3n-hsw-x710
10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.48 1.00
2. 1.50 1.01
3. 30 91 121 30 73 118
4. 86 274 297 78 287 304
5. 227 323 337 225 317 333
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.84 1.91
2. 2.88 1.94
3. 30 112 201 30 96 166
4. 142 261 289 147 264 295
5. 230 294 400 216 283 369
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 5.42 3.64
2. 5.56 3.74
3. 30 78 95 30 81 106
4. 76 136 150 83 143 157
5. 135 169 189 134 168 190
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.14
2. 0.34 4.16
3. 71 109 132 71 90 120
4. 224 489 549 222 497 547
5. 776 953 1023 785 949 1029
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 8.00
2. 0.65 8.04
3. 71 136 188 71 122 183
4. 327 645 697 340 650 719
5. 827 1128 1295 829 1121 1291
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.29 15.83
2. 1.30 15.99
3. 72 112 139 72 110 135
4. 180 336 394 178 337 393
5. 328 423 493 324 419 485
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.57 4.69
2. 1.62 4.83
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.12 9.34
2. 3.19 9.53
|
10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.15 0.78
2. 1.21 0.82
3. 29 91 115 29 74 115
4. 74 392 445 79 421 446
5. 265 410 492 264 406 488
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.35 1.58
2. 2.37 1.59
3. 29 104 170 29 91 155
4. 156 313 359 147 307 346
5. 297 359 452 286 350 440
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.51 3.03
2. 4.56 3.06
3. 30 85 170 30 83 152
4. 90 170 191 89 171 192
5. 185 206 224 120 161 214
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.31
2. 0.27 3.33
3. 63 98 110 63 71 86
4. 167 453 488 166 449 483
5. 512 834 905 497 830 900
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.52 6.43
2. 0.53 6.46
3. 63 78 148 63 77 116
4. 245 612 696 244 612 687
5. 1008 1306 1451 987 1275 1438
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.04 12.74
2. 1.05 12.87
3. 63 88 117 63 85 114
4. 179 404 496 182 402 492
5. 309 424 500 307 420 486
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.68 2.03
2. 0.69 2.05
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.35 4.04
2. 1.36 4.08
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.66 7.97
2. 2.69 8.05
|
10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.59 1.74
2. 2.64 1.78
3. 26 83 102 26 48 73
4. 78 126 154 44 116 138
5. 124 185 200 146 193 233
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.82 3.24
2. 4.92 3.31
3. 26 84 121 26 73 106
4. 87 136 159 83 128 154
5. 140 169 192 132 163 183
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 9.22 6.19
2. 9.45 6.35
3. 26 53 71 26 61 81
4. 61 82 89 64 84 93
5. 77 94 105 79 96 109
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.82 10.07
2. 0.83 10.17
3. 32 57 84 32 52 78
4. 96 372 389 73 364 381
5. 424 544 602 423 552 606
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 47 79 32 46 78
4. 71 99 114 69 95 104
5. 91 116 126 85 110 120
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 46 77 32 45 79
4. 46 58 87 42 56 76
5. 51 60 67 51 60 67
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.73 5.17
2. 1.74 5.20
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.29 9.84
2. 3.32 9.94
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.70 17.04
2. 5.81 17.39
|
10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.47 1.66
2. 2.52 1.69
3. 26 79 113 26 72 109
4. 45 148 160 48 147 162
5. 138 192 234 144 192 237
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.19 0.13
2. 4.80 3.22
3. 26 110 128 26 114 141
4. 80 147 166 77 144 164
5. 168 188 205 162 181 196
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 8.90 5.98
2. 9.08 6.10
3. 27 56 93 27 54 71
4. 52 83 95 53 84 98
5. 95 108 118 75 105 123
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.71 8.71
2. 0.71 8.80
3. 32 63 87 33 53 80
4. 124 384 409 86 379 399
5. 448 658 693 441 646 675
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.37 16.87
2. 1.41 17.38
3. 32 53 68 32 54 70
4. 66 163 180 65 157 174
5. 145 212 235 139 202 227
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 33 50 69 33 50 69
4. 48 59 77 46 59 89
5. 53 63 69 54 63 70
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.58 4.74
2. 1.60 4.78
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.06 9.16
2. 3.09 9.25
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.45 0.30
2. 0.46 0.31
3. 44 74 133 44 61 110
4. 226 539 768 221 553 755
5. 1815 2539 3075 1766 2629 3173
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.78 0.53
2. 0.80 0.54
3. 43 115 244 43 106 234
