3n-hsw-xl710

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.45       0.98 
2. 1.47 0.99

3. 36 109 127 36 82 122
4. 97 287 305 95 303 321
5. 237 324 396 231 316 399

 64b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.79       1.87 
2. 2.84 1.91

3. 36 135 217 36 103 212
4. 188 310 326 184 305 319
5. 268 336 434 255 325 424

 64b-4t4c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  5.11       3.43 
2. 5.32 3.57

3. 36 115 142 36 117 156
4. 103 154 175 73 145 175
5. 155 186 223 163 198 243

 1518b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.33       4.08 
2. 0.33 4.09

3. 76 114 137 76 95 115
4. 207 507 582 214 493 561
5. 715 927 998 718 923 1008

 1518b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.64       7.87 
2. 0.64 7.91

3. 76 208 216 76 205 217
4. 352 715 816 287 709 811
5. 993 1309 1432 979 1302 1433

 1518b-4t4c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.21      14.89 
2. 1.23 15.11

3. 76 104 174 76 97 164
4. 147 308 400 143 304 394
5. 389 526 624 381 518 623

 imix-1t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.79       2.37 
2. 0.80 2.40

 imix-2t2c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.55       4.64 
2. 1.56 4.67

 imix-4t4c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.04       9.09 
2. 3.07 9.18

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.19       0.80 
2. 1.20 0.81

3. 36 93 115 36 83 115
4. 84 422 461 88 438 454
5. 274 417 501 287 429 510

 64b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.29       1.54 
2. 2.32 1.56

3. 36 184 214 36 104 207
4. 181 321 379 177 315 397
5. 355 445 513 318 404 507

 64b-4t4c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  4.32       2.90 
2. 4.36 2.93

3. 36 114 205 36 104 200
4. 105 178 209 97 188 216
5. 121 185 222 124 184 232

 1518b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.27       3.27 
2. 0.27 3.28

3. 67 78 106 67 68 92
4. 119 181 222 120 177 230
5. 551 655 723 555 660 728

 1518b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.52       6.37 
2. 0.52 6.40

3. 67 163 194 67 165 188
4. 399 778 843 349 729 831
5. 926 1289 1452 973 1350 1508

 1518b-4t4c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.99      12.14 
2. 0.99 12.24

3. 67 99 151 67 88 128
4. 149 308 408 150 307 407
5. 267 362 428 268 367 431

 imix-1t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.67       2.00 
2. 0.67 2.02

 imix-2t2c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.32       3.94 
2. 1.33 3.99

 imix-4t4c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.55       7.62 
2. 2.57 7.68

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.52       1.70 
2. 2.54 1.70

3. 32 94 120 32 75 118
4. 52 146 168 54 142 158
5. 130 197 226 130 195 240

 64b-2t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.67       3.14 
2. 4.74 3.18

3. 32 123 146 32 116 136
4. 80 172 187 78 168 185
5. 157 185 212 151 177 203

 64b-4t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.63       5.80 
2. 8.72 5.86

3. 32 78 105 33 73 96
4. 65 89 100 69 93 104
5. 82 108 136 93 113 135

 1518b-1t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  0.78       9.63 
2. 0.79 9.68

3. 36 86 116 36 69 100
4. 111 390 432 100 381 433
5. 400 604 665 410 616 681

 1518b-2t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.50      18.41 
2. 1.51 18.59

3. 36 58 90 36 57 90
4. 66 198 253 73 190 241
5. 169 251 270 155 240 263

 1518b-4t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.83      47.10 
2. 3.83 47.10

3. 37 51 78 37 53 84
4. 54 66 76 54 68 79
5. 62 72 85 63 75 88

 imix-1t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.60       4.79 
2. 1.60 4.79

 imix-2t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.08       9.21 
2. 3.09 9.25

 imix-4t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.61      16.78 
2. 5.69 17.02

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.43       1.63 
2. 2.44 1.64

3. 32 98 121 32 78 119
4. 53 170 180 54 169 180
5. 156 198 248 158 199 251

 64b-2t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.37       2.94 
2. 4.46 3.00

3. 32 129 185 32 88 175
4. 94 159 183 80 154 179
5. 154 207 225 120 179 209

 64b-4t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.93       5.33 
2. 8.09 5.44

3. 32 47 96 33 35 73
4. 94 103 111 95 104 113
5. 85 107 129 84 107 123

 1518b-1t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.67       8.24 
2. 0.68 8.31

3. 37 57 70 37 57 69
4. 51 197 229 56 190 224
5. 239 336 416 235 328 376

 1518b-2t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.33      16.32 
2. 1.34 16.45

3. 37 63 87 37 60 87
4. 69 177 218 67 176 226
5. 267 323 378 261 320 358

 1518b-4t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.83      47.10 
2. 3.83 47.10

3. 38 58 77 38 52 82
4. 65 85 104 63 85 104
5. 95 116 138 91 114 136

 imix-1t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.48       4.42 
2. 1.49 4.46

 imix-2t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.88       8.62 
2. 2.90 8.66

 imix-4t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.46      16.33 
2. 5.49 16.41

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.89       1.27 
2. 1.91 1.29

3. 44 103 126 45 85 117
4. 73 223 242 67 218 233
5. 186 253 361 167 237 361

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.93       1.97 
2. 2.95 1.99

3. 44 124 159 44 61 155
4. 91 217 233 81 210 226
5. 180 212 252 146 209 226

 64b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  5.61       3.77 
2. 5.70 3.83

3. 45 55 66 45 51 62
4. 66 121 135 67 123 135
5. 154 220 244 117 139 155

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.78      21.94 
2. 1.80 22.16

3. 55 93 118 55 80 113
4. 102 225 249 99 219 243
5. 256 303 331 250 294 321

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.81      34.53 
2. 2.85 35.05

3. 54 72 88 54 69 86
4. 108 143 173 106 127 156
5. 186 213 234 159 188 210

 1518b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.24      39.82 
2. 3.25 40.02

3. 54 65 81 55 61 71
4. 74 103 108 64 102 107
5. 94 106 119 95 105 115

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.77       5.31 
2. 1.78 5.33

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.83       8.47 
2. 2.86 8.56

 imix-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  5.45      16.29 
2. 5.56 16.62

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.89       1.27 
2. 1.90 1.28

3. 45 104 116 45 96 113
4. 73 231 247 55 229 247
5. 164 237 304 160 231 307

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.70       1.82 
2. 2.92 1.96

3. 45 120 157 45 64 152
4. 96 213 232 97 218 232
5. 170 226 277 150 214 263

 64b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  5.59       3.76 
2. 5.71 3.83

3. 45 56 70 45 53 64
4. 66 122 137 66 122 136
5. 154 220 243 117 139 155

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.78      21.96 
2. 1.79 22.07

3. 56 95 119 56 80 112
4. 101 224 251 91 219 243
5. 257 305 333 251 299 329

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.55      31.43 
2. 2.57 31.58

3. 56 72 85 56 67 78
4. 68 160 170 62 158 167
5. 144 168 176 134 163 171

 1518b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.62      32.28 
2. 2.64 32.45

3. 56 71 108 56 71 109
4. 61 112 124 56 114 123
5. 101 120 127 100 117 128

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.64       4.91 
2. 1.78 5.32

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.82       8.44 
2. 2.85 8.52

 imix-4t4c-ethip4ipsec1000tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  5.42      16.22 
2. 5.56 16.63

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.92       1.29 
2. 1.94 1.31

3. 45 99 118 45 67 106
4. 70 213 233 80 213 227
5. 199 281 389 185 261 378

 64b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.91       1.96 
2. 3.02 2.03

3. 45 103 141 45 98 134
4. 89 204 218 81 208 224
5. 184 224 242 167 192 211

 64b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.72       3.84 
2. 5.85 3.93

3. 45 79 101 45 74 86
4. 75 118 133 72 113 126
5. 159 223 253 120 145 167

 1518b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.81      22.26 
2. 1.83 22.48

3. 53 108 122 53 95 115
4. 102 224 249 103 222 239
5. 263 310 340 255 305 332

 1518b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.87      35.33 
2. 2.90 35.68

3. 53 71 102 53 68 88
4. 85 159 171 87 152 166
5. 182 202 216 154 173 188

 1518b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.41      41.97 
2. 3.41 41.97

3. 56 64 82 53 59 75
4. 65 94 103 64 93 102
5. 92 102 114 91 100 110

 imix-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.80       5.38 
2. 1.80 5.38

 imix-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.85       8.53 
2. 2.89 8.66

 imix-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.54      16.57 
2. 5.60 16.73

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.93       1.30 
2. 1.95 1.31

3. 46 103 122 46 86 112
4. 71 216 233 80 212 228
5. 204 292 398 194 277 385

 64b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.96       1.99 
2. 2.99 2.01

3. 45 128 156 45 60 129
4. 78 192 217 67 178 204
5. 183 219 241 172 193 226

 64b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.64       3.79 
2. 5.84 3.92

3. 46 102 132 46 99 128
4. 74 121 138 74 120 134
5. 159 219 247 115 136 155

 1518b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.82      22.41 
2. 1.82 22.41

3. 54 92 124 54 83 115
4. 99 223 248 102 218 239
5. 252 301 329 244 292 319

 1518b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.86      35.14 
2. 2.88 35.49

3. 54 73 103 54 68 89
4. 102 162 178 101 138 163
5. 184 206 222 155 176 195

 1518b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.21      39.50 
2. 3.21 39.50

