3n-hsw-xl710

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.48       0.99 
 2.  1.48       1.00 
  
 3.   30  103  129        30   73  119  
 4.   90  288  310        97  285  301  
 5.  235  325  387       230  316  388  

 64b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.76       1.86 
 2.  2.79       1.87 
  
 3.   29  107  205        29   92  198  
 4.  188  311  326       185  305  324  
 5.  239  310  378       230  302  360  

 1518b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.33       4.10 
 2.  0.34       4.12 
  
 3.   69  108  131        69   89  117  
 4.  208  483  556       213  473  556  
 5.  782  954 1103       796  957 1128  

 1518b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.03 
 2.  0.66       8.07 
  
 3.   68  204  214        68  200  214  
 4.  398  775  812       363  773  812  
 5. 1091 1386 1502      1081 1369 1475  

 imix-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.80       2.39 
 2.  0.81       2.41 

 imix-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.57       4.68 
 2.  1.58       4.73

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.20       0.81 
 2.  1.20       0.81 
  
 3.   29   74   87        29   70   83  
 4.   55  272  337        51  269  338  
 5.  257  368  409       256  348  408  

 64b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.21       1.48 
 2.  2.24       1.50 
  
 3.   29   58   76        29   60   78  
 4.   74  148  200        80  131  175  
 5.  183  212  242       161  208  232  

 1518b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.28 
 2.  0.27       3.30 
  
 3.   60   91  115        60   89  103  
 4.  164  446  506       166  441  502  
 5.  548  853  928       548  848  922  

 1518b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.52       6.42 
 2.  0.52       6.45 
  
 3.   60  166  195        60  156  195  
 4.  352  755  789       348  753  797  
 5. 1186 1560 1642      1162 1581 1670  

 imix-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.67       2.01 
 2.  0.67       2.01 

 imix-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.32       3.96 
 2.  1.33       3.98

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.79       1.20 
 2.  1.79       1.20 
  
 3.   26   65   75        26   44   72  
 4.   48  142  170        59  132  162  
 5.  145  184  227       137  180  229  

 64b-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.31       2.23 
 2.  3.35       2.25 
  
 3.   26   76  149        26   66  128  
 4.   72  144  198        72  149  204  
 5.  155  203  226       139  189  216  

 1518b-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.76       9.37 
 2.  0.77       9.42 
  
 3.   29   86  107        29   82  107  
 4.  110  424  443       100  423  441  
 5.  437  689  774       419  679  767  

 1518b-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.52      18.66 
 2.  1.53      18.85 
  
 3.   29   70  131        29   64  110  
 4.  162  376  453       144  354  443  
 5.  314  433  478       300  422  467  

 imix-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.36       4.06 
 2.  1.37       4.10 

 imix-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.50       7.46 
 2.  2.51       7.50

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.79       1.20 
 2.  1.80       1.21 
  
 3.   26   64   75        26   59   70  
 4.   65  191  227        50  190  207  
 5.  189  257  329       192  258  314  

 64b-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.31       2.22 
 2.  3.31       2.22 
  
 3.   26  112  190        26   92  172  
 4.  103  197  240        97  195  235  
 5.  183  247  289       176  238  286  

 1518b-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.67       8.19 
 2.  0.67       8.23 
  
 3.   30   84  104        30   82  104  
 4.  105  417  447       106  423  442  
 5.  490  788  819       478  740  801  

 1518b-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.32      16.25 
 2.  1.33      16.33 
  
 3.   30   84  178        30   76  169  
 4.  200  479  570       202  482  564  
 5.  413  523  590       396  503  578  

 imix-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.30       3.88 
 2.  1.30       3.90 

 imix-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.37       7.10 
 2.  2.39       7.13

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.49       1.00 
 2.  1.51       1.02 
  
 3.   29  103  122        30   76  115  
 4.   81  267  291        81  275  292  
 5.  282  334  403       289  359  410  

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.84       1.91 
 2.  2.86       1.92 
  
 3.   29  121  204        29   74  131  
 4.  151  276  305       144  269  306  
 5.  253  349  426       245  312  416  

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.14 
 2.  0.34       4.16 
  
 3.   69  110  129        69  107  129  
 4.  214  483  518       215  481  513  
 5.  804  975 1163       809  973 1169  

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.03 
 2.  0.66       8.07 
  
 3.   68  203  213        68  202  213  
 4.  374  775  822       386  791  887  
 5. 1070 1374 1495      1078 1368 1475  

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.82       2.44 
 2.  0.82       2.45 

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.61       4.81 
 2.  1.63       4.86

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.22       0.82 
 2.  1.22       0.82 
  
 3.   29   78   91        29   77   90  
 4.   37  330  379        38  321  380  
 5.  271  370  459       270  372  459  

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.32       1.56 
 2.  2.35       1.58 
  
 3.   29  105  204        29   95  202  
 4.  173  306  337       148  300  333  
 5.  285  331  418       276  329  428  

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.30 
 2.  0.27       3.32 
  
 3.   60   67   98        60   66   98  
 4.  168  453  476       169  434  462  
 5.  549  850  908       550  847  895  

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.52       6.43 
 2.  0.52       6.46 
  
 3.   60  168  196        60   86  184  
 4.  354  748  787       344  748  808  
 5. 1146 1541 1631      1131 1541 1639  

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.68       2.05 
 2.  0.69       2.06 

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.35       4.04 
 2.  1.36       4.08

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.89       1.27 
 2.  1.89       1.27 
  
 3.   45   70  106        45   65   79  
 4.   80  123  148        82  125  150  
 5.  205  250  291       203  237  287  

 64b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.82       1.90 
 2.  2.87       1.93 
  
 3.   45  100  122        45   76  115  
 4.   77  150  177        77  144  173  
 5.  175  234  269       156  218  257  

 1518b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.78      21.91 
 2.  1.80      22.13 
  
 3.   53   90  120        53   80  106  
 4.  102  227  257        90  225  244  
 5.  284  327  363       275  320  348  

 1518b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.74      33.67 
 2.  2.76      34.01 
  
 3.   52   73  113        52   69   97  
 4.  117  135  159        86  135  146  
 5.  198  228  252       166  198  221  

 imix-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.76       5.25 
 2.  1.76       5.28 

 imix-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.72       8.13 
 2.  2.75       8.21

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.86       1.25 
 2.  1.88       1.27 
  
 3.   46   79   95        46   70   95  
 4.   74  156  186        77  154  176  
 5.  226  268  295       218  255  287  

 64b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.84       1.91 
 2.  2.87       1.93 
  
 3.   45  115  155        45   65  153  
 4.  106  222  236       100  217  230  
 5.  171  242  287       164  229  280  

 1518b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.79      22.02 
 2.  1.81      22.24 
  
 3.   54  105  122        54   99  116  
 4.  106  227  255        88  227  245  
 5.  300  340  383       290  338  379  

 1518b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.74      33.68 
 2.  2.75      33.85 
  
 3.   54   69   93        54   67   77  
 4.  104  141  151        97  134  145  
 5.  197  224  242       168  203  227  

 imix-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.76       5.28 
 2.  1.77       5.30 

 imix-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.72       8.13 
 2.  2.75       8.22