4. 431 1032 1385 390 992 1342
5. 963 1512 1898 952 1493 1907
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.54 1.04
2. 1.57 1.06
3. 43 117 259 43 89 232
4. 174 462 664 153 454 663
5. 450 706 887 447 699 891
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.22 2.72
2. 0.22 2.73
3. 78 112 137 78 94 115
4. 232 500 637 231 497 633
5. 1291 1886 2563 1290 2061 2673
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.43 5.26
2. 0.43 5.34
3. 77 156 226 77 148 212
4. 425 892 1137 406 869 1106
5. 1166 1709 2163 1108 1607 1992
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.84 10.36
2. 0.86 10.57
3. 77 130 192 77 121 184
4. 264 604 816 261 599 810
5. 689 981 1196 669 961 1175
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 1.06
2. 0.36 1.06
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 1.95
2. 0.66 1.97
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.28 3.81
2. 1.30 3.89
|
10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.42 0.28
2. 0.42 0.28
3. 44 68 129 44 55 99
4. 188 522 743 186 543 740
5. 1859 2595 3075 1805 2625 3077
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.74 0.50
2. 0.74 0.50
3. 43 115 243 42 54 198
4. 418 1015 1395 350 896 1208
5. 906 1447 1843 848 1375 1744
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.46 0.98
2. 1.48 1.00
3. 43 115 253 43 89 236
4. 185 516 779 177 503 756
5. 440 692 880 388 652 848
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.19 2.34
2. 0.19 2.35
3. 68 74 115 68 73 92
4. 189 451 581 182 441 568
5. 1079 1602 2067 1072 1676 2315
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.37 4.58
2. 0.37 4.60
3. 68 114 186 67 75 127
4. 389 819 1055 374 822 1058
5. 1100 1613 1982 1101 1598 1957
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.72 8.91
2. 0.74 9.09
3. 68 105 161 68 87 138
4. 254 599 808 246 590 797
5. 809 1168 1414 764 1108 1349
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.32 0.97
2. 0.33 0.99
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.61 1.83
2. 0.62 1.85
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.19 3.56
2. 1.22 3.63
|
10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.52 0.35
2. 0.52 0.35
3. 32 66 139 32 53 107
4. 211 509 757 197 514 760
5. 1755 2531 3061 1586 2451 3013
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.91 0.61
2. 0.91 0.61
3. 30 120 263 31 115 265
4. 314 862 1183 308 881 1220
5. 756 1214 1559 701 1180 1557
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.76 1.18
2. 1.80 1.21
3. 31 96 239 31 80 219
4. 163 434 612 143 428 610
5. 391 637 803 391 632 802
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.36 4.45
2. 0.36 4.47
3. 46 60 112 46 53 81
4. 144 437 651 136 449 612
5. 1465 2087 2711 1552 2261 2867
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.64 7.87
2. 0.65 7.94
3. 39 70 116 37 52 115
4. 167 624 851 168 634 886
5. 879 1419 1761 934 1468 1785
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.28 15.75
2. 1.31 16.06
3. 42 65 116 39 60 118
4. 72 309 461 72 316 470
5. 318 479 588 334 488 592
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.47 1.39
2. 0.47 1.41
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.82 2.46
2. 0.83 2.49
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.62 4.85
2. 1.66 4.95
|
10ge2p1x710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.51 0.34
2. 0.52 0.35
3. 34 65 142 34 63 140
4. 232 543 782 227 559 781
5. 1794 2547 3045 1686 2505 3053
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.91 0.61
2. 0.92 0.62
3. 31 115 245 31 104 248
4. 339 887 1252 296 842 1165
5. 799 1266 1651 746 1220 1615
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.66 1.12
2. 1.70 1.14
3. 31 98 258 31 85 243
4. 187 476 667 166 449 647
5. 397 649 827 360 611 784
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.34 4.16
2. 0.34 4.20
3. 47 64 104 47 52 77
4. 140 445 657 139 449 638
5. 1458 2205 3005 1361 2115 2985
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.58 7.17
2. 0.62 7.67
3. 42 72 120 41 76 117
4. 204 661 902 194 642 891
5. 989 1528 1852 968 1501 1844
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.20 14.81
2. 1.22 15.03
3. 43 64 115 42 60 119
4. 85 333 518 89 352 544
5. 324 507 638 360 548 669
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.46 1.36
2. 0.46 1.38
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.81 2.41
2. 0.81 2.44
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.56 4.66
2. 1.58 4.71
|
10ge2p1x710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.82 1.22
2. 1.85 1.24
3. 30 97 128 30 78 124