3. 58 66 86 51 62 79
4. 72 102 108 67 100 107
5. 94 106 119 94 104 113

 imix-1t1c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.80       5.37 
2. 1.80 5.37

 imix-2t2c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.85       8.54 
2. 2.90 8.67

 imix-4t4c-ethip4ipsec1000tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.52      16.50 
2. 5.63 16.83

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.40       0.27 
2. 0.42 0.28

3. 49 61 119 49 60 88
4. 208 627 993 183 550 804
5. 2623 3967 4783 2601 4043 4907

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.88       0.59 
2. 0.89 0.60

3. 47 71 174 47 70 181
4. 302 934 1178 342 1074 1541
5. 1263 1956 2315 1025 1714 2001

 64b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.75       1.18 
2. 1.78 1.19

3. 49 143 302 49 139 300
4. 251 615 867 235 587 843
5. 671 1105 1357 651 1095 1349

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.40       4.90 
2. 0.41 5.07

3. 59 68 128 59 65 129
4. 217 566 887 200 525 765
5. 2597 4053 4887 2545 4079 4971

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.88      10.85 
2. 0.89 10.90

3. 58 132 285 58 126 271
4. 456 1177 1638 404 1080 1539
5. 1681 2287 2599 1522 2155 2467

 1518b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.69      20.79 
2. 1.72 21.10

3. 59 133 298 59 116 282
4. 231 598 855 220 577 831
5. 664 1011 1188 634 974 1163

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.36       1.08 
2. 0.40 1.20

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.83       2.49 
2. 0.87 2.61

 imix-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.69       5.06 
2. 1.72 5.14

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.41       0.27 
2. 0.42 0.28

3. 49 61 133 49 59 122
4. 207 683 1145 171 547 888
5. 2473 3949 4819 2561 3865 4715

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.90       0.60 
2. 0.91 0.61

3. 49 131 287 49 128 272
4. 467 1180 1668 373 994 1472
5. 1815 2445 2833 1582 2265 2603

 64b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.70       1.14 
2. 1.72 1.16

3. 50 150 302 49 129 294
4. 245 608 875 246 608 871
5. 645 1089 1305 660 1102 1333

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.40       4.90 
2. 0.41 5.07

3. 61 73 137 61 66 122
4. 214 610 981 192 531 748
5. 2565 4031 4815 2567 4111 4927

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.88      10.80 
2. 0.88 10.85

3. 60 132 279 60 96 225
4. 442 1143 1593 426 1127 1600
5. 1471 2141 2441 1642 2263 2553

 1518b-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.67      20.52 
2. 1.70 20.94

3. 61 137 291 61 114 277
4. 227 591 838 212 565 829
5. 691 1016 1191 601 942 1140

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.37       1.11 
2. 0.40 1.20

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.83       2.50 
2. 0.88 2.63

 imix-4t4c-ethip4ipsec1000tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.68       5.04 
2. 1.71 5.11

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.40       0.27 
2. 0.42 0.28

3. 50 62 130 50 58 122
4. 196 596 918 176 515 774
5. 2593 3957 4731 2607 4047 4879

 64b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.89       0.60 
2. 0.90 0.60

3. 49 131 280 49 128 281
4. 462 1157 1638 427 1112 1606
5. 1811 2459 2875 1584 2285 2653

 64b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.72       1.15 
2. 1.74 1.17

3. 50 145 299 49 135 292
4. 249 602 860 232 572 849
5. 650 1092 1308 622 1067 1272

 1518b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.40       4.94 
2. 0.42 5.11

3. 57 68 135 57 63 120
4. 198 598 947 179 534 762
5. 2415 3987 4963 2491 3937 4851

 1518b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.87      10.70 
2. 0.87 10.76

3. 57 134 280 57 119 263
4. 448 1150 1610 385 1057 1501
5. 1614 2255 2573 1368 2097 2417

 1518b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.70      20.95 
2. 1.74 21.38

3. 57 140 300 57 136 296
4. 239 607 849 220 566 811
5. 669 1018 1189 647 961 1148

 imix-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.37       1.11 
2. 0.40 1.21

 imix-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.83       2.47 
2. 0.89 2.65

 imix-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.71       5.13 
2. 1.73 5.18

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.41       0.27 
2. 0.42 0.29

3. 50 62 129 50 58 123
4. 208 697 1239 171 569 968
5. 2567 3885 4675 2553 3995 4807

 64b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.91       0.61 
2. 0.92 0.62

3. 50 120 290 50 120 285
4. 465 1197 1697 461 1170 1660
5. 1702 2353 2749 1597 2241 2605

 64b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.76       1.18 
2. 1.78 1.20

3. 49 143 304 49 130 301
4. 249 616 864 224 577 833
5. 675 1105 1337 664 1102 1359

 1518b-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.40       4.90 
2. 0.42 5.15

3. 58 64 130 58 64 128
4. 198 649 1019 176 547 810
5. 2463 3989 4867 2529 3937 4823

 1518b-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.89      10.92 
2. 0.89 10.97

3. 58 130 284 58 132 281
4. 459 1175 1630 421 1097 1554
5. 1608 2233 2547 1521 2161 2489

 1518b-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.71      21.05 
2. 1.74 21.37

3. 58 139 296 58 137 293
4. 237 592 824 210 554 805
5. 652 1001 1171 645 955 1141

 imix-1t1c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.38       1.13 
2. 0.40 1.20

 imix-2t2c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.82       2.46 
2. 0.89 2.65

 imix-4t4c-ethip4ipsec1000tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.74       5.21 
2. 1.77 5.29

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.48       0.99 
2. 1.49 1.00

3. 29 86 110 29 66 97
4. 77 261 278 77 268 283
5. 227 290 366 227 287 380

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.88       1.93 
2. 2.91 1.95

3. 29 110 209 29 97 205
4. 146 272 307 152 277 305
5. 253 332 435 243 329 434

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  5.45       3.67 
2. 5.54 3.72

3. 30 59 79 30 64 88
4. 86 137 155 91 141 167
5. 138 174 202 145 181 222

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.34       4.14 
2. 0.34 4.17

3. 68 107 131 68 88 119
4. 214 482 524 215 472 511
5. 756 935 1059 763 932 1085

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.65       7.96 
2. 0.65 8.04

3. 68 202 212 68 115 208
4. 373 769 814 388 788 880
5. 1061 1369 1480 1071 1353 1466

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.29      15.85 
2. 1.30 16.01

3. 69 128 214 69 112 144
4. 253 545 675 266 553 631
5. 453 594 732 446 586 724

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.80       2.40 
2. 0.82 2.44

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.60       4.78 
2. 1.62 4.86

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.16       9.44 
2. 3.19 9.54

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.21       0.81 
2. 1.22 0.82

3. 29 103 117 29 90 113
4. 63 385 431 65 388 428
5. 261 403 490 274 413 496

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.35       1.58 
2. 2.37 1.59

3. 29 109 198 29 92 196
4. 163 307 393 139 301 381
5. 331 408 500 316 384 492

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  4.50       3.02 
2. 4.56 3.07

3. 29 80 106 29 80 147
4. 94 177 206 91 178 208
5. 183 208 244 189 214 254

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.27       3.32 
2. 0.27 3.32

3. 60 93 101 60 68 85
4. 162 445 508 164 441 481
5. 531 845 926 534 842 914

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.52       6.44 
2. 0.53 6.47

3. 60 169 194 60 85 185
4. 351 753 791 347 752 798
5. 1156 1538 1624 1146 1564 1650

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.04      12.75 
2. 1.05 12.88

3. 60 69 134 60 71 135
4. 273 597 725 268 574 706
5. 492 667 778 473 653 760

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.68       2.03 
2. 0.68 2.05

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.36       4.06 
2. 1.36 4.08

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.62       7.82 
2. 2.70 8.06

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.63       1.77 
2. 2.66 1.79

3. 25 86 112 25 50 91
4. 86 168 188 87 150 186
5. 128 185 214 135 186 231

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.88       3.28 
2. 4.93 3.31

3. 25 63 101 25 71 92
4. 90 150 179 87 142 172
5. 148 182 214 139 176 204

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.08       6.10 
2. 9.37 6.29

3. 26 60 77 26 74 93
4. 58 82 94 61 88 99
5. 80 95 109 85 103 123

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  0.81      10.02 
2. 0.83 10.17

3. 29 77 105 29 64 87
4. 110 425 446 115 423 445
5. 432 608 694 410 597 657

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.57      19.36 
2. 1.59 19.56

3. 29 59 97 29 55 83
4. 127 336 390 118 332 387
5. 295 391 440 279 387 436

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.08      37.95 
2. 3.13 38.52

3. 29 50 79 30 44 73
4. 59 111 129 61 111 127
5. 99 122 139 98 121 137

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.71       5.13 
2. 1.74 5.20

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.31       9.90 
2. 3.34 10.00

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.56      19.61 
2. 6.66 19.91

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.50       1.68 
2. 2.51 1.69

3. 26 89 115 26 71 115
4. 44 149 160 46 146 159
5. 124 187 215 126 188 248

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.74       3.19 
2. 4.79 3.22

3. 25 119 139 25 106 121
4. 90 153 172 80 148 168
5. 169 199 232 161 191 217

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.73       5.87 
2. 9.08 6.10

3. 27 50 78 27 51 78
4. 41 58 77 41 57 76
5. 93 104 114 70 104 120

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.71       8.78 
2. 0.72 8.82

3. 29 94 107 30 93 103
4. 114 425 447 102 424 443
5. 435 739 829 433 730 770

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.40      17.17 
2. 1.41 17.34

3. 29 108 156 29 87 141
4. 214 386 469 208 392 483
5. 369 479 545 356 457 523

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.73      33.58 
2. 2.78 34.26