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.39       0.26 
 2.  0.39       0.26 
  
 3.   45   76  113        45   69   89  
 4.  117  339  513        94  351  497  
 5. 1913 2667 3153      1915 2699 3117  

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.68       0.46 
 2.  0.68       0.46 
  
 3.   43   82  157        43   81  182  
 4.  257  829 1131       237  803 1127  
 5.  937 1528 1896       884 1451 1785  

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.21       2.55 
 2.  0.21       2.57 
  
 3.   75   89  129        76   88  128  
 4.  220  517  666       212  491  654  
 5. 1367 2117 2911      1425 2371 3053  

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.39       4.81 
 2.  0.40       4.86 
  
 3.   74  146  226        74  133  208  
 4.  392  795 1027       350  753  986  
 5. 1303 1947 2447      1261 1900 2391  

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.32       0.97 
 2.  0.33       0.98 

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.59       1.76 
 2.  0.59       1.78

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.37       0.25 
 2.  0.37       0.25 
  
 3.   43   59  122        43   51   91  
 4.  150  495  683       149  539  688  
 5. 1986 2767 3451      1980 2825 3499  

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.65       0.44 
 2.  0.66       0.44 
  
 3.   45   72  117        45   73  118  
 4.  161  611  848       165  599  877  
 5.  685 1132 1436       742 1230 1514  

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.35       4.25 
 2.  0.35       4.29 
  
 3.   65   74  107        65   70   87  
 4.  346  718  933       332  689  892  
 5. 1203 1823 2263      1158 1778 2201  

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.30       0.90 
 2.  0.30       0.90 

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.55       1.64 
 2.  0.55       1.65

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.34       0.23 
 2.  0.36       0.24 
  
 3.   51   81  116        50   62   89  
 4.   91  267  446        89  268  476  
 5.  725 1531 3073       729 1536 3079  

 64b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.77       0.52 
 2.  0.78       0.52 
  
 3.   50   93  156        50   88  155  
 4.  317 1222 1768       302 1184 1708  
 5. 1508 2259 2675      1461 2209 2615  

 1518b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.34       4.21 
 2.  0.36       4.38 
  
 3.   57   66  121        57   64  120  
 4.  212  648 1000       186  542  782  
 5. 2663 4411 5439      2555 4491 5627  

 1518b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.75       9.27 
 2.  0.76       9.31 
  
 3.   57  128  274        57  119  280  
 4.  449 1173 1645       394 1160 1715  
 5. 1782 2575 2989      1820 2683 3019  

 imix-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.32       0.97 
 2.  0.35       1.04 

 imix-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.71       2.13 
 2.  0.74       2.21

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.34       0.23 
 2.  0.35       0.24 
  
 3.   51   68   98        50   57   80  
 4.  115  430  777       110  378  558  
 5. 1947 3985 5227      1997 4073 5139  

 64b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.74       0.50 
 2.  0.75       0.50 
  
 3.   50   62  186        50   58  162  
 4.  351 1143 1678       278 1048 1564  
 5. 1675 2497 2903      1527 2389 2797  

 1518b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.34       4.16 
 2.  0.35       4.33 
  
 3.   58   65  120        58   64  110  
 4.  211  661 1042       186  545  804  
 5. 2843 4655 5763      2885 4627 5747  

 1518b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.75       9.22 
 2.  0.75       9.26 
  
 3.   58  115  261        58  120  263  
 4.  453 1172 1663       397 1060 1584  
 5. 1771 2615 2963      1747 2599 2993  

 imix-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.32       0.95 
 2.  0.34       1.03 

 imix-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.71       2.12 
 2.  0.75       2.23

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.50       1.01 
 2.  1.51       1.02 
  
 3.   30   83  105        30   56   86  
 4.   75  236  291        73  222  293  
 5.  246  327  407       249  332  435  

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.84       1.91 
 2.  2.87       1.93 
  
 3.   29  115  207        29   99  199  
 4.  141  260  277       138  252  274  
 5.  254  355  426       252  316  419  

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.14 
 2.  0.34       4.16 
  
 3.   69  114  131        69  113  131  
 4.  214  483  520       215  476  516  
 5.  791  961 1119       801  962 1128  

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.03 
 2.  0.66       8.07 
  
 3.   68  204  215        68  116  210  
 4.  374  774  815       366  785  834  
 5. 1084 1377 1495      1083 1366 1476  

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.81       2.43 
 2.  0.82       2.45 

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.61       4.81 
 2.  1.63       4.86

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.22       0.82 
 2.  1.23       0.82 
  
 3.   29   63   93        29   58   92  
 4.  109  236  271       109  236  270  
 5.  254  335  401       255  339  406  

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.32       1.56 
 2.  2.33       1.57 
  
 3.   29   75   87        29   70   84  
 4.  109  229  294       110  230  295  
 5.  207  262  317       204  256  300  

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.30 
 2.  0.27       3.32 
  
 3.   60   95  117        60   68   87  
 4.  165  447  523       167  442  485  
 5.  550  851  899       542  849  886  

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.52       6.42 
 2.  0.53       6.49 
  
 3.   60  167  196        60  157  197  
 4.  350  758  793       345  751  798  
 5. 1208 1580 1658      1216 1582 1664  

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.68       2.04 
 2.  0.69       2.05 

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.35       4.03 
 2.  1.36       4.07

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.85       1.25 
 2.  1.86       1.25 
  
 3.   26   68   97        26   55   80  
 4.   62  187  209        60  186  204  
 5.  196  241  297       195  236  291  

 64b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.47       2.33 
 2.  3.51       2.36 
  
 3.   26   78  171        26   66   94  
 4.  106  200  229       101  194  227  
 5.  187  244  291       175  232  275  

 1518b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.79       9.68 
 2.  0.79       9.73 
  
 3.   29   78   97        29   66   88  
 4.  116  431  448       111  430  447  
 5.  458  657  726       459  662  721  

 1518b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.57      19.37 
 2.  1.58      19.47 
  
 3.   29   70  130        29   66  111  
 4.  150  354  420       150  357  434  
 5.  323  427  483       317  423  480  

 imix-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.39       4.16 
 2.  1.40       4.18 

 imix-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.57       7.70 
 2.  2.60       7.78

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.85       1.24 
 2.  1.86       1.25 
  
 3.   26  100  114        26   92  113  
 4.   54  237  265        67  234  266  
 5.  187  259  336       181  260  328  

 64b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.41       2.29 
 2.  3.46       2.33 
  
 3.   26   60  145        26   48   73  
 4.   88  174  202        76  167  201  
 5.  171  224  265       163  219  253  

 1518b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.68       8.40 
 2.  0.69       8.44 
  
 3.   30   80   98        30   72   93  
 4.  110  424  445       106  419  443  
 5.  476  771  801       474  731  796  

 1518b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.37      16.80 
 2.  1.38      16.97 
  
 3.   30   56   94        30   54   85  
 4.  244  443  541       218  442  539  
 5.  405  516  581       394  509  580  

 imix-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.33       3.97 
 2.  1.34       4.01 

 imix-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.45       7.33 
 2.  2.49       7.44

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.39       0.26 
 2.  0.39       0.26 
  