4. 67 270 286 77 240 287
5. 241 303 366 242 309 371
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.62 2.43
2. 3.65 2.46
3. 30 99 154 30 95 150
4. 123 220 249 125 218 248
5. 199 262 295 197 259 290
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.64 2.45
2. 3.68 2.47
3. 30 100 171 30 88 153
4. 122 219 252 128 219 251
5. 181 235 272 176 222 259
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 4.29
2. 0.35 4.34
3. 71 112 131 71 110 131
4. 217 502 542 215 506 538
5. 787 961 1034 796 957 1038
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.67 8.22
2. 0.67 8.26
3. 71 153 179 71 131 178
4. 320 643 708 323 630 710
5. 858 1133 1245 856 1137 1243
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.67 8.21
2. 0.67 8.26
3. 71 137 184 71 115 179
4. 325 641 708 328 640 711
5. 850 1135 1244 862 1112 1251
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.91 2.71
2. 0.91 2.72
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.74 5.22
2. 1.76 5.27
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.74 5.21
2. 1.77 5.29
|
10ge2p1x710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.43 0.96
2. 1.44 0.97
3. 29 90 119 29 72 108
4. 92 306 318 105 320 335
5. 223 317 403 231 314 423
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.81 1.89
2. 2.89 1.94
3. 29 109 185 29 105 162
4. 152 272 297 163 283 305
5. 240 303 392 236 301 350
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.84 1.91
2. 2.88 1.94
3. 29 79 133 29 56 115
4. 95 215 242 86 205 230
5. 172 229 254 171 229 257
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.28 3.41
2. 0.28 3.44
3. 63 95 110 63 74 91
4. 164 455 493 123 452 497
5. 565 864 916 550 853 914
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.54 6.59
2. 0.54 6.63
3. 63 141 173 62 116 165
4. 268 612 703 270 614 673
5. 893 1206 1368 886 1188 1340
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.54 6.61
2. 0.54 6.64
3. 62 144 160 62 139 155
4. 280 615 706 276 614 705
5. 885 1201 1403 850 1139 1310
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.75 2.23
2. 0.75 2.26
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.45 4.35
2. 1.47 4.40
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.47 4.38
2. 1.47 4.41
|
10ge2p1x710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.80 2.55
2. 3.84 2.58
3. 26 85 113 26 48 100
4. 46 110 123 36 113 135
5. 116 142 182 117 149 188
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 7.14 4.80
2. 7.40 4.97
3. 26 71 79 26 67 82
4. 52 92 115 51 92 115
5. 101 122 137 102 122 139
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 7.22 4.85
2. 7.37 4.95
3. 26 68 79 25 70 89
4. 58 103 125 70 107 126
5. 98 121 135 95 117 129
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.91 11.15
2. 0.91 11.21
3. 32 67 82 32 66 81
4. 91 343 364 89 341 360
5. 339 397 420 336 392 414
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 45 56 32 44 61
4. 52 70 76 51 70 75
5. 63 78 84 62 77 82
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 43 61 32 43 63
4. 49 68 81 49 70 82
5. 61 77 81 63 78 85
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.18 6.51
2. 2.20 6.58
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.18 12.51
2. 4.24 12.69
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.32 12.93
2. 4.37 13.06
|
10ge2p1x710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.58 2.40
2. 3.61 2.43
3. 26 100 120 26 92 112
4. 56 123 141 57 119 139
5. 135 165 199 139 176 210
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.83 4.59
2. 7.00 4.70
3. 26 98 118 26 90 120
4. 64 108 124 57 107 123
5. 91 112 128 93 115 130
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.84 4.60
2. 6.98 4.69
3. 26 102 118 26 99 119
4. 57 103 118 54 105 118
5. 88 110 125 86 108 122
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.77 9.50
2. 0.78 9.55
3. 32 56 84 32 54 85
4. 77 374 394 57 372 389
5. 452 597 655 450 591 644
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.54 18.94
2. 1.55 19.03
3. 32 46 57 32 47 57
4. 72 107 115 73 108 115
5. 101 125 134 100 120 126
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.55 19.03
2. 1.55 19.13
3. 32 48 57 32 47 58
4. 72 107 115 72 108 120
5. 101 125 135 102 123 131
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.97 5.90
2. 1.98 5.93
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.87 11.57
2. 3.89 11.63
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.79 11.35
2. 3.83 11.46
|
10ge2p1x710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.73 1.16
2. 1.74 1.17
3. 30 114 128 30 103 127
4. 76 265 278 84 261 278