3. 30 52 84 30 51 73
4. 82 123 138 62 142 154
5. 131 172 202 130 168 196

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.59       4.76 
2. 1.60 4.79

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.06       9.16 
2. 3.09 9.25

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.94      17.76 
2. 6.18 18.49

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.45       0.30 
2. 0.45 0.30

3. 44 71 129 44 61 97
4. 214 540 780 214 567 755
5. 1898 2643 3179 1818 2645 3137

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.81       0.54 
2. 0.82 0.55

3. 42 105 213 42 65 198
4. 384 936 1234 360 942 1246
5. 841 1369 1759 887 1409 1794

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.59       1.07 
2. 1.62 1.09

3. 43 129 270 43 115 261
4. 201 482 708 189 465 691
5. 504 834 1071 500 818 1042

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.22       2.73 
2. 0.22 2.74

3. 75 94 141 75 86 122
4. 218 514 650 211 476 636
5. 1267 1833 2489 1287 2063 2741

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.43       5.25 
2. 0.43 5.30

3. 74 152 221 73 96 183
4. 390 755 990 323 719 941
5. 1351 1978 2489 1332 1956 2467

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.85      10.44 
2. 0.86 10.54

3. 74 134 239 74 99 180
4. 367 774 1003 371 795 1030
5. 846 1210 1475 903 1279 1530

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.36       1.07 
2. 0.36 1.08

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.65       1.94 
2. 0.66 1.96

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.29       3.87 
2. 1.31 3.93

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.42       0.28 
2. 0.43 0.29

3. 43 68 128 43 67 130
4. 183 524 735 183 546 740
5. 1856 2571 3069 1739 2543 3095

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.75       0.50 
2. 0.75 0.50

3. 42 70 107 42 69 107
4. 216 548 867 211 551 867
5. 588 904 1240 615 1009 1310

 64b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.47       0.99 
2. 1.50 1.01

3. 42 114 255 42 108 254
4. 199 537 819 179 542 863
5. 508 796 1005 507 792 1002

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.19       2.35 
2. 0.19 2.35

3. 66 71 114 66 70 80
4. 167 465 601 168 429 564
5. 980 1473 1788 986 1521 1955

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.37       4.55 
2. 0.37 4.60

3. 65 126 187 65 114 180
4. 358 690 899 344 693 903
5. 1280 1850 2339 1300 1895 2443

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.73       8.99 
2. 0.75 9.17

3. 65 131 224 65 115 215
4. 358 762 973 352 766 975
5. 974 1360 1636 962 1334 1593

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.33       0.99 
2. 0.33 0.99

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.61       1.83 
2. 0.62 1.85

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.18       3.52 
2. 1.20 3.59

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.52       0.35 
2. 0.52 0.35

3. 32 65 140 32 54 107
4. 226 540 781 220 552 787
5. 1891 2645 3111 1871 2605 3117

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.87       0.58 
2. 0.87 0.59

3. 30 110 251 30 66 214
4. 363 1020 1444 355 1027 1473
5. 740 1305 1720 788 1349 1776

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.75       1.18 
2. 1.78 1.20

3. 30 98 250 31 84 239
4. 180 458 660 148 445 644
5. 410 678 882 395 668 877

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.36       4.46 
2. 0.36 4.48

3. 43 64 109 43 49 87
4. 150 430 632 115 438 603
5. 1520 2305 3011 1615 2401 3069

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.65       8.03 
2. 0.66 8.12

3. 36 89 187 35 54 152
4. 314 818 1149 261 779 1117
5. 1028 1564 1948 1042 1582 1913

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.27      15.62 
2. 1.30 15.94

3. 38 85 189 37 73 165
4. 120 525 721 115 515 715
5. 431 688 872 408 669 848

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.46       1.36 
2. 0.47 1.40

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.81       2.43 
2. 0.82 2.45

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.62       4.84 
2. 1.65 4.94

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.52       0.35 
2. 0.52 0.35

3. 33 67 140 34 55 119
4. 193 534 741 188 560 747
5. 1788 2601 3097 1677 2485 3049

 64b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.89       0.60 
2. 0.90 0.60

3. 30 117 261 30 51 186
4. 356 968 1402 260 874 1293
5. 805 1319 1708 751 1256 1633

 64b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.73       1.16 
2. 1.76 1.18

3. 31 120 273 31 111 265
4. 209 522 719 181 480 687
5. 451 749 965 418 713 935

 1518b-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.34       4.16 
2. 0.34 4.19

3. 44 60 103 44 59 102
4. 148 418 615 148 440 597
5. 1494 2359 3187 1604 2459 3293

 1518b-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.62       7.63 
2. 0.63 7.71

3. 38 91 193 36 49 129
4. 325 802 1113 267 775 1068
5. 1106 1685 2085 1119 1688 2133

 1518b-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.20      14.75 
2. 1.22 14.97

3. 43 79 156 39 68 129
4. 176 554 776 164 540 774
5. 475 749 947 453 719 907

 imix-1t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.44       1.32 
2. 0.45 1.35

 imix-2t2c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.80       2.38 
2. 0.80 2.41

 imix-4t4c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.60       4.78 
2. 1.61 4.83

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.87       1.93 
2. 2.89 1.94

3. 44 103 124 44 79 117
4. 57 153 167 57 155 170
5. 142 204 267 144 205 267

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  4.91       3.30 
2. 5.01 3.37

3. 44 66 85 44 62 85
4. 83 143 160 86 142 161
5. 152 202 235 125 155 173

 64b-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  4.86       3.26 
2. 4.95 3.33

3. 44 73 94 44 85 110
4. 79 144 162 90 136 162
5. 192 227 250 130 161 181

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.70      33.20 
2. 2.70 33.20

3. 54 89 109 54 77 108
4. 96 148 158 80 150 161
5. 288 316 338 290 317 342

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.16      38.93 
2. 3.16 38.93

3. 54 64 80 54 63 78
4. 73 111 120 70 110 116
5. 108 118 125 107 118 125

 1518b-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.14      38.61 
2. 3.14 38.61

3. 58 66 97 54 63 80
4. 69 113 128 69 113 126
5. 110 124 131 109 122 129

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.68       8.03 
2. 2.68 8.03

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  4.70      14.07 
2. 4.77 14.28

 imix-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  4.52      13.51 
2. 4.59 13.71

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.89       1.94 
2. 2.89 1.94

3. 45 100 116 45 99 115
4. 56 154 163 62 158 173
5. 137 194 255 138 196 252

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  4.94       3.32 
2. 5.04 3.39

3. 49 61 89 44 66 84
4. 90 140 155 82 142 159
5. 184 226 252 129 160 184

 64b-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  4.83       3.24 
2. 4.95 3.32

3. 45 73 92 45 79 102
4. 72 126 152 75 124 149
5. 194 226 248 130 156 168

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.70      33.21 
2. 2.70 33.21

3. 56 94 109 56 91 108
4. 106 147 161 81 150 162
5. 293 319 339 296 322 343

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.56      31.52 
2. 2.56 31.52

3. 56 69 82 56 67 80
4. 60 128 135 58 128 134
5. 107 127 133 104 127 135

 1518b-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.56      31.54 
2. 2.56 31.54

3. 56 73 96 56 71 92
4. 61 130 139 60 129 138
5. 111 130 137 110 129 136

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.68       8.00 
2. 2.68 8.00

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  4.71      14.08 
2. 4.78 14.29

 imix-4t4c-ethip4ipsec1tnlhw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  4.54      13.57 
2. 4.60 13.77

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.89       1.94 
2. 2.90 1.95

3. 45 100 124 45 76 114
4. 60 158 170 62 161 175
5. 184 238 288 182 238 288

 64b-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.99       3.35 
2. 5.06 3.40

3. 45 73 125 45 68 115
4. 94 138 155 84 140 154
5. 156 209 246 132 162 181

 64b-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.89       3.29 
2. 4.97 3.34

3. 45 74 101 45 71 94
4. 84 142 160 84 137 159
5. 158 211 243 131 164 188

 1518b-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.71      33.33 
2. 2.71 33.33

3. 53 86 104 53 71 106
4. 121 145 158 72 153 163
5. 296 325 348 299 330 354

 1518b-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.28      40.32 
2. 3.28 40.32

3. 52 75 88 52 65 87
4. 77 109 119 65 108 117
5. 104 121 137 104 119 133

 1518b-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.22      39.64 
2. 3.22 39.64

3. 53 66 85 53 65 83
4. 72 110 122 67 106 112
5. 106 120 131 109 121 131

 imix-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.70       8.08 
2. 2.70 8.08

 imix-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.71      14.10 
2. 4.79 14.31

 imix-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.59      13.72 
2. 4.66 13.93

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.90       1.95 
2. 2.90 1.95

3. 45 100 124 45 76 113
4. 58 155 165 61 159 176
5. 182 235 284 180 236 288

 64b-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.99       3.35 
2. 5.07 3.40

3. 45 115 143 45 66 138
4. 91 140 158 88 137 154
5. 186 234 260 137 168 185

 64b-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.90       3.30 
2. 4.98 3.35

3. 45 75 93 45 73 91
4. 84 139 160 86 135 157
5. 149 204 237 129 160 181

 1518b-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.72      33.43 
2. 2.72 33.43

3. 58 94 106 50 77 107
4. 132 146 162 77 153 163
5. 292 324 346 294 325 347

 1518b-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.14      38.62 
2. 3.14 38.62

3. 57 78 95 50 61 78
4. 67 111 120 66 111 116
5. 108 120 127 106 119 126

 1518b-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.05      37.54 
2. 3.05 37.54

