3n-hsw-xl710

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.48       1.00 
 2.  1.50       1.01 
  
 3.   30   70  104        30   63   85  
 4.   91  152  201       112  184  226  
 5.  318  387  433       320  378  435  

 64b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.74       1.84 
 2.  2.78       1.87 
  
 3.   30   96  112        33   70  110  
 4.   65  146  187        95  168  184  
 5.  133  163  202       169  217  252  

 1518b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.33       4.09 
 2.  0.33       4.11 
  
 3.   73  107  147        69   98  138  
 4.  230  493  592       258  456  560  
 5.  916 1199 1403       933 1158 1294  

 1518b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       7.95 
 2.  0.65       8.03 
  
 3.   69  117  146        69  156  175  
 4.  336  708  794       324  696  786  
 5.  636  793  904       644  845  929  

 imix-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.80       2.40 
 2.  0.81       2.41 

 imix-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.56       4.67 
 2.  1.58       4.71

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.21       0.81 
 2.  1.21       0.82 
  
 3.   29   77  118        29   63   74  
 4.   94  209  271        99  266  287  
 5.  255  331  368       244  328  375  

 64b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.26       1.52 
 2.  2.29       1.54 
  
 3.   29   88  114        29   85  121  
 4.   70  157  201        81  144  206  
 5.  185  229  278       168  217  258  

 1518b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.29 
 2.  0.27       3.29 
  
 3.   60   79  104        60   74  101  
 4.  172  456  499       129  412  455  
 5.  812 1037 1146       835 1113 1367  

 1518b-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.52       6.41 
 2.  0.52       6.44 
  
 3.   59   88  144        60  108  158  
 4.  275  579  677       311  730  842  
 5.  496  651  768       692  836 1159  

 imix-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.67       2.02 
 2.  0.68       2.03 

 imix-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.31       3.93 
 2.  1.33       3.97

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.07       1.39 
 2.  2.08       1.40 
  
 3.   28   50   81        31   55   77  
 4.   67  103  136        60  114  135  
 5.  155  186  214       156  202  225  

 64b-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.13       2.78 
 2.  4.18       2.81 
  
 3.   26   59   86        25   92  105  
 4.   79  113  129        68  112  128  
 5.  100  120  137       108  140  166  

 1518b-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.77       9.43 
 2.  0.77       9.48 
  
 3.   30   59   80        30   61   77  
 4.   77  263  299       104  227  294  
 5.  320  437  520       314  440  514  

 1518b-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.52      18.72 
 2.  1.54      18.91 
  
 3.   29   57   95        29  112  161  
 4.   94  140  163       102  217  241  
 5.  201  262  307       213  279  326  

 imix-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.44       4.31 
 2.  1.45       4.33 

 imix-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.73       8.18 
 2.  2.77       8.30

40ge2p1xl710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.06       1.39 
 2.  2.08       1.40 
  
 3.   26   96  145        26   75   90  
 4.  112  188  225       112  205  239  
 5.  158  196  227       148  201  226  

 64b-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.07       2.74 
 2.  4.11       2.77 
  
 3.   26   59   81        26   97  120  
 4.   61   98  114        69  113  139  
 5.  101  130  167       104  136  159  

 1518b-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.66       8.12 
 2.  0.67       8.20 
  
 3.   30   58   74        30   53   82  
 4.   90  300  387        67  294  349  
 5.  293  385  449       277  351  427  

 1518b-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.31      16.07 
 2.  1.32      16.24 
  
 3.   30   60   80        30   84  113  
 4.   88  236  302       134  298  353  
 5.  241  305  379       298  343  421  

 imix-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.34       4.01 
 2.  1.35       4.05 

 imix-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.57       7.69 
 2.  2.60       7.77

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.51       1.01 
 2.  1.53       1.03 
  
 3.   30   72  100        30   82  129  
 4.  103  202  218        80  173  202  
 5.  297  358  411       304  355  428  

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.82       1.90 
 2.  2.85       1.92 
  
 3.   30   76  120        29  106  134  
 4.   77  126  155        87  166  185  
 5.  150  182  207       137  169  193  

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.14 
 2.  0.34       4.16 
  
 3.   69   91  115        69  107  117  
 4.  226  461  564       182  574  609  
 5.  850 1093 1306       765 1033 1178  

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.00 
 2.  0.66       8.08 
  
 3.   68  100  115        68  118  208  
 4.  358  655  711       387  657  738  
 5.  588  782  876       623  813  918  

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.82       2.44 
 2.  0.82       2.45 

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.60       4.80 
 2.  1.62       4.85

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.23       0.83 
 2.  1.24       0.84 
  
 3.   29   88  100        29   81  103  
 4.  127  212  244       116  257  306  
 5.  254  338  393       240  337  412  

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.33       1.56 
 2.  2.35       1.58 
  
 3.   29   51   80        32  137  173  
 4.   84  140  170        58  135  186  
 5.  130  168  195       176  230  280  

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.32 
 2.  0.27       3.33 
  
 3.   60   73  121        60   85  114  
 4.  104  387  451        99  470  515  
 5.  627  794  943       502  886  928  

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.47 
 2.  0.53       6.50 
  
 3.   59  128  148        59   79  111  
 4.  339  642  723       361  683  779  
 5.  663  824  929       692  859  940  

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.69       2.05 
 2.  0.69       2.06 

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.36       4.06 
 2.  1.36       4.08

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.95       1.31 
 2.  1.98       1.33 
  
 3.   46   89  128        46   98  119  
 4.  102  158  179       100  182  208  
 5.  210  253  292       207  245  276  