 3.   46   73  108        46   61   85  
 4.  104  268  409        90  276  373  
 5. 1728 2425 2989      1768 2563 3191  

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.68       0.46 
 2.  0.69       0.46 
  
 3.   47   87  115        46   75  113  
 4.  145  424  633       117  359  595  
 5.  424  757 1102       514  900 1157  

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.21       2.52 
 2.  0.21       2.54 
  
 3.   75   90  118        76   88  115  
 4.  222  506  647       214  488  646  
 5. 1302 1943 2665      1306 2169 2907  

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.40       4.90 
 2.  0.40       4.95 
  
 3.   74  144  207        74   89  154  
 4.  390  786 1022       372  767 1002  
 5. 1351 2020 2561      1403 2093 2661  

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.32       0.97 
 2.  0.33       0.97 

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.59       1.77 
 2.  0.60       1.79

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.37       0.25 
 2.  0.37       0.25 
  
 3.   45   82  109        45   72  103  
 4.  149  444  611       145  435  546  
 5. 1880 2673 3259      1905 2673 3205  

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.66       0.45 
 2.  0.67       0.45 
  
 3.   43   69   95        43   57   72  
 4.  163  446  782       136  413  740  
 5.  519  926 1240       570 1027 1329  

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.18       2.21 
 2.  0.18       2.22 
  
 3.   66   71   72        66   71   72  
 4.  170  476  589       171  428  579  
 5. 1016 1665 2309      1001 1865 2539  

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.34       4.22 
 2.  0.35       4.26 
  
 3.   65  103  154        65   70  132  
 4.  357  721  938       329  711  936  
 5. 1222 1841 2327      1292 1924 2491  

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.30       0.90 
 2.  0.30       0.90 

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.55       1.65 
 2.  0.56       1.66

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.41       0.28 
 2.  0.42       0.28 
  
 3.   41   69   94        40   69   92  
 4.  109  302  444       107  303  450  
 5. 1791 2533 3077      1745 2493 3073  

 64b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.72       0.48 
 2.  0.72       0.48 
  
 3.   35   71   95        35   65   98  
 4.  182  538  752       137  514  763  
 5.  664 1171 1470       502  907 1148  

 1518b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.32       3.88 
 2.  0.32       3.90 
  
 3.   44   62  104        44   49   72  
 4.  130  443  660       133  443  621  
 5. 1415 2345 3239      1514 2451 3259  

 1518b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.57       7.06 
 2.  0.58       7.13 
  
 3.   42  101  223        38   96  216  
 4.  336  865 1183       297  840 1169  
 5. 1212 1863 2325      1107 1701 2155  

 imix-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.39       1.16 
 2.  0.39       1.17 

 imix-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.65       1.96 
 2.  0.66       1.98

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.42       0.28 
 2.  0.42       0.28 
  
 3.   43   76   98        43   65   96  
 4.   99  256  380        92  255  363  
 5. 1825 2535 3055      1832 2607 3217  

 64b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.72       0.49 
 2.  0.73       0.49 
  
 3.   31   54   91        31   42   56  
 4.  161  503  801       124  472  702  
 5.  660 1080 1435       776 1310 1631  

 1518b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.30       3.66 
 2.  0.30       3.66 
  
 3.   44   55   96        44   49   62  
 4.  144  406  587       143  427  584  
 5. 1238 1913 2809      1258 2139 2967  

 1518b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.55       6.82 
 2.  0.56       6.86 
  
 3.   43  103  213        43  100  211  
 4.  316  843 1140       286  824 1142  
 5. 1197 1828 2257      1206 1844 2293  

 imix-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.38       1.13 
 2.  0.38       1.14 

 imix-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.68       2.03 
 2.  0.68       2.04

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.81       1.22 
 2.  1.82       1.22 
  
 3.   30   77   90        30   53   77  
 4.   88  191  214        88  191  215  
 5.  259  311  354       260  310  361  

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  3.59       2.41 
 2.  3.63       2.44 
  
 3.   29  110  193        29   86  128  
 4.  131  221  256       126  220  262  
 5.  200  255  290       200  255  292  

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.35       4.28 
 2.  0.35       4.30 
  
 3.   68  108  131        68   94  119  
 4.  212  486  555       213  485  557  
 5.  791  957 1115       797  956 1120  

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.66       8.17 
 2.  0.67       8.22 
  
 3.   68  198  217        68  115  208  
 4.  361  769  808       365  778  848  
 5. 1007 1310 1477      1029 1328 1494  

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.91       2.71 
 2.  0.91       2.72 

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.78       5.32 
 2.  1.80       5.37

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.42       0.95 
 2.  1.43       0.96 
  
 3.   29  104  118        29   78  117  
 4.  101  318  333       106  324  341  
 5.  237  338  423       236  344  425  

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.80       1.88 
 2.  2.83       1.90 
  
 3.   29  103  161        29  100  158  
 4.   76  193  210        79  193  211  
 5.  177  229  256       176  225  258  

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.28       3.40 
 2.  0.28       3.42 
  
 3.   59   95  115        59   68   87  
 4.  168  448  512       168  446  497  
 5.  549  855  930       548  852  922  

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.56 
 2.  0.54       6.59 
  
 3.   59  169  192        59   86  180  
 4.  344  746  780       340  747  789  
 5. 1174 1545 1629      1198 1565 1644  

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.74       2.23 
 2.  0.75       2.25 

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.47       4.41 
 2.  1.49       4.45

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.88       1.93 
 2.  2.88       1.93 
  
 3.   45   97  126        45   78  114  
 4.   60  157  169        62  158  171  
 5.  176  232  282       175  232  284  

 64b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.78       3.21 
 2.  4.85       3.26 
  
 3.   45  101  116        45   83  112  
 4.   92  137  157        89  135  148  
 5.  136  179  211       128  149  169  

 1518b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.68      32.93 
 2.  2.69      33.09 
  
 3.   52   96  111        52   96  110  
 4.  118  148  160       103  149  161  
 5.  314  344  372       317  348  379  

 1518b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.30      40.61 
 2.  3.30      40.61 
  
 3.   52   62   79        52   59   79  
 4.   75  109  117        76  111  120  
 5.  107  130  142       108  125  143  

 imix-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.66       7.97 
 2.  2.66       7.97 

 imix-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.52      13.52 
 2.  4.59      13.73

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.89       1.94 
 2.  2.89       1.94 
  
 3.   45   96  116        45   77  111  
 4.   60  157  166        61  158  169  
 5.  185  240  285       181  237  287  

 64b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.77       3.21 
 2.  4.85       3.26 
  
 3.   45   90  119        45   87  117  
 4.   91  137  161        70  143  155  
 5.  167  219  243       141  162  182  

 1518b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.68      32.98 
 2.  2.68      32.98 
  
 3.   53   97  116        53   97  114  
 4.   91  152  162        73  157  165  
 5.  298  326  350       302  331  357  

 1518b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.13      38.56 
 2.  3.13      38.56 
  
 3.   56   62   87        53   64   78  
 4.   77  113  123        76  113  118  
 5.  109  123  130       109  121  128  

 imix-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.67       7.98 
 2.  2.67       7.98 

 imix-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.52      13.53 
 2.  4.59      13.73