3. 54 66 85 54 64 80
4. 77 118 134 65 123 138
5. 107 121 128 112 124 132

 imix-1t1c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.68       8.03 
2. 2.70 8.07

 imix-2t2c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.46      13.35 
2. 4.53 13.55

 imix-4t4c-ethip4ipsec1tnlhw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.60      13.76 
2. 4.65 13.90

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  3.30       2.22 
2. 3.31 2.23

3. 44 101 114 44 87 108
4. 57 137 152 57 139 153
5. 131 165 207 130 167 212

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  6.84       4.60 
2. 6.91 4.64

3. 44 109 125 44 107 124
4. 77 116 127 68 116 127
5. 163 193 217 158 185 208

 64b-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  6.82       4.58 
2. 6.92 4.65

3. 44 108 128 44 107 124
4. 69 109 122 64 109 119
5. 136 159 182 141 164 185

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  3.07      37.81 
2. 3.09 38.00

3. 54 101 114 54 99 110
4. 95 155 164 103 153 162
5. 252 273 286 255 274 287

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  3.16      38.91 
2. 3.16 38.91

3. 54 72 88 53 70 84
4. 71 105 110 64 101 108
5. 96 107 114 96 106 111

 1518b-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  3.14      38.68 
2. 3.14 38.68

3. 54 68 88 54 68 82
4. 71 106 112 66 103 110
5. 99 108 113 98 108 115

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  3.04       9.09 
2. 3.06 9.14

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  6.19      18.52 
2. 6.25 18.70

 imix-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  6.25      18.70 
2. 6.32 18.89

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  3.29       2.21 
2. 3.30 2.22

3. 44 103 118 44 89 111
4. 61 140 154 62 138 155
5. 134 178 224 137 176 229

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  6.80       4.57 
2. 6.87 4.61

3. 46 111 133 47 64 126
4. 72 114 126 68 115 125
5. 136 156 174 139 162 180

 64b-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  6.90       4.63 
2. 6.93 4.66

3. 48 111 130 47 99 126
4. 79 117 128 71 117 127
5. 165 196 221 166 197 223

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  2.72      33.45 
2. 2.73 33.62

3. 56 90 111 56 89 110
4. 113 130 143 114 130 144
5. 162 194 207 163 194 210

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  2.56      31.53 
2. 2.56 31.53

3. 55 69 82 55 68 79
4. 61 119 130 60 119 130
5. 102 121 131 102 120 129

 1518b-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  2.56      31.52 
2. 2.57 31.68

3. 56 68 91 56 63 78
4. 74 114 136 76 114 135
5. 105 125 133 105 125 131

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  3.05       9.13 
2. 3.07 9.18

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  5.82      17.42 
2. 5.91 17.68

 imix-4t4c-ethip4ipsec1tnlhw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  5.71      17.07 
2. 5.74 17.16

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  3.31       2.22 
2. 3.32 2.23

3. 45 105 125 45 91 116
4. 65 141 156 61 141 156
5. 148 194 230 149 199 238

 64b-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  6.80       4.57 
2. 6.90 4.64

3. 45 118 130 45 114 129
4. 76 115 125 68 115 125
5. 174 203 227 168 198 224

 64b-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  6.83       4.59 
2. 6.89 4.63

3. 45 115 129 45 112 127
4. 76 116 127 73 116 127
5. 173 202 226 173 202 227

 1518b-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  3.07      37.80 
2. 3.09 37.99

3. 52 98 110 52 97 107
4. 95 158 167 105 156 165
5. 247 269 282 252 272 285

 1518b-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  3.28      40.37 
2. 3.28 40.37

3. 56 67 79 52 64 80
4. 74 100 106 72 101 107
5. 91 108 120 90 105 117

 1518b-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  3.22      39.57 
2. 3.22 39.57

3. 52 66 81 52 63 79
4. 64 102 108 56 102 107
5. 94 106 119 95 104 111

 imix-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  3.06       9.15 
2. 3.07 9.19

 imix-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  6.14      18.36 
2. 6.20 18.55

 imix-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  6.21      18.58 
2. 6.31 18.86

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.30       2.22 
2. 3.33 2.24

3. 45 105 118 45 103 115
4. 76 136 152 65 137 155
5. 136 172 212 135 177 215

 64b-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  6.77       4.55 
2. 6.84 4.59

3. 48 109 125 48 94 125
4. 70 117 128 69 115 126
5. 179 208 240 174 203 233

 64b-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  6.84       4.60 
2. 6.91 4.64

3. 45 110 126 45 107 124
4. 77 117 127 69 116 125
5. 161 190 211 157 181 201

 1518b-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.07      37.76 
2. 3.08 37.95

3. 54 93 117 53 81 111
4. 97 158 168 96 157 171
5. 250 270 282 253 272 285

 1518b-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.12      38.45 
2. 3.12 38.45

3. 53 68 86 53 66 79
4. 70 102 111 71 102 109
5. 95 106 111 93 106 111

 1518b-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.06      37.65 
2. 3.06 37.65

3. 53 67 86 53 64 82
4. 58 113 126 62 108 115
5. 93 110 115 95 110 115

 imix-1t1c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.06       9.16 
2. 3.06 9.16

 imix-2t2c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  6.17      18.47 
2. 6.24 18.65

 imix-4t4c-ethip4ipsec1tnlhw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  6.21      18.56 
2. 6.27 18.75

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.82       1.22 
2. 1.84 1.24

3. 29 109 129 29 83 122
4. 62 262 282 72 260 278
5. 228 299 377 232 307 360

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.62       2.43 
2. 3.68 2.47

3. 30 62 93 30 64 90
4. 65 100 136 65 102 139
5. 135 167 195 137 176 207

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.65       2.46 
2. 3.67 2.47

3. 29 128 201 29 107 212
4. 127 223 267 137 228 257
5. 201 261 304 193 252 287

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.35       4.31 
2. 0.35 4.33

3. 68 111 129 68 94 117
4. 212 486 538 213 473 509
5. 771 939 1082 773 941 1100

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.67       8.21 
2. 0.67 8.25

3. 68 201 220 68 115 208
4. 357 767 808 358 768 822
5. 1018 1330 1468 1007 1303 1458

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.67       8.23 
2. 0.67 8.27

3. 68 197 222 68 115 209
4. 367 773 817 361 772 821
5. 1091 1349 1464 1054 1326 1449

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.90       2.70 
2. 0.91 2.73

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.76       5.26 
2. 1.77 5.28

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.75       5.24 
2. 1.77 5.29

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.42       0.96 
2. 1.44 0.97

3. 29 95 118 29 73 116
4. 98 305 323 101 312 329
5. 229 339 428 235 346 428

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.82       1.90 
2. 2.87 1.93

3. 29 112 213 29 108 214
4. 153 274 301 164 283 310
5. 248 315 423 247 322 390

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.85       1.91 
2. 2.88 1.93

3. 29 121 209 29 105 212
4. 153 274 301 159 279 303
5. 246 306 407 240 306 372

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.28       3.41 
2. 0.28 3.44

3. 59 93 110 59 68 86
4. 160 436 463 173 437 469
5. 546 850 898 545 848 888

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.53       6.56 
2. 0.54 6.63

3. 59 174 193 59 83 177
4. 343 749 783 340 751 796
5. 1147 1527 1616 1195 1564 1640

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.54       6.60 
2. 0.54 6.63

3. 59 172 204 59 83 183
4. 341 750 784 343 750 800
5. 1164 1538 1620 1197 1564 1642

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.75       2.23 
2. 0.75 2.25

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.47       4.38 
2. 1.47 4.40

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.43       4.29 
2. 1.45 4.33

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.87       2.60 
2. 3.91 2.62

3. 25 86 116 25 49 99
4. 45 105 123 46 100 118
5. 119 152 191 120 163 199

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.09       4.77 
2. 7.16 4.81

3. 25 74 89 25 86 108
4. 60 100 113 59 101 114
5. 101 129 147 101 129 146

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.22       4.86 
2. 7.33 4.93

3. 25 69 83 25 68 86
4. 59 107 128 64 111 131
5. 102 124 143 97 122 136

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  0.90      11.13 
2. 0.91 11.24

3. 29 78 103 29 76 100
4. 111 419 443 106 435 484
5. 383 488 594 378 492 599

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.79      22.05 
2. 1.80 22.16

3. 29 72 90 29 69 85
4. 162 314 363 152 315 358
5. 280 351 406 271 342 386

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.79      21.98 
2. 1.80 22.09

3. 29 67 85 29 68 89
4. 162 305 359 165 297 332
5. 274 349 405 265 341 383

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.19       6.56 
2. 2.22 6.63

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.23      12.66 
2. 4.30 12.85

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.31      12.89 
2. 4.38 13.09

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.61       2.43 
2. 3.67 2.47

3. 25 97 117 25 88 111
4. 53 128 144 53 131 145
5. 128 160 203 136 170 212

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.78       4.56 
2. 7.02 4.72

3. 25 95 112 25 91 115
4. 67 108 125 56 108 124
5. 105 133 152 106 132 153

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.80       4.57 
2. 6.94 4.66

3. 25 95 118 25 96 118
4. 63 107 126 54 108 126
5. 81 100 115 78 99 116

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.77       9.50 
2. 0.78 9.55

3. 29 82 107 29 73 100
4. 111 420 445 82 430 448
5. 485 675 741 469 667 735

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.54      18.97 
2. 1.55 19.07

3. 29 60 149 29 57 115
4. 151 367 444 143 355 441
5. 311 417 465 308 418 467

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.54      19.00 
2. 1.55 19.10

