
5. 115 161 212 117 158 219
|
1518b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.31
2. 0.27 3.33
3. 54 80 87 54 65 82
4. 157 402 435 158 401 428
5. 515 846 908 501 844 906
|
1518b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.52 6.44
2. 0.53 6.47
3. 54 101 145 54 63 124
4. 240 563 642 244 563 647
5. 955 1235 1342 949 1230 1336
|
1518b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.03 12.68
2. 1.04 12.74
3. 54 76 109 54 75 107
4. 209 435 526 210 439 522
5. 348 469 540 358 482 556
|
imix-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.68 2.03
2. 0.68 2.04
|
imix-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.35 4.03
2. 1.36 4.07
|
imix-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.60 7.78
2. 2.64 7.90
|
10ge2p1x520-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.55 1.71
2. 2.58 1.73
3. 22 64 95 22 56 86
4. 34 105 143 35 99 121
5. 114 179 198 115 175 197
|
64b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.65 3.13
2. 4.74 3.19
3. 22 75 131 22 83 113
4. 49 136 157 49 131 156
5. 149 172 187 137 167 192
|
64b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 8.12 5.46
2. 8.76 5.88
3. 22 48 69 20 41 60
4. 47 71 79 45 71 79
5. 62 85 103 64 85 109
|
1518b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.81 9.97
2. 0.82 10.07
3. 31 41 74 31 42 66
4. 76 319 339 63 313 332
5. 378 462 579 370 452 542
|
1518b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 42 51 31 40 51
4. 71 103 114 72 101 110
5. 95 122 130 88 113 124
|
1518b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 31 41 31 31 41
4. 31 47 54 31 47 53
5. 43 52 56 44 53 57
|
imix-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.68 5.03
2. 1.69 5.07
|
imix-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.16 9.44
2. 3.22 9.63
|
imix-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x520-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.29 1.54
2. 2.38 1.60
3. 22 65 90 22 52 88
4. 51 157 188 47 146 181
5. 119 159 184 119 156 177
|
64b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.46 3.00
2. 4.48 3.01
3. 22 37 78 19 36 45
4. 54 114 136 52 113 136
5. 81 118 136 63 74 88
|
64b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 8.15 5.47
2. 8.35 5.61
3. 23 69 80 21 31 75
4. 73 90 95 64 84 97
5. 79 102 114 80 99 118
|
1518b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.71 8.75
2. 0.72 8.80
3. 31 58 75 31 41 69
4. 104 391 413 64 387 405
5. 451 663 697 438 654 685
|
1518b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.40 17.19
2. 1.40 17.28
3. 31 45 55 31 44 56
4. 68 167 180 64 161 175
5. 152 220 242 144 209 230
|
1518b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 31 32 40 31 32 38
4. 32 48 54 32 50 58
5. 46 56 61 47 57 64
|
imix-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.57 4.69
2. 1.58 4.74
|
imix-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.00 8.97
2. 3.04 9.10
|
imix-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|