5. 253 346 411 254 348 412
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 3.42 2.30
2. 3.44 2.31
3. 30 99 193 30 83 119
4. 115 210 246 107 211 250
5. 208 266 314 199 254 289
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 3.34 2.25
2. 3.38 2.27
3. 30 112 168 30 104 163
4. 119 217 251 111 213 250
5. 202 257 284 185 241 274
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 4.26
2. 0.35 4.28
3. 72 111 131 72 109 130
4. 225 503 562 225 512 563
5. 798 960 1051 797 969 1052
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.14
2. 0.67 8.19
3. 72 156 184 72 138 185
4. 319 643 695 323 635 711
5. 826 1114 1250 830 1105 1253
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.16
2. 0.67 8.20
3. 72 153 183 71 135 184
4. 332 638 700 324 637 706
5. 842 1114 1262 838 1110 1255
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.88 2.64
2. 0.89 2.66
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.69 5.06
2. 1.73 5.16
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.71 5.10
2. 1.72 5.15
|
10ge2p1x710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.37 0.92
2. 1.39 0.93
3. 30 95 121 30 76 116
4. 103 342 362 106 342 363
5. 249 348 441 250 345 448
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 2.72 1.83
2. 2.75 1.85
3. 30 151 191 29 133 190
4. 184 303 329 180 279 327
5. 226 301 330 226 304 332
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 2.74 1.84
2. 2.75 1.85
3. 30 101 200 30 91 171
4. 187 297 329 171 223 305
5. 236 307 339 237 311 341
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.28 3.39
2. 0.28 3.40
3. 63 97 105 63 72 87
4. 163 449 491 163 448 493
5. 565 865 914 560 862 914
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.54
2. 0.53 6.57
3. 63 115 158 63 89 148
4. 249 597 650 254 600 670
5. 956 1249 1461 964 1256 1464
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.55
2. 0.53 6.58
3. 63 116 168 63 87 156
4. 329 604 681 326 599 676
5. 958 1251 1457 969 1262 1462
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.73 2.19
2. 0.74 2.20
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.42 4.25
2. 1.44 4.30
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.43 4.27
2. 1.44 4.31
|
10ge2p1x710-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 3.46 2.32
2. 3.49 2.35
3. 26 93 116 26 77 111
4. 55 128 151 56 123 146
5. 116 150 194 127 168 206
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 6.52 4.38
2. 6.65 4.47
3. 26 58 75 26 53 72
4. 60 110 127 64 109 127
5. 103 133 159 107 135 159
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 6.56 4.41
2. 6.73 4.52
3. 26 51 68 26 46 56
4. 59 104 123 58 104 124
5. 104 124 144 102 124 141
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.88 10.88
2. 0.89 10.94
3. 32 54 85 32 51 77
4. 79 348 369 75 349 371
5. 362 418 452 348 421 464
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 46 57 32 45 61
4. 55 76 88 56 75 81
5. 69 81 90 69 82 88
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 44 57 32 44 58
4. 54 75 87 53 74 82
5. 69 80 87 67 80 88
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 2.05 6.12
2. 2.07 6.19
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 4.01 12.00
2. 4.07 12.18
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 3.95 11.80
2. 4.00 11.98
|
10ge2p1x710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.29 2.21
2. 3.33 2.24
3. 26 98 112 26 97 111
4. 44 125 145 47 135 149
5. 132 168 212 135 172 216
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 6.17 4.14
2. 6.32 4.25
3. 26 66 81 26 77 98
4. 66 111 127 67 113 128
5. 110 138 152 112 137 152
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 6.26 4.21
2. 6.39 4.29
3. 26 65 78 26 67 80
4. 69 124 142 76 121 138
5. 110 136 152 111 137 151
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.76 9.35
2. 0.76 9.39
3. 33 77 96 33 69 87
4. 147 382 402 143 379 392
5. 463 615 659 462 611 660
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.50 18.49
2. 1.51 18.58
3. 33 55 63 33 54 63
4. 65 120 130 68 120 129
5. 107 134 145 106 132 140
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.51 18.56
2. 1.51 18.56
3. 32 52 65 32 51 64
4. 74 122 133 75 125 138
5. 103 129 137 103 128 136
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.88 5.62
2. 1.89 5.65
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.63 10.86
2. 3.69 11.03
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.44 10.27
2. 3.49 10.43
|
10ge2p1x710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.51 1.01
2. 1.53 1.03
3. 30 105 121 30 104 119
4. 73 256 274 71 269 285