3. 29 66 114 29 61 113
4. 150 363 442 141 344 436
5. 311 425 474 307 430 480

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.99       5.94 
2. 2.00 5.97

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.87      11.59 
2. 3.89 11.64

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.79      11.35 
2. 3.85 11.52

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.73       1.17 
2. 1.75 1.18

3. 30 65 80 30 54 81
4. 69 200 217 51 216 233
5. 235 288 338 237 295 349

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  3.42       2.30 
2. 3.46 2.32

3. 29 100 198 29 86 195
4. 130 218 256 119 214 255
5. 214 275 337 210 267 323

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  3.45       2.32 
2. 3.47 2.33

3. 29 111 215 29 102 213
4. 126 217 256 116 211 244
5. 206 266 319 204 265 318

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.35       4.25 
2. 0.35 4.27

3. 69 108 128 69 107 129
4. 215 489 513 215 479 510
5. 753 932 1074 754 929 1071

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.66       8.13 
2. 0.66 8.17

3. 68 197 210 68 192 210
4. 359 763 802 355 766 805
5. 1033 1342 1479 967 1256 1409

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.66       8.14 
2. 0.67 8.18

3. 69 166 212 68 115 204
4. 363 764 806 359 767 812
5. 1017 1308 1433 1024 1308 1436

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.88       2.63 
2. 0.89 2.66

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.69       5.06 
2. 1.72 5.14

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.71       5.10 
2. 1.72 5.15

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.37       0.92 
2. 1.38 0.93

3. 29 95 120 29 74 116
4. 105 335 352 110 331 354
5. 240 358 443 249 374 450

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  2.71       1.82 
2. 2.76 1.85

3. 29 97 189 29 76 115
4. 188 303 326 171 257 316
5. 249 323 385 248 325 382

 64b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  2.75       1.85 
2. 2.76 1.86

3. 29 97 193 29 78 161
4. 175 296 317 183 296 324
5. 236 306 352 241 314 365

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.28       3.39 
2. 0.28 3.42

3. 60 96 122 60 69 86
4. 168 450 490 169 448 478
5. 549 854 912 548 853 897

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.53       6.55 
2. 0.53 6.58

3. 60 164 194 60 88 184
4. 354 746 782 347 749 790
5. 1151 1533 1615 1205 1571 1642

 1518b-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.53       6.52 
2. 0.54 6.58

3. 60 170 201 60 84 190
4. 356 748 785 345 744 795
5. 1179 1548 1633 1194 1561 1639

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.73       2.18 
2. 0.74 2.20

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.42       4.26 
2. 1.44 4.30

 imix-4t4c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.41       4.21 
2. 1.43 4.27

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  3.48       2.34 
2. 3.51 2.36

3. 25 93 117 25 78 115
4. 47 138 152 52 132 152
5. 125 161 204 127 167 207

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  6.40       4.30 
2. 6.46 4.34

3. 26 51 69 26 52 71
4. 66 118 135 66 122 139
5. 105 134 154 102 131 153

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  6.60       4.44 
2. 6.77 4.55

3. 26 73 110 25 58 119
4. 60 109 129 61 108 127
5. 109 135 149 107 130 147

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.89      10.90 
2. 0.89 10.95

3. 29 78 101 29 64 86
4. 116 429 451 111 428 454
5. 368 521 636 359 521 634

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.76      21.67 
2. 1.77 21.78

3. 29 67 98 29 65 87
4. 160 288 319 168 302 336
5. 279 367 433 279 364 427

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.76      21.62 
2. 1.77 21.73

3. 29 69 101 29 66 101
4. 161 291 320 168 302 331
5. 279 371 439 276 363 431

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  2.04       6.10 
2. 2.07 6.20

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  4.02      12.02 
2. 4.08 12.20

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  3.97      11.86 
2. 4.03 12.04

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.28       2.21 
2. 3.32 2.23

3. 26 93 118 26 77 113
4. 45 140 156 56 130 159
5. 132 171 217 135 176 223

 64b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  6.05       4.07 
2. 6.08 4.09

3. 26 85 129 26 95 137
4. 85 129 147 74 120 151
5. 111 148 166 106 140 160

 64b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  6.32       4.25 
2. 6.35 4.27

3. 26 70 89 26 74 98
4. 70 121 138 69 122 138
5. 107 136 151 109 135 152

 1518b-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.75       9.20 
2. 0.75 9.25

3. 30 98 114 30 95 105
4. 81 423 498 88 408 485
5. 413 707 821 407 694 813

 1518b-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.48      18.23 
2. 1.50 18.41

3. 29 68 134 29 62 110
4. 158 362 470 136 326 396
5. 320 444 497 313 441 492

 1518b-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.51      18.55 
2. 1.52 18.64

3. 30 66 86 29 61 83
4. 157 361 459 140 327 430
5. 327 451 501 316 442 489

 imix-1t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.86       5.56 
2. 1.88 5.62

 imix-2t2c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.62      10.84 
2. 3.68 11.00

 imix-4t4c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.53      10.56 
2. 3.62 10.83

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.22       0.82 
2. 1.24 0.83

3. 36 98 122 36 87 119
4. 61 387 431 76 339 415
5. 261 401 497 275 388 465

 64b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.39       1.61 
2. 2.45 1.65

3. 36 127 214 36 108 196
4. 146 271 319 140 265 308
5. 313 380 483 296 363 451

 64b-4t4c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  4.06       2.73 
2. 4.14 2.79

3. 37 138 214 37 104 212
4. 151 219 286 121 218 249
5. 156 212 242 164 220 251

 1518b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.31       3.79 
2. 0.31 3.82

3. 76 114 136 76 95 119
4. 211 486 564 212 467 515
5. 671 921 989 699 908 1009

 1518b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.61       7.46 
2. 0.61 7.53

3. 76 121 142 76 109 140
4. 252 513 543 246 499 539
5. 590 851 975 564 835 960

 1518b-4t4c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.15      14.16 
2. 1.16 14.33

3. 77 111 136 77 111 138
4. 163 382 475 155 377 472
5. 376 491 571 356 467 549

 imix-1t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.70       2.10 
2. 0.71 2.13

 imix-2t2c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.39       4.17 
2. 1.42 4.26

 imix-4t4c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.63       7.87 
2. 2.66 7.95

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.99       0.67 
2. 1.01 0.68

3. 36 95 110 36 93 109
4. 66 431 499 90 432 472
5. 263 434 480 270 406 453

 64b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.87       1.25 
2. 1.88 1.26

3. 36 113 136 36 105 125
4. 119 220 282 100 198 249
5. 301 405 521 282 362 447

 64b-4t4c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  3.35       2.25 
2. 3.39 2.28

3. 36 119 211 36 100 208
4. 110 212 252 102 219 260
5. 215 268 336 194 255 306

 1518b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.25       3.07 
2. 0.25 3.10

3. 67 82 118 67 72 97
4. 144 394 469 144 389 459
5. 530 802 861 530 789 848

 1518b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.49       6.03 
2. 0.49 6.08

3. 67 174 199 67 87 181
4. 390 779 860 376 750 856
5. 934 1274 1452 956 1285 1500

 1518b-4t4c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.95      11.64 
2. 0.96 11.76

3. 67 84 132 67 87 136
4. 194 329 414 184 321 394
5. 441 618 697 432 603 698

 imix-1t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.59       1.78 
2. 0.60 1.79

 imix-2t2c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.19       3.56 
2. 1.20 3.58

 imix-4t4c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.24       6.70 
2. 2.27 6.78

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.81       1.22 
2. 1.85 1.25

3. 32 88 118 32 73 118
4. 60 230 266 60 240 276
5. 192 272 318 183 283 322

 64b-2t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.48       2.34 
2. 3.52 2.36

3. 32 109 202 32 98 175
4. 115 218 253 104 198 234
5. 186 245 297 173 229 269

 64b-4t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.61       3.77 
2. 5.67 3.81

3. 32 45 76 32 45 58
4. 73 133 151 76 137 156
5. 125 157 178 118 158 178

 1518b-1t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  0.66       8.14 
2. 0.66 8.18

3. 37 72 98 37 66 83
4. 100 403 441 103 382 426
5. 426 702 798 451 676 777

 1518b-2t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.25      15.43 
2. 1.27 15.61

3. 37 57 66 36 42 69
4. 72 166 242 64 161 240
5. 259 346 415 251 341 415

 1518b-4t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.77      46.40 
2. 3.83 47.10

3. 37 55 82 37 57 82
4. 70 88 104 68 89 104
5. 95 137 273 101 154 248

 imix-1t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.20       3.60 
2. 1.29 3.86

 imix-2t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.37       7.09 
2. 2.46 7.36

 imix-4t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.46      13.35 
2. 4.58 13.70

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.69       1.13 
2. 1.73 1.16

3. 32 91 125 32 77 120
4. 77 259 275 70 269 289
5. 200 317 369 212 299 351

 64b-2t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.99       2.01 
2. 3.06 2.05

3. 32 115 205 32 95 172
4. 111 225 274 114 230 297
5. 207 268 307 199 259 292

 64b-4t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.06       3.40 
2. 5.10 3.43

3. 33 61 109 33 59 130
4. 84 145 171 80 146 170
5. 124 164 188 120 163 188

 1518b-1t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.58       7.16 
2. 0.58 7.19

3. 37 58 71 37 56 66
4. 85 220 263 93 210 254
5. 419 577 650 415 566 637

 1518b-2t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.11      13.70 
2. 1.13 13.90

3. 37 65 100 37 58 89
4. 231 501 591 211 482 556
5. 385 520 622 364 506 598

 1518b-4t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.04      25.07 
2. 2.04 25.07