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  1.72       1.16 
 2.  1.75       1.18 
  
 3.   29  100  129        29   80  128  
 4.   85  267  279        81  268  285  
 5.  263  344  405       270  345  413  

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  3.36       2.26 
 2.  3.39       2.28 
  
 3.   29   94  193        29   94  194  
 4.  117  216  262       110  225  269  
 5.  213  263  337       195  255  297  

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.35       4.25 
 2.  0.35       4.27 
  
 3.   69  108  131        69   90  115  
 4.  217  489  512       216  488  510  
 5.  798  959 1113       796  957 1119  

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.05 
 2.  0.66       8.13 
  
 3.   68  165  187        68  158  179  
 4.  364  763  804       360  770  810  
 5. 1024 1328 1491      1036 1322 1462  

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.89       2.66 
 2.  0.89       2.67 

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  1.71       5.12 
 2.  1.73       5.18

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  1.38       0.92 
 2.  1.38       0.93 
  
 3.   29   98  118        29   78  110  
 4.  106  337  357       110  338  360  
 5.  250  356  441       247  356  447  

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  2.71       1.82 
 2.  2.72       1.83 
  
 3.   29   89  113        29   87  114  
 4.   73  186  208        70  180  203  
 5.  166  209  244       165  205  251  

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.28       3.39 
 2.  0.28       3.40 
  
 3.   60   86  101        60   69   86  
 4.  168  452  514       168  446  497  
 5.  552  864  952       553  861  949  

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.47 
 2.  0.53       6.54 
  
 3.   60  163  194        59   84  182  
 4.  350  742  773       347  742  779  
 5. 1206 1569 1639      1136 1526 1615  

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.73       2.19 
 2.  0.74       2.21 

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  1.43       4.28 
 2.  1.44       4.30

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  3.33       2.24 
 2.  3.37       2.26 
  
 3.   46   93  115        49   71  103  
 4.   80  133  150        78  134  152  
 5.  154  198  230       154  196  232  

 64b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  6.64       4.46 
 2.  6.74       4.53 
  
 3.   47   80  126        45   53   77  
 4.   70  117  127        70  115  125  
 5.  172  202  230       161  189  214  

 1518b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  3.09      38.06 
 2.  3.11      38.25 
  
 3.   52   96  109        52   95  109  
 4.   93  156  165       103  159  172  
 5.  267  288  303       271  290  306  

 1518b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  3.28      40.36 
 2.  3.28      40.36 
  
 3.   52   62   75        52   60   76  
 4.   73  101  106        72  101  107  
 5.   92  113  125        91  110  120  

 imix-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  3.07       9.18 
 2.  3.08       9.22 

 imix-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  6.02      18.01 
 2.  6.11      18.28

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.35       2.25 
 2.  3.37       2.26 
  
 3.   49  105  125        49   73  103  
 4.   75  137  155        70  138  154  
 5.  160  205  230       158  200  233  

 64b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  6.60       4.44 
 2.  6.70       4.50 
  
 3.   45   81  126        45   77  125  
 4.   72  120  130        69  120  129  
 5.  170  200  222       160  189  211  

 1518b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.09      37.98 
 2.  3.11      38.29 
  
 3.   53   96  110        53   96  111  
 4.   95  156  167        99  155  163  
 5.  271  291  306       275  294  309  

 1518b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.14      38.58 
 2.  3.14      38.58 
  
 3.   56   63   85        53   60   80  
 4.   64  105  111        63  104  111  
 5.   96  107  112        95  107  112  

 imix-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.08       9.20 
 2.  3.09       9.25 

 imix-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  6.04      18.07 
 2.  6.10      18.26

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.82       1.22 
 2.  1.83       1.23 
  
 3.   29  100  127        29   80  126  
 4.   72  263  285        72  243  282  
 5.  251  297  378       258  300  362  

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  3.59       2.41 
 2.  3.63       2.44 
  
 3.   29  141  195        29  138  190  
 4.  129  219  249       122  217  250  
 5.  199  256  300       199  252  292  

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.35       4.28 
 2.  0.35       4.30 
  
 3.   68  110  129        68  109  129  
 4.  213  477  525       214  480  535  
 5.  798  967 1112       799  964 1118  

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.66       8.18 
 2.  0.67       8.22 
  
 3.   68  199  219        68  115  208  
 4.  361  768  808       373  779  847  
 5. 1020 1329 1473      1035 1326 1489  

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.90       2.70 
 2.  0.91       2.72 

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.78       5.31 
 2.  1.79       5.36

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.42       0.95 
 2.  1.43       0.96 
  
 3.   29   99  119        29   74  118  
 4.   99  315  330       101  317  334  
 5.  234  349  429       242  349  432  

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.80       1.88 
 2.  2.83       1.90 
  
 3.   29  110  176        29  109  177  
 4.  157  279  302       158  278  303  
 5.  255  327  418       244  320  386  

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.28       3.41 
 2.  0.28       3.43 
  
 3.   59   85  110        59   80   99  
 4.  170  447  477       169  443  473  
 5.  550  852  926       539  858  894  

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.56 
 2.  0.54       6.59 
  
 3.   59  168  195        59   88  183  
 4.  347  754  787       340  752  787  
 5. 1208 1577 1652      1193 1562 1639  

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.74       2.22 
 2.  0.75       2.24 

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.47       4.41 
 2.  1.49       4.45

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.20       1.48 
 2.  2.21       1.49 
  
 3.   25  102  120        25   75  115  
 4.   37  188  201        38  190  206  
 5.  133  218  248       135  223  259  

 64b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.29       2.88 
 2.  4.33       2.91 
  
 3.   25   87  166        25   84  161  
 4.  125  172  193       119  174  195  
 5.  125  187  215       124  173  211  

 1518b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.85      10.45 
 2.  0.85      10.51 
  
 3.   29   82  101        29   68   88  
 4.  112  426  446       113  425  446  
 5.  414  589  687       408  599  690  

 1518b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.63      20.08 
 2.  1.64      20.18 
  
 3.   29   64  107        29   65  106  
 4.  138  313  371       126  320  381  
 5.  307  418  494       305  419  505  

 imix-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.59       4.74 
 2.  1.59       4.77 

 imix-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.09       9.23 
 2.  3.12       9.32

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.19       1.47 
 2.  2.20       1.48 
  
 3.   26   90  118        26   73  119  
 4.   51  198  211        49  201  215  
 5.  134  222  255       140  231  264  

 64b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.25       2.86 
 2.  4.29       2.88 
  
 3.   25   86  180        25   81  142  
 4.  117  182  206        94  194  212  
 5.  125  188  212       134  182  218  

 1518b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.73       8.94 
 2.  0.73       8.99 
  
 3.   30   81  103        30   70   90  
 4.  112  419  440       103  423  445  
 5.  422  729  836       427  733  838  

 1518b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.42      17.50 
 2.  1.43      17.59 
  
 3.   29   65  114        29   63  113  
 4.  191  370  454       177  369  449  
 5.  344  455  538       350  454  512  

 imix-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.50       4.49 
 2.  1.51       4.52 

 imix-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.94       8.78 
 2.  2.95       8.83