5. 229 329 341 231 302 343
|
64b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.95 1.98
2. 2.98 2.00
3. 30 108 170 30 90 146
4. 127 247 275 125 245 272
5. 213 278 316 198 270 303
|
64b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 5.75 3.87
2. 5.87 3.94
3. 30 75 143 30 57 106
4. 89 137 153 89 137 158
5. 155 185 214 145 176 203
|
1518b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.16
2. 0.34 4.18
3. 71 112 130 71 93 119
4. 223 496 551 222 500 549
5. 776 953 1028 783 948 1023
|
1518b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 8.01
2. 0.65 8.05
3. 72 135 202 72 123 183
4. 328 645 707 334 625 720
5. 819 1123 1287 821 1119 1276
|
1518b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.30 15.94
2. 1.31 16.10
3. 72 113 146 72 113 139
4. 179 326 375 178 326 379
5. 329 423 493 322 415 481
|
imix-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.82 2.45
2. 0.82 2.46
|
imix-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.63 4.89
2. 1.64 4.91
|
imix-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.20 9.56
2. 3.24 9.70
|
10ge2p1x710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.23 0.82
2. 1.24 0.83
3. 29 93 118 29 72 115
4. 61 366 425 65 351 420
5. 252 390 482 259 391 477
|
64b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.39 1.61
2. 2.43 1.63
3. 29 95 164 29 72 115
4. 157 299 339 141 294 331
5. 276 351 406 258 333 383
|
64b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.75 3.19
2. 4.80 3.22
3. 30 113 138 30 123 153
4. 89 155 171 86 157 172
5. 178 202 219 176 200 218
|
1518b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.32
2. 0.27 3.33
3. 63 95 113 63 71 87
4. 160 447 483 161 442 473
5. 570 874 923 565 867 916
|
1518b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.52 6.45
2. 0.53 6.49
3. 63 144 174 63 121 168
4. 251 609 665 263 611 658
5. 982 1278 1447 985 1270 1444
|
1518b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.04 12.84
2. 1.05 12.97
3. 63 89 115 63 84 110
4. 172 400 494 175 399 492
5. 309 422 493 306 417 487
|
imix-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.69 2.05
2. 0.69 2.07
|
imix-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.36 4.08
2. 1.38 4.14
|
imix-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.71 8.10
2. 2.75 8.23
|
10ge2p1x710-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.72 1.83
2. 2.75 1.85
3. 26 100 111 26 98 109
4. 74 184 190 86 159 186
5. 141 181 211 142 177 226
|
64b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.99 3.35
2. 5.09 3.42
3. 26 61 81 26 55 78
4. 75 133 160 68 124 145
5. 129 169 194 114 153 179
|
64b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 9.77 6.57
2. 10.12 6.80
3. 26 54 83 26 49 82
4. 54 76 86 52 75 88
5. 80 98 114 81 102 125
|
1518b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.83 10.18
2. 0.83 10.23
3. 32 57 85 32 51 76
4. 144 369 391 116 359 375
5. 396 526 596 383 520 579
|
1518b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 54 65 32 53 63
4. 61 95 102 68 92 99
5. 86 112 117 81 102 109
|
1518b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 47 78 32 45 78
4. 46 57 72 44 57 74
5. 51 60 69 50 61 72
|
imix-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.77 5.30
2. 1.78 5.32
|
imix-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.42 10.24
2. 3.46 10.34
|
imix-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x710-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.60 1.75
2. 2.62 1.76
3. 26 89 114 26 51 93
4. 64 138 173 34 128 148
5. 132 193 207 148 196 242
|
64b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.90 3.29
2. 4.95 3.33
3. 26 77 108 26 75 106
4. 88 141 165 84 137 162
5. 146 177 193 137 171 186
|
64b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 9.62 6.46
2. 9.94 6.68
3. 26 29 47 30 37 50
4. 55 82 92 57 82 94
5. 94 113 131 90 109 129
|
1518b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.71 8.80
2. 0.72 8.88
3. 32 80 89 32 78 86
4. 133 381 404 91 376 395
5. 449 652 687 438 646 682
|
1518b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.41 17.34
2. 1.42 17.52
3. 32 51 62 32 51 62
4. 65 161 175 65 157 171
5. 139 205 227 135 197 219
|
1518b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 33 49 76 33 49 76
4. 48 58 77 45 58 77
5. 53 62 69 53 62 69
|
imix-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.64 4.90
2. 1.65 4.92
|
imix-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.17 9.47
2. 3.20 9.56
|
imix-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.65 1.11
2. 1.68 1.13
3. 30 97 110 30 95 109
4. 58 257 276 63 257 273