3. 38 56 88 38 51 74
4. 59 108 134 59 104 130
5. 95 120 138 92 118 136

 imix-1t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.14       3.41 
2. 1.16 3.47

 imix-2t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.18       6.53 
2. 2.22 6.63

 imix-4t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.04      12.09 
2. 4.25 12.71

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.00       0.67 
2. 1.01 0.68

3. 30 88 119 30 70 115
4. 108 420 455 120 410 437
5. 277 441 486 291 430 482

 64b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.81       1.21 
2. 1.83 1.23

3. 30 138 201 30 90 195
4. 206 385 450 201 375 446
5. 326 432 555 307 409 531

 64b-4t4c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.22       2.17 
2. 3.26 2.19

3. 31 113 203 31 84 198
4. 125 222 279 108 215 269
5. 210 278 335 202 278 326

 1518b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.30       3.68 
2. 0.30 3.70

3. 70 111 130 70 90 115
4. 206 475 519 206 480 512
5. 749 932 1079 763 933 1092

 1518b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.59       7.22 
2. 0.59 7.26

3. 69 188 223 69 117 215
4. 416 761 811 390 766 821
5. 1177 1557 1664 1177 1559 1706

 1518b-4t4c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.14      14.03 
2. 1.15 14.17

3. 70 180 233 70 141 228
4. 332 687 796 303 660 773
5. 567 746 847 543 715 820

 imix-1t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.60       1.80 
2. 0.61 1.82

 imix-2t2c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.15       3.43 
2. 1.16 3.48

 imix-4t4c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.25       6.73 
2. 2.29 6.86

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.85       0.57 
2. 0.86 0.58

3. 30 92 116 30 65 108
4. 99 427 519 109 411 504
5. 415 627 680 360 556 665

 64b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.55       1.04 
2. 1.55 1.04

3. 30 89 148 30 52 101
4. 170 373 463 147 379 478
5. 412 543 666 383 512 588

 64b-4t4c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.70       1.81 
2. 2.73 1.83

3. 30 92 186 30 70 176
4. 174 293 322 151 259 315
5. 231 299 339 208 285 328

 1518b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.24       3.00 
2. 0.24 3.01

3. 61 93 130 61 83 118
4. 160 445 511 162 436 485
5. 541 848 935 543 840 926

 1518b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.48       5.91 
2. 0.48 5.94

3. 61 107 144 61 106 143
4. 394 735 773 383 732 771
5. 1146 1560 1642 1153 1570 1643

 1518b-4t4c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.94      11.58 
2. 0.95 11.63

3. 61 118 213 61 100 197
4. 408 756 894 373 724 886
5. 626 827 934 589 784 903

 imix-1t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.52       1.56 
2. 0.53 1.59

 imix-2t2c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.01       3.03 
2. 1.03 3.09

 imix-4t4c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.99       5.96 
2. 2.02 6.05

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.39       0.93 
2. 1.41 0.95

3. 26 82 117 26 66 108
4. 80 303 325 87 301 321
5. 209 324 413 203 316 396

 64b-2t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.51       1.69 
2. 2.54 1.71

3. 26 85 118 26 57 115
4. 115 224 255 107 214 242
5. 238 324 396 216 302 360

 64b-4t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.26       2.86 
2. 4.28 2.88

3. 26 91 179 27 66 162
4. 121 169 191 84 168 189
5. 109 176 204 113 169 206

 1518b-1t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  0.61       7.50 
2. 0.61 7.52

3. 30 77 99 30 60 87
4. 95 415 439 105 407 432
5. 448 782 872 432 763 850

 1518b-2t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.16      14.24 
2. 1.17 14.35

3. 30 62 85 30 50 78
4. 228 589 685 202 553 655
5. 467 637 700 423 599 683

 1518b-4t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.17      26.69 
2. 2.19 26.96

3. 30 52 87 30 50 83
4. 108 194 261 101 175 216
5. 187 228 272 169 218 248

 imix-1t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.00       2.98 
2. 1.02 3.04

 imix-2t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.79       5.34 
2. 1.83 5.47

 imix-4t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.50      10.47 
2. 3.57 10.68

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.30       0.87 
2. 1.31 0.88

3. 26 87 116 26 79 112
4. 28 298 369 33 288 365
5. 240 398 463 244 359 449

 64b-2t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.37       1.59 
2. 2.40 1.61

3. 26 100 199 26 80 181
4. 141 282 344 130 279 328
5. 285 357 450 249 325 406

 64b-4t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.95       2.66 
2. 3.95 2.66

3. 27 76 108 27 71 105
4. 58 131 163 67 138 173
5. 84 113 134 77 102 125

 1518b-1t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.54       6.66 
2. 0.54 6.69

3. 30 84 103 30 72 97
4. 101 419 440 112 409 428
5. 461 812 895 447 783 869

 1518b-2t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.05      12.93 
2. 1.06 13.02

3. 31 78 132 31 71 120
4. 354 669 725 309 628 714
5. 545 706 799 525 682 777

 1518b-4t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.97      24.30 
2. 1.98 24.42

3. 31 60 101 31 56 92
4. 99 257 325 102 250 317
5. 191 257 291 180 246 282

 imix-1t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.93       2.77 
2. 0.94 2.81

 imix-2t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.73       5.17 
2. 1.76 5.27

 imix-4t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.36      10.04 
2. 3.42 10.21

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.51       1.02 
2. 1.53 1.03

3. 29 94 123 29 73 117
4. 63 249 268 68 259 275
5. 224 325 388 259 323 391

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.86       1.92 
2. 2.94 1.98

3. 30 105 178 29 69 100
4. 119 239 269 116 233 260
5. 249 321 410 220 300 395

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  5.64       3.79 
2. 5.84 3.92

3. 30 74 149 30 54 92
4. 92 143 168 86 149 178
5. 150 181 219 154 192 239

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.34       4.16 
2. 0.34 4.18

3. 68 108 130 68 89 120
4. 214 483 540 214 472 502
5. 757 935 1068 765 932 1091

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.65       8.03 
2. 0.66 8.07

3. 68 202 211 68 115 208
4. 365 773 817 359 775 823
5. 1068 1368 1472 1051 1334 1448

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.30      15.96 
2. 1.31 16.12

3. 68 139 218 68 121 209
4. 248 541 694 264 549 633
5. 448 584 713 448 581 711

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.82       2.45 
2. 0.82 2.46

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.62       4.83 
2. 1.65 4.93

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.20       9.56 
2. 3.26 9.75

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.23       0.83 
2. 1.24 0.83

3. 29 96 117 29 71 112
4. 61 358 428 67 378 428
5. 254 390 485 263 397 485

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.39       1.61 
2. 2.44 1.64

3. 29 83 103 30 78 105
4. 89 175 222 77 172 220
5. 155 208 260 154 192 229

 64b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  4.73       3.18 
2. 4.80 3.23

3. 29 108 134 29 123 152
4. 95 151 181 96 156 186
5. 167 192 218 168 198 225

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.27       3.32 
2. 0.27 3.33

3. 60 89 115 60 80 106
4. 163 447 476 164 435 467
5. 536 842 893 535 838 880

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.53       6.46 
2. 0.53 6.50

3. 60 175 195 60 85 184
4. 351 757 785 345 760 807
5. 1165 1572 1659 1161 1558 1650

 1518b-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.04      12.83 
2. 1.05 12.96

3. 60 120 207 60 102 202
4. 352 666 803 334 649 747
5. 468 629 718 484 640 733

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.69       2.05 
2. 0.69 2.07

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.37       4.09 
2. 1.38 4.13

 imix-4t4c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.71       8.11 
2. 2.75 8.23

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.73       1.83 
2. 2.75 1.85

3. 25 88 116 25 72 115
4. 71 181 188 80 178 187
5. 131 177 225 139 177 239

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.12       3.44 
2. 5.22 3.51

3. 26 107 122 26 96 120
4. 74 126 150 67 126 153
5. 127 159 184 119 154 178

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.96       6.69 
2. 10.34 6.95

3. 26 44 73 26 42 69
4. 44 62 72 43 66 78
5. 81 105 130 79 98 119

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  0.83      10.18 
2. 0.83 10.23

3. 29 82 112 29 73 109
4. 114 430 450 73 436 455
5. 447 606 688 424 593 666

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.59      19.61 
2. 1.61 19.81

3. 29 67 108 29 60 86
4. 127 326 382 129 329 383
5. 297 387 454 288 382 436

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.17      38.98 
2. 3.22 39.57

3. 29 49 74 29 46 71
4. 52 103 126 51 103 116
5. 103 123 137 98 120 133

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.78       5.32 
2. 1.80 5.38

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.40      10.17 
2. 3.43 10.27

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.84      20.44 
2. 6.94 20.75

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.60       1.75 
2. 2.63 1.77

3. 26 90 116 25 74 115
4. 68 156 181 32 118 143
5. 137 189 229 150 195 242

 64b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.94       3.32 
2. 5.00 3.36

3. 25 69 92 25 77 100
4. 87 150 177 78 142 172
5. 147 188 222 131 171 195

 64b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.14       6.14 
2. 9.71 6.52

3. 26 36 51 26 36 51
4. 57 82 94 57 84 98
5. 96 119 151 107 141 178

 1518b-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.72       8.86 
2. 0.72 8.90

3. 29 86 104 29 81 104
4. 114 424 445 102 425 443
5. 424 728 833 428 729 821

 1518b-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.41      17.38 
2. 1.43 17.55

3. 29 69 129 30 64 109
4. 207 370 447 200 374 448
5. 358 460 523 348 450 515

 1518b-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.80      34.50 
2. 2.83 34.85