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  1.73       1.16 
 2.  1.75       1.17 
  
 3.   30  102  128        30   83  126  
 4.   74  265  276        82  262  275  
 5.  250  343  408       261  351  424  

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  3.35       2.25 
 2.  3.39       2.28 
  
 3.   29  128  212        29  102  196  
 4.  113  213  256       105  222  267  
 5.  211  258  338       202  251  291  

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.24 
 2.  0.35       4.26 
  
 3.   69  107  128        69  107  128  
 4.  197  541  581       195  534  580  
 5.  798  960 1118       802  970 1150  

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.05 
 2.  0.66       8.09 
  
 3.   68  160  210        68  115  200  
 4.  360  759  801       357  759  802  
 5. 1022 1326 1465       992 1289 1441  

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.88       2.64 
 2.  0.89       2.66 

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  1.70       5.10 
 2.  1.73       5.18

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  1.38       0.92 
 2.  1.38       0.93 
  
 3.   29  102  121        29   76  119  
 4.  105  339  364       110  337  357  
 5.  248  351  441       243  350  442  

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  2.58       1.73 
 2.  2.61       1.75 
  
 3.   29  109  208        29   93  202  
 4.  133  239  286       118  233  311  
 5.  250  329  382       250  326  370  

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.28       3.38 
 2.  0.28       3.40 
  
 3.   60   94  113        60   82  100  
 4.  167  449  495       167  446  471  
 5.  550  861  948       550  857  943  

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.47 
 2.  0.53       6.50 
  
 3.   60  153  183        60  157  182  
 4.  348  735  772       343  737  784  
 5. 1151 1533 1621      1174 1552 1631  

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.73       2.20 
 2.  0.74       2.21 

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  1.43       4.28 
 2.  1.44       4.31

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  2.09       1.41 
 2.  2.10       1.41 
  
 3.   26   98  118        26   75  115  
 4.   62  229  253        65  236  258  
 5.  151  230  265       166  245  290  

 64b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  4.12       2.77 
 2.  4.16       2.80 
  
 3.   26   92  170        26   89  170  
 4.  120  210  227       113  210  228  
 5.  145  204  237       147  203  237  

 1518b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.83      10.27 
 2.  0.84      10.32 
  
 3.   29   80   96        29   68   92  
 4.  119  429  457        84  440  462  
 5.  443  599  695       441  601  698  

 1518b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  1.57      19.35 
 2.  1.58      19.45 
  
 3.   29   61  105        29   59  100  
 4.  135  331  395       129  336  404  
 5.  300  387  451       297  386  443  

 imix-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  1.53       4.56 
 2.  1.54       4.61 

 imix-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  3.03       9.06 
 2.  3.06       9.15

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  2.08       1.40 
 2.  2.10       1.41 
  
 3.   26   89  118        26   74  115  
 4.   68  240  258        74  246  266  
 5.  151  233  272       165  243  296  

 64b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  4.11       2.76 
 2.  4.13       2.78 
  
 3.   26   98  175        26   80  159  
 4.  130  208  236       122  207  235  
 5.  150  208  242       151  208  242  

 1518b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.72       8.87 
 2.  0.72       8.92 
  
 3.   30   78   97        30   65   91  
 4.  111  428  451       109  428  451  
 5.  432  742  838       435  741  842  

 1518b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  1.38      16.95 
 2.  1.38      17.03 
  
 3.   30   69  115        30   66  115  
 4.  192  432  519       143  422  496  
 5.  359  469  524       356  472  525  

 imix-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  1.45       4.34 
 2.  1.46       4.36 

 imix-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  2.90       8.68 
 2.  2.93       8.77

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.33       0.89 
 2.  1.33       0.90 
  
 3.   30   95  126        30   74  122  
 4.  114  331  370       113  323  360  
 5.  261  426  467       276  393  450  

 64b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.31       1.55 
 2.  2.34       1.57 
  
 3.   30   68   82        30   60   81  
 4.   99  153  202        86  148  181  
 5.  207  268  296       194  255  290  

 1518b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.31       3.87 
 2.  0.32       3.90 
  
 3.   69  108  132        69   91  115  
 4.  213  489  543       215  469  510  
 5.  805  977 1161       805  979 1154  

 1518b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.62       7.63 
 2.  0.62       7.67 
  
 3.   69  203  223        69  119  211  
 4.  382  772  820       375  771  827  
 5. 1088 1466 1610      1097 1453 1560  

 imix-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.72       2.16 
 2.  0.73       2.19 

 imix-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.40       4.19 
 2.  1.43       4.28

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.05       0.71 
 2.  1.09       0.73 
  
 3.   29   97  116        29   73  111  
 4.   72  397  453        72  413  480  
 5.  257  425  505       260  427  508  

 64b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.00       1.34 
 2.  2.02       1.35 
  
 3.   29   89  111        29   35  102  
 4.  139  279  364       131  251  359  
 5.  166  224  267       152  216  240  

 1518b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.25       3.12 
 2.  0.26       3.15 
  
 3.   60   92  112        60   66   83  
 4.  163  448  485       164  433  475  
 5.  549  851  931       549  839  893  

 1518b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.50       6.19 
 2.  0.51       6.23 
  
 3.   60  154  186        60  153  183  
 4.  464  761  850       445  759  849  
 5. 1167 1575 1653      1165 1578 1646  

 imix-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.61       1.82 
 2.  0.62       1.84 

 imix-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.19       3.56 
 2.  1.21       3.62

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.57       1.05 
 2.  1.58       1.06 
  
 3.   26   71   89        26   62   76  
 4.   50  171  201        53  168  207  
 5.  166  252  273       191  248  282  

 64b-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.86       1.92 
 2.  2.95       1.98 
  
 3.   27   80  153        30   42   69  
 4.   84  202  239        78  193  226  
 5.  166  207  240       155  197  232  

 1518b-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.68       8.33 
 2.  0.68       8.38 
  
 3.   30   75   93        30   62   85  
 4.  108  415  445        98  414  441  
 5.  462  754  796       451  743  786  

 1518b-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.30      16.00 
 2.  1.32      16.22 
  
 3.   30   72  127        30   66  117  
 4.  176  469  569       183  471  565  
 5.  380  493  629       371  480  568  

 imix-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.19       3.56 
 2.  1.21       3.61 

 imix-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.11       6.32 
 2.  2.16       6.45

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.62       1.09 
 2.  1.63       1.09 
  
 3.   26   88  120        26   69  116  
 4.   89  235  302        74  195  220  
 5.  172  285  305       191  280  338  

 64b-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.75       1.84 
 2.  2.79       1.87 
  
 3.   26   57   93        26   52   67  
 4.   59  140  171        61  140  173  
 5.  138  202  250       120  192  245  

 1518b-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.59       7.27 
 2.  0.60       7.34 
  
 3.   30   82  100        30   60   87  
 4.   96  416  439       105  408  430  
 5.  470  796  855       461  788  836  

 1518b-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.13      13.95 
 2.  1.15      14.09 
  
 3.   30   75  129        30   68  125  
 4.  219  590  689       234  595  698  
 5.  469  656  735       460  649  727  

 imix-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.11       3.32 
 2.  1.12       3.35 

 imix-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.04       6.09 
 2.  2.09       6.25