5. 258 326 398 266 335 397
|
64b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.17 2.13
2. 3.27 2.20
3. 30 118 179 30 95 154
4. 135 220 266 107 215 242
5. 210 270 306 207 267 295
|
64b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 5.23 3.51
2. 5.30 3.56
3. 30 95 123 30 102 121
4. 67 114 136 52 114 128
5. 115 155 172 112 141 161
|
1518b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.20
2. 0.35 4.25
3. 71 109 131 71 107 129
4. 218 510 554 221 504 555
5. 797 969 1047 807 966 1072
|
1518b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.15
2. 0.67 8.19
3. 71 159 186 71 155 183
4. 331 647 710 328 644 707
5. 846 1128 1272 843 1120 1266
|
1518b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.20 14.78
2. 1.22 15.01
3. 71 111 141 72 104 136
4. 165 352 429 159 338 396
5. 319 439 515 254 351 416
|
imix-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.85 2.55
2. 0.86 2.58
|
imix-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.70 5.09
2. 1.71 5.11
|
imix-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.93 8.76
2. 2.97 8.90
|
10ge2p1x710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.33 0.89
2. 1.33 0.89
3. 29 105 117 29 104 117
4. 115 302 360 114 287 360
5. 263 368 466 264 362 465
|
64b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.56 1.72
2. 2.61 1.76
3. 29 113 193 29 104 163
4. 136 247 292 117 236 269
5. 255 337 378 249 342 379
|
64b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.25 2.86
2. 4.33 2.91
3. 30 75 140 30 66 131
4. 85 150 172 72 149 169
5. 99 138 189 93 124 167
|
1518b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.36
2. 0.27 3.38
3. 63 95 112 63 72 90
4. 167 452 501 167 449 502
5. 577 874 922 572 869 915
|
1518b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.55
2. 0.53 6.58
3. 63 146 178 63 140 164
4. 290 617 716 268 618 714
5. 941 1245 1404 941 1238 1394
|
1518b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.95 11.65
2. 0.96 11.85
3. 63 83 119 63 79 115
4. 152 379 482 151 374 448
5. 302 447 526 267 383 455
|
imix-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.71 2.13
2. 0.72 2.14
|
imix-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.42 4.25
2. 1.43 4.29
|
imix-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.44 7.28
2. 2.48 7.41
|
10ge2p1x710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.21 2.16
2. 3.29 2.21
3. 26 81 106 26 56 97
4. 50 143 157 54 138 157
5. 141 173 214 142 179 221
|
64b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.94 3.99
2. 6.12 4.12
3. 26 84 103 26 85 102
4. 70 112 133 64 104 118
5. 123 153 180 115 147 167
|
64b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 9.52 6.40
2. 9.77 6.57
3. 26 27 41 26 31 43
4. 47 68 77 48 69 78
5. 58 79 91 56 72 85
|
1518b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.85 10.52
2. 0.86 10.62
3. 32 78 94 32 72 87
4. 83 362 386 70 357 377
5. 397 470 533 388 465 539
|
1518b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 45 61 32 45 65
4. 53 89 100 55 82 92
5. 80 105 113 75 96 104
|
1518b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 45 75 32 44 74
4. 46 56 73 44 56 88
5. 50 60 67 50 60 67
|
imix-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.94 5.81
2. 1.96 5.87
|
imix-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.73 11.16
2. 3.79 11.33
|
imix-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.05 2.05
2. 3.08 2.07
3. 26 91 118 26 69 107
4. 43 153 190 58 144 160
5. 140 181 222 151 185 229
|
64b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.57 3.75
2. 5.80 3.90
3. 26 60 106 26 45 62
4. 72 119 135 71 120 135
5. 118 147 165 112 138 155
|
64b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 9.34 6.28
2. 9.57 6.43
3. 26 39 53 26 41 55
4. 50 73 82 52 75 85
5. 63 86 98 56 75 88
|
1518b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.74 9.11
2. 0.74 9.15
3. 32 59 87 32 53 83
4. 141 382 405 132 375 394
5. 464 633 670 450 619 652
|
1518b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.46 17.99
2. 1.48 18.17
3. 32 49 61 32 48 66
4. 61 134 151 62 133 150
5. 115 146 167 109 136 153
|
1518b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 33 49 79 33 46 79
4. 48 58 76 46 58 88
5. 52 62 72 53 63 76
|
imix-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.78 5.33
2. 1.79 5.36
|
imix-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.48 10.39
2. 3.51 10.50
|
imix-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.79 17.30
2. 5.81 17.39
|
10ge2p1x710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.72 1.15
2. 1.73 1.17
3. 30 96 128 30 77 125