3. 30 53 77 30 50 71
4. 91 121 145 92 123 143
5. 135 175 208 129 167 195

 imix-1t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.64       4.91 
2. 1.65 4.94

 imix-2t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.15       9.42 
2. 3.18 9.51

 imix-4t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.28      18.77 
2. 6.44 19.25

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.65       1.11 
2. 1.68 1.13

3. 29 103 127 29 83 117
4. 84 288 308 95 260 302
5. 264 332 415 274 338 433

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.20       2.15 
2. 3.27 2.20

3. 29 116 202 29 99 193
4. 138 234 285 123 226 273
5. 219 275 317 214 269 302

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  5.31       3.57 
2. 5.45 3.67

3. 30 58 90 30 56 83
4. 75 126 146 74 124 143
5. 95 134 157 87 117 138

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.34       4.20 
2. 0.35 4.25

3. 68 107 131 68 88 118
4. 218 491 559 221 472 518
5. 774 946 1094 777 942 1112

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.66       8.15 
2. 0.67 8.19

3. 68 200 216 68 115 210
4. 362 778 821 362 777 831
5. 1028 1332 1463 1030 1338 1505

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.20      14.77 
2. 1.22 14.97

3. 68 137 223 68 115 207
4. 272 566 694 223 533 638
5. 450 635 718 413 554 642

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.85       2.55 
2. 0.86 2.57

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.70       5.07 
2. 1.71 5.12

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.93       8.75 
2. 3.00 8.96

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.31       0.88 
2. 1.34 0.90

3. 29 92 120 29 74 115
4. 113 329 366 104 302 368
5. 236 400 451 236 380 451

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.58       1.73 
2. 2.61 1.76

3. 29 97 188 29 77 109
4. 144 251 287 115 231 263
5. 275 354 419 265 341 400

 64b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  4.29       2.88 
2. 4.37 2.93

3. 29 90 180 29 65 161
4. 96 160 188 78 154 179
5. 106 162 212 92 127 187

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.27       3.35 
2. 0.28 3.39

3. 59 93 122 60 68 88
4. 174 448 465 171 439 465
5. 543 863 948 547 856 941

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.53       6.54 
2. 0.53 6.58

3. 60 154 194 60 145 179
4. 351 749 789 343 760 803
5. 1183 1555 1635 1211 1582 1653

 1518b-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.95      11.64 
2. 0.97 11.88

3. 60 111 197 60 86 179
4. 252 580 730 240 574 740
5. 469 677 796 438 611 742

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.71       2.13 
2. 0.72 2.15

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.42       4.26 
2. 1.44 4.30

 imix-4t4c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.43       7.26 
2. 2.48 7.41

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.20       2.15 
2. 3.28 2.20

3. 26 93 119 25 48 102
4. 55 137 163 51 123 153
5. 143 177 219 145 183 226

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.91       3.97 
2. 6.18 4.15

3. 25 77 98 25 77 92
4. 82 130 145 77 124 138
5. 121 150 174 113 143 166

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.66       6.49 
2. 9.76 6.56

3. 25 26 39 25 27 39
4. 45 69 80 48 72 81
5. 64 86 98 64 84 100

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  0.86      10.55 
2. 0.86 10.60

3. 29 79 105 29 65 86
4. 115 435 459 75 431 454
5. 404 557 656 365 553 629

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.67      20.50 
2. 1.68 20.71

3. 29 64 90 29 65 84
4. 145 301 345 132 306 353
5. 306 424 499 290 401 485

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.79      34.30 
2. 2.83 34.87

3. 29 44 61 29 41 57
4. 62 97 120 61 82 98
5. 85 131 169 75 104 120

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.95       5.84 
2. 1.97 5.90

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.77      11.26 
2. 3.82 11.43

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.24      18.66 
2. 6.40 19.13

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.06       2.06 
2. 3.09 2.08

3. 26 104 120 26 102 115
4. 38 155 192 42 154 193
5. 140 177 230 151 187 233

 64b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.65       3.80 
2. 5.85 3.93

3. 26 70 134 25 43 90
4. 83 133 154 76 129 149
5. 130 163 198 118 152 180

 64b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.50       6.39 
2. 9.68 6.50

3. 25 27 48 25 33 52
4. 51 73 84 48 76 83
5. 68 91 105 60 80 94

 1518b-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.74       9.12 
2. 0.75 9.17

3. 29 87 106 29 82 104
4. 95 421 487 98 412 467
5. 420 715 824 415 712 816

 1518b-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.46      17.95 
2. 1.47 18.13

3. 29 84 133 29 73 129
4. 182 338 406 145 341 406
5. 325 448 502 327 443 497

 1518b-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.45      30.08 
2. 2.48 30.56

3. 29 54 91 30 45 81
4. 53 134 173 47 115 151
5. 104 151 179 89 130 151

 imix-1t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.79       5.34 
2. 1.80 5.37

 imix-2t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.46      10.36 
2. 3.51 10.51

 imix-4t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.81      17.37 
2. 5.91 17.67

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.71       1.15 
2. 1.73 1.16

3. 29 97 119 29 79 117
4. 76 262 277 79 261 277
5. 216 320 372 232 327 375

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.29       2.21 
2. 3.36 2.26

3. 29 98 164 29 69 162
4. 123 220 268 110 224 272
5. 220 278 329 206 266 318

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.28       2.20 
2. 3.36 2.26

3. 29 87 112 29 51 72
4. 50 91 137 45 68 87
5. 116 161 187 55 97 111

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.34       4.24 
2. 0.35 4.26

3. 68 106 131 68 88 118
4. 209 477 557 209 470 537
5. 721 918 1006 723 915 1011

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.67       8.18 
2. 0.67 8.23

3. 68 200 219 68 115 209
4. 359 775 819 363 775 836
5. 1020 1312 1464 1020 1335 1487

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.72       8.88 
2. 0.73 8.97

3. 68 85 131 68 70 93
4. 185 316 341 70 206 227
5. 373 545 630 161 300 339

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.87       2.60 
2. 0.88 2.62

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.71       5.11 
2. 1.73 5.19

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.79       5.36 
2. 1.82 5.43

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.36       0.91 
2. 1.37 0.92

3. 29 94 119 29 72 117
4. 102 331 358 104 325 352
5. 249 349 446 248 361 453

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.64       1.78 
2. 2.68 1.80

3. 29 95 182 29 81 164
4. 177 265 337 135 247 338
5. 265 334 403 256 331 404

 64b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.64       1.78 
2. 2.68 1.80

3. 29 85 162 29 34 115
4. 114 205 242 31 83 115
5. 182 246 277 82 153 179

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.27       3.37 
2. 0.28 3.39

3. 59 96 119 59 68 86
4. 162 444 523 163 439 491
5. 538 846 915 536 837 879

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.53       6.58 
2. 0.54 6.61

3. 59 171 193 59 88 184
4. 342 753 788 341 756 807
5. 1215 1581 1663 1121 1513 1592

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.57       7.00 
2. 0.57 7.07

3. 59 86 151 60 63 113
4. 224 532 583 60 360 392
5. 664 1023 1121 243 644 741

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.73       2.18 
2. 0.73 2.18

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.45       4.32 
2. 1.45 4.34

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.48       4.43 
2. 1.50 4.50

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.42       2.30 
2. 3.45 2.32

3. 25 86 116 25 72 112
4. 53 126 150 54 121 144
5. 112 153 197 116 160 202

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.42       4.32 
2. 6.51 4.38

3. 26 60 94 26 48 76
4. 50 81 102 48 80 102
5. 59 71 82 58 70 81

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.50       4.37 
2. 6.57 4.42

3. 25 48 80 25 48 76
4. 46 90 105 38 66 82
5. 68 89 102 46 62 73

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  0.87      10.77 
2. 0.88 10.82

3. 29 77 110 29 63 87
4. 107 425 450 63 430 452
5. 376 525 633 347 510 572

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.70      20.95 
2. 1.72 21.16

3. 29 71 94 29 65 95
4. 157 290 320 152 297 326
5. 278 391 462 269 374 452

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.70      20.98 
2. 1.72 21.22

3. 29 77 97 29 40 58
4. 74 193 212 29 76 89
5. 155 237 281 49 86 106

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.04       6.09 
2. 2.05 6.12

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.97      11.87 
2. 4.03 12.05

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.00      11.96 
2. 4.08 12.21

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.25       2.19 
2. 3.29 2.21

3. 25 91 114 25 82 107
4. 51 142 159 52 137 159
5. 122 159 195 131 162 215

 64b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.01       4.04 
2. 6.10 4.10

3. 25 61 90 25 60 81
4. 52 86 102 51 84 96
5. 84 108 127 81 103 123

 64b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.24       4.19 
2. 6.33 4.26

3. 25 48 63 25 42 55
4. 53 104 113 42 76 86
5. 84 104 116 54 73 82

 1518b-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.75       9.26 
2. 0.76 9.31

3. 29 89 106 29 84 107
4. 114 425 448 88 427 447
5. 461 687 782 405 698 804

 1518b-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.49      18.39 
2. 1.51 18.58

3. 29 66 94 29 59 79
4. 146 337 454 139 328 406
5. 308 432 476 309 434 478

 1518b-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.50      18.47 
2. 1.52 18.67

3. 29 44 93 29 33 55
4. 67 254 290 30 112 150
5. 145 258 271 57 128 141

 imix-1t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.86       5.57 
2. 1.87 5.60

 imix-2t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.68      11.01 
2. 3.72 11.12

 imix-4t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.71      11.09 
2. 3.75 11.22

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.46       0.98 
2. 1.48 0.99