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.03       0.69 
 2.  1.04       0.70 
  
 3.   30   77   89        30   65   79  
 4.  105  259  303       116  226  314  
 5.  281  409  452       291  407  455  

 64b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.82       1.22 
 2.  1.84       1.24 
  
 3.   30   76  131        30   34  117  
 4.  168  357  409       154  350  396  
 5.  265  357  428       240  329  416  

 1518b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.30       3.71 
 2.  0.30       3.73 
  
 3.   69  109  129        69  108  129  
 4.  215  494  521       215  461  513  
 5.  813  988 1185       817  992 1212  

 1518b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.60       7.40 
 2.  0.60       7.44 
  
 3.   69  202  226        69  137  225  
 4.  400  782  833       389  779  827  
 5. 1242 1613 1767      1183 1557 1670  

 imix-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.61       1.83 
 2.  0.62       1.86 

 imix-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.12       3.35 
 2.  1.15       3.43

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.88       0.59 
 2.  0.88       0.59 
  
 3.   30   54   76        30   47   76  
 4.   69  213  306        66  216  232  
 5.  281  395  416       268  390  414  

 64b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.58       1.06 
 2.  1.59       1.07 
  
 3.   30   99  195        30   61  138  
 4.  181  367  422       142  342  409  
 5.  395  525  665       368  501  611  

 1518b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.25       3.01 
 2.  0.25       3.03 
  
 3.   61   86  106        61   65   86  
 4.  163  449  509       163  438  489  
 5.  553  856  941       558  845  923  

 1518b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.49       6.00 
 2.  0.49       6.03 
  
 3.   61  167  196        61   87  186  
 4.  381  751  799       381  742  802  
 5. 1178 1594 1738      1172 1586 1668  

 imix-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.52       1.57 
 2.  0.53       1.59 

 imix-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.96       2.87 
 2.  0.98       2.93

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.40       0.94 
 2.  1.41       0.95 
  
 3.   26   81  116        26   65  110  
 4.   94  314  333        98  299  330  
 5.  213  336  423       199  329  399  

 64b-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.42       1.63 
 2.  2.44       1.64 
  
 3.   26   90  192        26   78  187  
 4.  122  244  301       114  237  290  
 5.  248  313  382       232  305  391  

 1518b-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.62       7.66 
 2.  0.63       7.73 
  
 3.   30   80   97        30   61   85  
 4.  109  426  447       112  421  443  
 5.  431  784  876       429  761  854  

 1518b-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.16      14.32 
 2.  1.17      14.39 
  
 3.   30   70  105        30   62   80  
 4.  184  544  654       216  545  647  
 5.  439  606  662       409  579  650  

 imix-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.99       2.96 
 2.  1.01       3.01 

 imix-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.69       5.05 
 2.  1.75       5.25

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.33       0.90 
 2.  1.35       0.91 
  
 3.   27   50   63        27   49   62  
 4.   67  141  173        49  128  170  
 5.  199  282  317       199  277  310  

 64b-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.27       1.52 
 2.  2.31       1.56 
  
 3.   26   73  129        26   57  116  
 4.   70  196  226        66  177  227  
 5.  212  272  334       183  255  323  

 1518b-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.56       6.84 
 2.  0.56       6.86 
  
 3.   31   86  104        31   79   99  
 4.  106  418  442       111  414  436  
 5.  426  812  871       424  808  870  

 1518b-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.03      12.69 
 2.  1.04      12.85 
  
 3.   31   70  118        31   65   89  
 4.  287  633  702       246  600  692  
 5.  518  673  760       494  661  761  

 imix-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.94       2.82 
 2.  0.95       2.85 

 imix-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.62       4.84 
 2.  1.65       4.94

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.53       1.03 
 2.  1.54       1.04 
  
 3.   29   93  115        29   82  106  
 4.   83  236  307        94  241  313  
 5.  252  313  400       260  315  404  

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.91       1.96 
 2.  2.94       1.98 
  
 3.   29  110  205        29   95  192  
 4.  116  231  257       113  227  251  
 5.  237  319  412       220  303  406  

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.16 
 2.  0.34       4.18 
  
 3.   69  108  131        69   93  119  
 4.  214  484  524       215  476  521  
 5.  801  970 1138       808  974 1155  

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.05 
 2.  0.66       8.09 
  
 3.   68  201  215        68  117  210  
 4.  372  782  828       371  788  841  
 5. 1075 1374 1498      1041 1341 1493  

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.83       2.47 
 2.  0.83       2.48 

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.64       4.89 
 2.  1.65       4.94

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.25       0.84 
 2.  1.26       0.85 
  
 3.   29   62   68        29   49   68  
 4.   74  227  282        70  222  281  
 5.  295  416  498       296  413  477  

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.38       1.60 
 2.  2.41       1.62 
  
 3.   29   95  180        29   89  176  
 4.  158  295  364       153  292  362  
 5.  302  370  465       282  341  435  

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.32 
 2.  0.27       3.34 
  
 3.   60   81  102        60   68   86  
 4.  165  448  528       165  447  523  
 5.  555  853  901       554  849  893  

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.52       6.44 
 2.  0.53       6.48 
  
 3.   59  168  195        59   86  184  
 4.  349  753  787       343  759  808  
 5. 1155 1572 1661      1128 1541 1626  

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.69       2.07 
 2.  0.70       2.08 

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.37       4.10 
 2.  1.39       4.14

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.91       1.28 
 2.  1.92       1.29 
  
 3.   26   90  103        26   88  105  
 4.   42  200  218        48  209  227  
 5.  174  238  316       179  232  305  

 64b-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.57       2.40 
 2.  3.60       2.42 
  
 3.   26   59   87        26   56   87  
 4.   65  100  119        55   91  114  
 5.  116  152  192       104  144  177  

 1518b-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.79       9.75 
 2.  0.80       9.80 
  
 3.   29   83  101        29   65   86  
 4.  115  426  449        83  435  454  
 5.  476  652  718       468  644  711  

 1518b-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.58      19.41 
 2.  1.59      19.50 
  
 3.   29   63   79        29   62   84  
 4.  144  354  422       149  352  426  
 5.  331  416  480       322  412  473  

 imix-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.42       4.24 
 2.  1.43       4.27 

 imix-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.64       7.88 
 2.  2.66       7.96

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.90       1.28 
 2.  1.91       1.28 
  
 3.   26   72   91        26   49   83  
 4.   39  192  232        55  197  241  
 5.  162  218  260       157  212  241  

 64b-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.54       2.38 
 2.  3.59       2.41 
  
 3.   26   84  164        26   79  149  
 4.   87  178  220        81  174  216  
 5.  157  202  232       148  196  226  

 1518b-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.69       8.46 
 2.  0.69       8.51 
  
 3.   30   86  110        30   74  102  
 4.  107  422  465       105  424  445  
 5.  467  742  794       471  746  802  

 1518b-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.38      16.99 
 2.  1.39      17.07 
  
 3.   30   71  111        30   69  114  
 4.  238  441  526       223  435  514  
 5.  395  512  570       388  506  565  

 imix-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.35       4.05 
 2.  1.36       4.07 

 imix-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.52       7.53 
 2.  2.56       7.64