4. 83 264 281 74 271 288
5. 219 333 400 236 338 399
|
64b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.30 2.22
2. 3.37 2.26
3. 30 88 144 33 86 115
4. 119 219 250 105 220 253
5. 198 254 284 187 250 279
|
64b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.30 2.22
2. 3.36 2.26
3. 30 58 138 30 34 58
4. 76 176 199 34 120 138
5. 131 184 205 69 115 125
|
1518b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 4.26
2. 0.35 4.28
3. 71 112 130 71 94 120
4. 218 489 548 217 497 544
5. 765 948 1018 778 941 1016
|
1518b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.67 8.18
2. 0.67 8.23
3. 71 156 185 71 113 181
4. 326 640 703 335 634 726
5. 861 1121 1263 863 1115 1257
|
1518b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.71 8.79
2. 0.73 8.94
3. 71 94 161 71 77 99
4. 139 428 483 73 249 289
5. 467 719 777 189 321 365
|
imix-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.87 2.59
2. 0.88 2.62
|
imix-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.71 5.12
2. 1.73 5.17
|
imix-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.79 5.36
2. 1.80 5.39
|
10ge2p1x710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.35 0.91
2. 1.36 0.92
3. 29 92 116 29 74 114
4. 104 316 353 106 322 353
5. 243 348 440 243 347 439
|
64b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.64 1.77
2. 2.68 1.80
3. 29 105 194 29 95 168
4. 180 290 313 162 224 286
5. 232 313 351 228 309 344
|
64b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.63 1.77
2. 2.68 1.80
3. 29 83 158 29 34 105
4. 106 155 229 34 82 100
5. 148 230 253 79 141 155
|
1518b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.38
2. 0.28 3.40
3. 62 82 102 63 71 101
4. 162 443 491 162 445 483
5. 557 861 913 552 855 907
|
1518b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.56
2. 0.54 6.59
3. 62 115 174 62 87 153
4. 265 614 711 262 615 694
5. 901 1217 1366 918 1217 1348
|
1518b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.57 7.00
2. 0.58 7.09
3. 62 72 120 62 63 92
4. 128 412 492 63 233 306
5. 462 747 830 194 426 501
|
imix-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.73 2.18
2. 0.73 2.19
|
imix-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.44 4.29
2. 1.45 4.34
|
imix-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.47 4.40
2. 1.49 4.47
|
10ge2p1x710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.39 2.28
2. 3.43 2.30
3. 26 86 114 26 73 108
4. 51 122 139 42 132 145
5. 115 148 186 113 157 205
|
64b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 6.28 4.22
2. 6.40 4.30
3. 26 58 76 26 60 79
4. 62 113 130 68 110 128
5. 111 138 155 109 135 149
|
64b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 6.49 4.36
2. 6.59 4.43
3. 26 40 55 26 27 46
4. 48 96 104 39 66 81
5. 68 95 106 52 71 81
|
1518b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.87 10.68
2. 0.88 10.78
3. 32 54 81 32 55 79
4. 96 351 373 67 338 360
5. 372 436 487 356 420 480
|
1518b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 52 63 32 52 62
4. 55 78 87 56 76 86
5. 71 85 92 70 82 88
|
1518b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 47 64 32 44 54
4. 53 73 87 41 54 74
5. 67 84 90 48 58 62
|
imix-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.02 6.04
2. 2.05 6.13
|
imix-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.96 11.83
2. 4.04 12.07
|
imix-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.80 11.37
2. 3.86 11.55
|
10ge2p1x710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.25 2.18
2. 3.30 2.21
3. 26 89 114 26 74 110
4. 56 123 159 54 123 145
5. 130 162 200 134 162 205
|
64b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.10 4.10
2. 6.19 4.16
3. 26 78 94 26 75 93
4. 71 117 134 69 111 127
5. 123 150 167 118 148 164
|
64b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.22 4.18
2. 6.29 4.22
3. 26 54 71 26 37 70
4. 49 97 108 42 70 83
5. 77 99 110 49 66 78
|
1518b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.75 9.19
2. 0.75 9.24
3. 32 57 81 32 52 77
4. 127 377 400 118 368 385
5. 468 622 659 452 608 644
|
1518b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.49 18.32
2. 1.50 18.50
3. 32 50 63 32 47 74
4. 62 117 128 65 118 131
5. 104 129 142 97 123 133
|
1518b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.49 18.28
2. 1.50 18.46
3. 32 46 61 32 43 54
4. 59 110 119 45 56 93
5. 91 128 136 49 57 61
|
imix-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.85 5.54
2. 1.86 5.57
|
imix-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.66 10.95
2. 3.70 11.06
|
imix-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.70 11.07