3. 29 98 123 29 72 117
4. 91 286 306 95 284 304
5. 233 322 391 229 312 391

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.83       1.90 
2. 2.86 1.92

3. 29 150 207 29 95 201
4. 143 272 303 157 284 315
5. 261 339 433 254 320 397

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  5.29       3.56 
2. 5.48 3.68

3. 30 83 108 30 91 109
4. 99 163 181 103 164 189
5. 136 169 203 140 176 219

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.34       4.15 
2. 0.34 4.15

3. 68 110 132 68 110 130
4. 211 476 544 211 471 519
5. 734 926 1033 749 922 1057

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.64       7.93 
2. 0.65 8.01

3. 68 196 210 69 182 210
4. 366 766 808 353 767 810
5. 1060 1343 1468 1068 1336 1465

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.27      15.60 
2. 1.28 15.75

3. 69 141 223 69 122 213
4. 272 551 628 254 525 623
5. 445 598 783 445 584 696

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.80       2.39 
2. 0.81 2.42

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.59       4.76 
2. 1.61 4.80

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.09       9.26 
2. 3.11 9.30

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.20       0.81 
2. 1.20 0.81

3. 29 93 115 29 77 115
4. 76 412 455 92 392 449
5. 263 404 486 263 402 486

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.26       1.52 
2. 2.29 1.54

3. 29 65 127 29 45 121
4. 76 203 292 68 195 283
5. 201 260 316 196 241 294

 64b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  4.40       2.95 
2. 4.51 3.03

3. 29 108 203 29 94 192
4. 93 169 200 97 174 206
5. 180 206 229 128 195 223

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.27       3.31 
2. 0.27 3.32

3. 60 84 130 60 68 87
4. 169 452 471 170 420 457
5. 543 847 901 529 846 884

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.52       6.41 
2. 0.53 6.48

3. 60 170 193 60 85 182
4. 343 745 782 341 747 798
5. 1200 1584 1692 1165 1551 1695

 1518b-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.02      12.58 
2. 1.03 12.71

3. 60 153 209 60 151 202
4. 349 692 823 257 635 725
5. 489 659 757 504 674 773

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.68       2.02 
2. 0.68 2.03

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.35       4.04 
2. 1.36 4.06

 imix-4t4c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.63       7.86 
2. 2.66 7.94

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.57       1.72 
2. 2.58 1.73

3. 25 90 115 25 68 111
4. 42 132 167 45 122 151
5. 131 188 210 130 194 225

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.68       3.14 
2. 4.79 3.22

3. 25 111 132 25 109 139
4. 76 151 167 75 157 174
5. 166 197 249 155 184 210

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.33       5.60 
2. 8.75 5.88

3. 26 62 88 26 65 87
4. 58 82 93 66 90 104
5. 69 91 113 76 97 122

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  0.80       9.85 
2. 0.82 10.04

3. 29 78 107 29 64 90
4. 106 423 441 112 419 438
5. 444 613 688 416 609 668

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.53      18.88 
2. 1.57 19.36

3. 29 65 105 29 57 86
4. 136 334 392 119 331 389
5. 301 381 446 284 371 427

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.05      37.54 
2. 3.07 37.73

3. 29 48 80 29 47 82
4. 64 119 154 63 118 146
5. 98 116 136 98 119 132

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.69       5.07 
2. 1.71 5.12

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.22       9.63 
2. 3.25 9.73

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.27      18.76 
2. 6.37 19.04

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.45       1.65 
2. 2.48 1.67

3. 26 102 116 26 91 112
4. 48 154 167 54 156 174
5. 142 188 238 142 186 245

 64b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.56       3.06 
2. 4.63 3.11

3. 26 136 164 26 109 159
4. 82 154 174 73 136 168
5. 183 207 243 156 181 207

 64b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.76       5.89 
2. 8.89 5.98

3. 26 64 95 26 58 78
4. 57 87 98 59 90 103
5. 68 85 114 75 89 117

 1518b-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.71       8.71 
2. 0.71 8.75

3. 30 79 91 30 63 85
4. 116 426 448 92 425 446
5. 443 737 771 443 704 763

 1518b-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.38      17.04 
2. 1.40 17.21

3. 29 43 61 29 38 63
4. 208 373 436 199 373 440
5. 293 381 431 288 367 418

 1518b-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.69      33.06 
2. 2.70 33.23

3. 30 50 73 30 49 66
4. 60 143 154 49 145 156
5. 125 160 182 123 160 182

 imix-1t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.56       4.67 
2. 1.57 4.69

 imix-2t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.97       8.89 
2. 3.00 8.98

 imix-4t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.86      17.53 
2. 5.95 17.80

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.94       0.63 
2. 0.94 0.63

3. 30 76 100 30 59 90
4. 67 375 453 85 362 440
5. 283 401 435 280 389 459

 64b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.70       1.14 
2. 1.73 1.16

3. 31 88 113 31 78 114
4. 210 388 439 190 360 426
5. 310 425 498 280 381 465

 64b-4t4c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.02       2.03 
2. 3.06 2.05

3. 31 119 156 31 94 151
4. 91 204 280 78 207 293
5. 198 263 313 185 250 303

 1518b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.30       3.66 
2. 0.30 3.68

3. 70 115 154 70 108 131
4. 208 487 553 206 470 513
5. 782 980 1097 789 971 1117

 1518b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.58       7.18 
2. 0.59 7.25

3. 69 165 212 69 158 211
4. 399 763 810 369 784 870
5. 1192 1587 1705 1184 1565 1714

 1518b-4t4c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.15      14.10 
2. 1.15 14.17

3. 70 153 237 70 145 231
4. 335 688 781 301 662 773
5. 573 753 851 549 720 823

 imix-1t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.58       1.75 
2. 0.59 1.77

 imix-2t2c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.12       3.35 
2. 1.15 3.43

 imix-4t4c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.20       6.58 
2. 2.23 6.68

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.81       0.55 
2. 0.82 0.55

3. 30 87 115 30 67 108
4. 97 423 514 109 407 502
5. 444 662 746 438 631 706

 64b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.48       0.99 
2. 1.50 1.01

3. 30 134 195 30 78 188
4. 213 411 493 172 380 479
5. 428 553 649 323 452 558

 64b-4t4c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.66       1.78 
2. 2.74 1.84

3. 30 90 197 31 74 192
4. 182 300 329 105 220 319
5. 248 318 387 221 295 334

 1518b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.24       2.99 
2. 0.24 3.01

3. 61 86 104 61 64 86
4. 160 451 490 163 430 476
5. 547 847 928 549 843 921

 1518b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.48       5.86 
2. 0.48 5.92

3. 61 165 195 61 85 176
4. 395 739 780 379 735 776
5. 1156 1573 1657 1172 1582 1690

 1518b-4t4c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.94      11.58 
2. 0.94 11.58

3. 61 116 213 61 100 197
4. 401 737 888 378 711 883
5. 622 824 940 591 788 913

 imix-1t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.51       1.53 
2. 0.52 1.55

 imix-2t2c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.98       2.92 
2. 0.99 2.97

 imix-4t4c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.93       5.77 
2. 1.99 5.94

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.28       0.86 
2. 1.29 0.87

3. 26 81 117 26 66 113
4. 28 335 381 42 303 378
5. 239 357 462 236 340 436

 64b-2t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.31       1.55 
2. 2.33 1.56

3. 26 103 192 26 78 177
4. 150 287 363 115 255 330
5. 298 377 468 240 335 443

 64b-4t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.99       2.68 
2. 4.01 2.70

3. 27 104 165 27 71 142
4. 80 147 189 59 113 180
5. 145 195 225 131 181 210

 1518b-1t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  0.60       7.43 
2. 0.61 7.51

3. 30 83 103 30 72 98
4. 102 420 443 108 412 435
5. 442 786 874 432 777 867

 1518b-2t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.13      13.94 
2. 1.14 14.08

3. 30 73 166 30 70 153
4. 241 597 700 209 561 670
5. 452 647 718 434 623 695

 1518b-4t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.16      26.57 
2. 2.16 26.57

3. 30 52 73 31 48 67
4. 110 191 234 103 182 226
5. 182 227 283 170 214 264

 imix-1t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  0.95       2.84 
2. 0.96 2.88

 imix-2t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.74       5.21 
2. 1.77 5.29

 imix-4t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.41      10.20 
2. 3.46 10.35

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-1t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.22       0.82 
2. 1.23 0.83

3. 26 94 115 26 72 112
4. 44 364 424 56 352 412
5. 235 375 471 228 363 438

 64b-2t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.17       1.46 
2. 2.20 1.48

3. 27 127 174 27 69 157
4. 139 315 386 129 310 379
5. 249 350 420 216 312 375

 64b-4t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.89       2.62 
2. 3.93 2.64

3. 27 77 162 27 51 131
4. 68 128 162 57 105 152
5. 154 203 232 131 190 222

 1518b-1t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.54       6.61 
2. 0.54 6.64

3. 31 81 100 31 60 88
4. 109 419 435 114 414 430
5. 466 813 896 453 792 875

 1518b-2t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.04      12.84 
2. 1.05 12.97

3. 31 79 140 31 75 131
4. 342 673 728 291 627 721
5. 553 716 822 525 684 789

 1518b-4t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.98      24.32 
2. 1.98 24.32

3. 31 56 82 31 53 76
4. 102 255 324 101 249 313
5. 193 259 295 182 251 286

 imix-1t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.89       2.66 
2. 0.90 2.69

 imix-2t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.65       4.94 
2. 1.69 5.05

 imix-4t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.22       9.63 
2. 3.29 9.83