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.66       1.11 
 2.  1.68       1.13 
  
 3.   29  101  129        29   75  123  
 4.   84  286  304        91  287  303  
 5.  252  316  413       259  329  426  

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  3.22       2.16 
 2.  3.26       2.19 
  
 3.   29  114  215        29  106  195  
 4.  141  242  311       113  231  285  
 5.  218  279  323       218  272  309  

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.20 
 2.  0.34       4.22 
  
 3.   69  106  128        69  106  127  
 4.  218  488  533       218  473  512  
 5.  798  970 1130       804  969 1150  

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.66       8.12 
 2.  0.66       8.17 
  
 3.   68  203  215        68  116  209  
 4.  389  770  816       367  783  827  
 5. 1062 1379 1521      1037 1329 1443  

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.86       2.57 
 2.  0.87       2.59 

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.73       5.18 
 2.  1.75       5.24

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.32       0.89 
 2.  1.34       0.90 
  
 3.   29   94  108        29   89  102  
 4.  119  226  268        65  226  253  
 5.  270  361  447       272  370  453  

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.58       1.74 
 2.  2.61       1.76 
  
 3.   29  108  193        29   83  133  
 4.  137  246  315       108  236  269  
 5.  279  358  449       277  352  418  

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.34 
 2.  0.27       3.36 
  
 3.   60   88  118        60   90  101  
 4.  167  448  522       166  441  512  
 5.  547  851  930       547  849  922  

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.50 
 2.  0.53       6.56 
  
 3.   59  168  196        59   86  182  
 4.  346  761  797       345  757  812  
 5. 1177 1556 1642      1205 1574 1654  

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.71       2.13 
 2.  0.72       2.15 

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.44       4.31 
 2.  1.46       4.35

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.02       1.36 
 2.  2.04       1.37 
  
 3.   26   57   62        26   37   57  
 4.   80  126  176        76  119  170  
 5.  173  216  245       172  213  240  

 64b-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.81       2.56 
 2.  3.84       2.58 
  
 3.   26   92  172        26   82  149  
 4.   78  142  175        54  143  179  
 5.  131  175  201       126  166  196  

 1518b-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.81      10.01 
 2.  0.82      10.06 
  
 3.   29   97  113        29   94  111  
 4.  113  430  447       120  427  446  
 5.  449  624  703       439  622  705  

 1518b-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.61      19.82 
 2.  1.62      19.92 
  
 3.   29   67  111        29   65  110  
 4.  139  335  388       131  329  387  
 5.  328  423  515       318  411  500  

 imix-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.47       4.39 
 2.  1.48       4.44 

 imix-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.80       8.37 
 2.  2.84       8.49

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.00       1.35 
 2.  2.03       1.37 
  
 3.   26   86  112        26   64  102  
 4.   96  205  246        58  190  215  
 5.  182  238  279       184  234  275  

 64b-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.70       2.49 
 2.  3.81       2.56 
  
 3.   26   76  128        26   57  110  
 4.   57  104  139        62  113  146  
 5.  120  166  195       118  162  189  

 1518b-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.70       8.66 
 2.  0.71       8.71 
  
 3.   30   84  107        30   71   95  
 4.  111  425  448       103  422  445  
 5.  435  743  830       444  744  792  

 1518b-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.41      17.32 
 2.  1.41      17.40 
  
 3.   29   72  133        29   67  114  
 4.  221  403  474       199  401  468  
 5.  377  484  539       369  475  535  

 imix-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.41       4.20 
 2.  1.41       4.22 

 imix-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.66       7.96 
 2.  2.69       8.04

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.72       1.15 
 2.  1.73       1.16 
  
 3.   39   72   97        41   67   84  
 4.   73  135  158        71  135  161  
 5.  261  320  374       260  321  377  

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  3.32       2.23 
 2.  3.36       2.26 
  
 3.   29  168  210        29  163  210  
 4.   85  160  188        89  163  186  
 5.  120  160  200       119  161  201  

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.23 
 2.  0.35       4.25 
  
 3.   68  110  131        68   94  120  
 4.  220  494  540       221  471  517  
 5.  767  943 1095       778  942 1105  

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.66       8.15 
 2.  0.67       8.19 
  
 3.   68  194  214        68  195  213  
 4.  359  775  811       359  774  827  
 5. 1022 1318 1434      1027 1337 1508  

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.88       2.62 
 2.  0.88       2.63 

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.76       5.26 
 2.  1.77       5.29

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.36       0.91 
 2.  1.37       0.92 
  
 3.   29   95  120        29   72  117  
 4.  107  332  358       111  293  348  
 5.  243  353  444       245  372  443  

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.65       1.78 
 2.  2.68       1.80 
  
 3.   29   84  110        29   58  106  
 4.  114  162  173        50  161  179  
 5.  193  241  278       184  240  278  

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.36 
 2.  0.27       3.38 
  
 3.   59   94  117        59   68   86  
 4.  169  447  465       169  439  460  
 5.  540  847  925       541  843  917  

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.54 
 2.  0.53       6.57 
  
 3.   59  165  193        59   84  180  
 4.  408  739  780       343  749  784  
 5. 1165 1547 1626      1210 1578 1652  

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.72       2.16 
 2.  0.73       2.17 

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.46       4.36 
 2.  1.47       4.40

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.08       1.40 
 2.  2.10       1.41 
  
 3.   25  100  114        25  101  114  
 4.   66  235  254        69  240  256  
 5.  142  228  245       149  233  264  

 64b-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.91       2.63 
 2.  3.97       2.67 
  
 3.   26   96  178        26   78  136  
 4.   90  154  192        56  139  181  
 5.  161  206  234       149  200  221  

 1518b-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.83      10.16 
 2.  0.83      10.21 
  
 3.   29   85  113        29   80  107  
 4.  110  426  443       107  426  445  
 5.  444  607  700       423  605  697  

 1518b-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.62      19.93 
 2.  1.63      20.03 
  
 3.   29   61   82        29   61   81  
 4.  134  326  392       134  335  392  
 5.  312  406  499       309  407  490  

 imix-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.51       4.51 
 2.  1.51       4.53 

 imix-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.91       8.70 
 2.  2.94       8.79

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.06       1.39 
 2.  2.08       1.40 
  
 3.   26   57   71        26   38   57  
 4.   79  122  143        77  126  146  
 5.  153  187  219       157  190  220  

 64b-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.88       2.60 
 2.  3.92       2.63 
  
 3.   26   84   99        26   84   98  
 4.   66  125  162        69  132  170  
 5.  114  144  172       109  143  171  

 1518b-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.71       8.78 
 2.  0.72       8.82 
  
 3.   30   80   95        30   73   88  
 4.  107  421  445        97  424  445  
 5.  438  731  768       445  737  774  

 1518b-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.42      17.44 
 2.  1.42      17.52 
  
 3.   29   65  114        29   63  111  
 4.  210  383  463       192  377  453  
 5.  360  466  537       351  453  524  

 imix-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.44       4.30 
 2.  1.44       4.32 

 imix-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.74       8.20 
 2.  2.78       8.32