2. 3.74 11.19
|
10ge2p1x710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.46 0.98
2. 1.47 0.99
3. 30 97 121 30 78 117
4. 87 293 310 102 292 312
5. 229 318 383 226 298 395
|
64b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.79 1.88
2. 2.85 1.91
3. 30 108 172 30 94 160
4. 160 279 301 162 280 300
5. 234 295 351 219 282 323
|
64b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 5.37 3.61
2. 5.45 3.66
3. 30 88 113 30 90 117
4. 99 154 166 68 124 142
5. 137 169 188 137 169 192
|
1518b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.33 4.10
2. 0.34 4.14
3. 72 109 129 72 109 130
4. 222 498 545 219 502 542
5. 739 935 1003 756 926 999
|
1518b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 8.02
2. 0.65 8.06
3. 71 140 192 71 112 183
4. 322 635 705 356 630 734
5. 851 1135 1316 834 1128 1307
|
1518b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.28 15.73
2. 1.28 15.80
3. 72 113 139 72 110 137
4. 181 339 408 176 338 396
5. 318 416 483 314 410 477
|
imix-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.80 2.38
2. 0.81 2.42
|
imix-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.57 4.68
2. 1.61 4.80
|
imix-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.09 9.24
2. 3.12 9.33
|
10ge2p1x710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.20 0.81
2. 1.21 0.81
3. 29 102 114 30 97 112
4. 72 397 449 90 392 449
5. 274 416 498 272 414 494
|
64b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.28 1.53
2. 2.33 1.56
3. 30 128 179 30 102 174
4. 164 281 332 153 277 331
5. 313 366 458 267 354 448
|
64b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.46 3.00
2. 4.50 3.03
3. 30 95 173 30 82 144
4. 91 161 180 91 162 183
5. 154 198 214 114 133 157
|
1518b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.30
2. 0.27 3.32
3. 63 99 113 63 68 84
4. 164 449 485 165 443 482
5. 569 869 915 504 846 911
|
1518b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.52 6.44
2. 0.53 6.48
3. 63 116 182 63 88 152
4. 333 634 714 327 622 711
5. 1011 1322 1473 986 1288 1446
|
1518b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.02 12.61
2. 1.04 12.74
3. 63 93 148 63 89 137
4. 181 400 494 181 401 492
5. 309 427 535 306 423 498
|
imix-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.67 2.02
2. 0.68 2.04
|
imix-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.35 4.03
2. 1.35 4.05
|
imix-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.62 7.84
2. 2.66 7.96
|
10ge2p1x710-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.53 1.70
2. 2.58 1.74
3. 26 100 116 26 90 110
4. 58 144 172 40 128 148
5. 132 192 216 138 199 251
|
64b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.70 3.16
2. 4.78 3.21
3. 26 112 138 26 108 137
4. 73 132 149 69 135 148
5. 161 181 195 157 178 193
|
64b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 8.80 5.91
2. 8.96 6.02
3. 26 58 85 26 54 74
4. 53 82 91 55 85 96
5. 85 101 110 65 79 99
|
1518b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.80 9.84
2. 0.81 10.02
3. 32 58 85 32 50 78
4. 113 368 387 77 362 379
5. 429 555 615 418 553 611
|
1518b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 49 77 32 48 77
4. 71 101 109 71 98 107
5. 92 118 127 89 114 125
|
1518b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 32 49 63 32 49 62
4. 47 57 74 43 56 71
5. 51 61 69 51 61 67
|
imix-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.68 5.03
2. 1.69 5.06
|
imix-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.17 9.48
2. 3.23 9.67
|
imix-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|
10ge2p1x710-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.45 1.65
2. 2.47 1.66
3. 26 96 118 26 89 113
4. 49 160 174 57 163 178
5. 149 188 245 147 184 243
|
64b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.53 3.05
2. 4.65 3.12
3. 26 130 160 26 129 156
4. 89 159 182 78 162 181
5. 180 197 213 162 191 208
|
1518b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.71 8.68
2. 0.71 8.73
3. 33 60 86 33 53 86
4. 96 290 312 87 282 305
5. 374 525 597 375 514 593
|
1518b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.38 16.99
2. 1.40 17.25
3. 32 52 69 32 51 72
4. 67 161 176 68 151 172
5. 146 215 237 141 208 234
|
1518b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 33 49 80 33 48 79
4. 50 59 76 48 59 86
5. 54 63 69 54 63 70
|
imix-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.57 4.68
2. 1.57 4.71
|
imix-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.01 9.00
2. 3.04 9.09
|
imix-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.81 17.39
2. 5.81 17.39
|