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.44       0.97 
 2.  1.46       0.98 
  
 3.   30   70   94        30   64   92  
 4.   86  184  203        90  187  209  
 5.  284  333  392       286  338  403  

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.73       1.84 
 2.  2.77       1.86 
  
 3.   30   90  157        30   46  152  
 4.  170  286  312       167  281  318  
 5.  251  327  433       236  304  373  

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.33       4.12 
 2.  0.34       4.14 
  
 3.   69  109  131        69   89  119  
 4.  213  481  516       215  472  506  
 5.  777  951 1105       785  952 1114  

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.01 
 2.  0.65       8.05 
  
 3.   68  206  216        68  117  211  
 4.  376  771  813       367  783  840  
 5. 1059 1369 1477      1082 1367 1478  

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.80       2.40 
 2.  0.80       2.40 

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.58       4.73 
 2.  1.60       4.77

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.19       0.80 
 2.  1.20       0.80 
  
 3.   30   64   90        30   54   88  
 4.   76  148  182        72  144  157  
 5.  251  333  369       252  330  369  

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.25       1.51 
 2.  2.32       1.56 
  
 3.   29   97  180        29   72  150  
 4.  138  255  292       133  251  289  
 5.  232  305  318       213  296  317  

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.31 
 2.  0.27       3.32 
  
 3.   60   95  115        60   80  101  
 4.  166  448  522       166  442  514  
 5.  559  856  924       548  854  893  

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.52       6.43 
 2.  0.53       6.47 
  
 3.   60  169  198        60  174  195  
 4.  369  743  782       342  752  794  
 5. 1146 1558 1640      1143 1561 1651  

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.68       2.02 
 2.  0.68       2.04 

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.32       3.95 
 2.  1.34       4.01

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.84       1.23 
 2.  1.85       1.24 
  
 3.   26   81  118        26   68  115  
 4.   54  235  263        65  227  264  
 5.  165  252  277       186  255  290  

 64b-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.33       2.24 
 2.  3.38       2.27 
  
 3.   26   75  141        26   53  139  
 4.   61  137  166        56  136  164  
 5.  151  192  224       141  177  213  

 1518b-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.78       9.60 
 2.  0.78       9.65 
  
 3.   29   82   99        29   65   88  
 4.  114  429  449       103  432  449  
 5.  478  662  729       473  661  726  

 1518b-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.56      19.18 
 2.  1.57      19.37 
  
 3.   29   69   99        29   63   85  
 4.  150  360  431       145  356  427  
 5.  335  429  485       317  422  480  

 imix-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.37       4.09 
 2.  1.38       4.11 

 imix-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.51       7.51 
 2.  2.54       7.59

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.80       1.21 
 2.  1.81       1.22 
  
 3.   26   62   76        26   61   74  
 4.   54  137  161        54  131  159  
 5.  199  272  322       200  269  315  

 64b-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.33       2.24 
 2.  3.41       2.29 
  
 3.   26   77  149        26   61  117  
 4.   93  184  215        85  181  210  
 5.  174  220  260       162  211  240  

 1518b-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.68       8.35 
 2.  0.69       8.44 
  
 3.   30   81  106        30   64   89  
 4.  111  427  449       108  421  446  
 5.  482  779  814       481  758  809  

 1518b-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.35      16.55 
 2.  1.36      16.72 
  
 3.   30   63  154        30   57  115  
 4.  121  372  462       152  379  472  
 5.  397  499  563       379  484  556  

 imix-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.31       3.92 
 2.  1.32       3.94 

 imix-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.39       7.15 
 2.  2.43       7.26

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.98       0.66 
 2.  0.98       0.66 
  
 3.   30  102  119        30   71  111  
 4.   46  447  474        56  441  463  
 5.  343  467  557       345  460  556  

 64b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.67       1.12 
 2.  1.69       1.14 
  
 3.   30  144  190        30   81  183  
 4.  211  394  468       160  364  445  
 5.  324  434  500       293  411  476  

 1518b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.30       3.70 
 2.  0.30       3.72 
  
 3.   70  110  130        70   90  115  
 4.  215  494  538       214  481  520  
 5.  864 1053 1298       864 1070 1337  

 1518b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.59       7.30 
 2.  0.60       7.37 
  
 3.   69  189  226        69  124  217  
 4.  408  777  833       394  771  825  
 5. 1251 1610 1756      1210 1582 1724  

 imix-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.59       1.77 
 2.  0.60       1.78 

 imix-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.06       3.17 
 2.  1.08       3.24

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.84       0.56 
 2.  0.84       0.56 
  
 3.   30   70   84        30   69   80  
 4.   74  292  372        85  273  360  
 5.  367  558  625       351  547  574  

 64b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.45       0.98 
 2.  1.48       1.00 
  
 3.   30   98  126        30   89  115  
 4.   53  173  255        52  166  249  
 5.  290  427  448       230  349  432  

 1518b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.24       3.01 
 2.  0.25       3.02 
  
 3.   61   90   99        61   83  100  
 4.  164  444  510       166  443  483  
 5.  563  860  942       565  851  925  

 1518b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.48       5.96 
 2.  0.49       5.99 
  
 3.   61  167  189        61   87  174  
 4.  381  754  797       379  747  787  
 5. 1175 1594 1741      1166 1584 1660  

 imix-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.51       1.53 
 2.  0.52       1.55 

 imix-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.92       2.76 
 2.  0.95       2.84

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.30       0.87 
 2.  1.30       0.87 
  
 3.   27   68   99        27   67   96  
 4.   68  233  256        65  228  251  
 5.  213  335  426       224  330  394  

 64b-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.17       1.46 
 2.  2.19       1.47 
  
 3.   27   76  137        27   59  131  
 4.   80  247  309        72  226  280  
 5.  148  206  248       127  189  220  

 1518b-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.61       7.54 
 2.  0.62       7.62 
  
 3.   30   81  105        30   61   91  
 4.  105  425  446       114  416  437  
 5.  448  792  890       433  758  854  

 1518b-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.13      13.91 
 2.  1.14      14.05 
  
 3.   30   69  119        30   62   92  
 4.  214  567  679       203  530  648  
 5.  436  632  703       403  591  667  

 imix-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.95       2.85 
 2.  0.96       2.87 

 imix-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.60       4.79 
 2.  1.64       4.91

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.25       0.84 
 2.  1.25       0.84 
  
 3.   27   80   90        27   57   88  
 4.   60  182  197        58  179  191  
 5.  199  262  315       199  261  305  

 64b-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.09       1.41 
 2.  2.12       1.42 
  
 3.   27   64  105        27   31   77  
 4.   68  233  298        57  225  281  
 5.  146  220  259       122  200  239  

 1518b-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.55       6.78 
 2.  0.55       6.78 
  
 3.   31   91  108        31   77  100  
 4.  108  420  442       117  423  437  
 5.  447  799  884       444  788  874  

 1518b-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.02      12.49 
 2.  1.02      12.55 
  
 3.   31   70  120        31   60   87  
 4.  247  631  736       238  623  724  
 5.  500  665  754       481  651  736  

 imix-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.90       2.68 
 2.  0.91       2.72 

 imix-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.54       4.62 
 2.  1.58       4.71