 64b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.87       1.93 
 2.  2.91       1.96 
  
 3.   47   70   94        45   78   95  
 4.   68  103  124        78  132  149  
 5.  178  201  219       118  146  165  

 1518b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.80      22.19 
 2.  1.80      22.19 
  
 3.   53   72   85        53   60   73  
 4.  111  197  220        97  202  222  
 5.  318  370  399       289  337  372  

 1518b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.72      33.51 
 2.  2.77      34.02 
  
 3.   53   72   95        52   89  113  
 4.   75   97  108        77  111  134  
 5.  218  236  250       153  173  191  

 imix-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.80       5.39 
 2.  1.80       5.39 

 imix-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.75       8.23 
 2.  2.78       8.31

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.95       1.31 
 2.  1.97       1.32 
  
 3.   46   88  128        46   94  108  
 4.   99  154  177        91  186  219  
 5.  229  269  304       221  268  315  

 64b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.92       1.96 
 2.  2.94       1.97 
  
 3.   45   68   84        45  105  120  
 4.   85  130  154        61  130  148  
 5.  159  186  206       126  157  173  

 1518b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.81      22.31 
 2.  1.81      22.31 
  
 3.   55   71   92        54   65   76  
 4.  113  189  221       105  199  220  
 5.  330  382  413       303  345  377  

 1518b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.78      34.20 
 2.  2.79      34.37 
  
 3.   57   81  103        54   79  114  
 4.   79  103  117        85  124  139  
 5.  202  223  236       162  200  216  

 imix-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.80       5.39 
 2.  1.80       5.39 

 imix-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.76       8.25 
 2.  2.79       8.33

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.42       0.28 
 2.  0.42       0.28 
  
 3.   45   81  115        45   70  115  
 4.  221  494  652       184  546  787  
 5. 1443 2201 2753      1380 2059 2665  

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.78       0.53 
 2.  0.79       0.53 
  
 3.   43   86  138        43  115  258  
 4.  213  585  920       251  784 1133  
 5.  522  840 1065       605 1106 1352  

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.21       2.63 
 2.  0.22       2.65 
  
 3.   76   97  115        75   87  101  
 4.  253  465  586       184  516  684  
 5. 1375 2063 2841      1391 2277 2933  

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.42       5.18 
 2.  0.42       5.21 
  
 3.   74  131  154        73  145  226  
 4.  281  629  840       339  793 1051  
 5.  765 1126 1370      1151 1736 2117  

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       1.02 
 2.  0.34       1.03 

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.63       1.88 
 2.  0.64       1.90

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.40       0.27 
 2.  0.40       0.27 
  
 3.   43   80  115        42   48   70  
 4.  167  474  668       141  461  704  
 5. 1651 2413 3025      1618 2399 2937  

 64b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.73       0.49 
 2.  0.74       0.49 
  
 3.   43  108  205        42   53  149  
 4.  172  596  886       200  740 1073  
 5.  581 1029 1306       726 1262 1530  

 1518b-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.18       2.27 
 2.  0.19       2.28 
  
 3.   65   71   76        66   70   72  
 4.  259  558  747       251  631  860  
 5. 1170 1703 2213      1156 1819 2495  

 1518b-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.36       4.47 
 2.  0.37       4.51 
  
 3.   65   98  152        65   69  105  
 4.  434  821  978       473  935 1184  
 5. 1118 1633 1986      1202 1780 2279  

 imix-1t1c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.31       0.94 
 2.  0.32       0.95 

 imix-2t2c-ethip4ipsec1000tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.59       1.75 
 2.  0.59       1.76

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.38       0.25 
 2.  0.39       0.26 
  
 3.   50   85  121        50   55   73  
 4.  175  443  674       164  592  815  
 5. 2275 3763 4723      2107 3679 4747  

 64b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.85       0.57 
 2.  0.86       0.57 
  
 3.   50  107  223        49   73  210  
 4.  204  838 1180       246  883 1256  
 5. 1057 1873 2199      1152 1957 2341  

 1518b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.37       4.58 
 2.  0.39       4.77 
  
 3.   58   90  126        58   65  119  
 4.  195  444  626       189  629  826  
 5. 2367 3761 4683      2227 3721 4791  

 1518b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.83      10.20 
 2.  0.83      10.25 
  
 3.   58   92  120        57  139  293  
 4.  170  653 1028       301  977 1476  
 5.  838 1536 1870      1080 1822 2135  

 imix-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.35       1.05 
 2.  0.38       1.13 

 imix-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.79       2.37 
 2.  0.82       2.45

40ge2p1xl710-ethip4ipsec1000tnlhw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.38       0.26 
 2.  0.39       0.26 
  
 3.   51   93  118        50   63  172  
 4.  185  460  683       205  643  853  
 5. 2433 3811 4739      2331 3827 4767  

 64b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.84       0.56 
 2.  0.84       0.57 
  
 3.   50   99  191        50  130  285  
 4.  148  676  925       266  919 1364  
 5.  850 1625 1965      1135 1885 2255  

 1518b-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.38       4.64 
 2.  0.39       4.76 
  
 3.   59   91  122        58   64  113  
 4.  126  476  705       116  490  777  
 5. 2413 3917 4927      2515 3973 4879  

 1518b-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.85      10.49 
 2.  0.86      10.54 
  
 3.   57   91  170        57  114  271  
 4.  236  617  911       271  912 1305  
 5.  849 1565 1842       961 1709 2017  

 imix-1t1c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.35       1.06 
 2.  0.37       1.11 

 imix-2t2c-ethip4ipsec1000tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.81       2.41 
 2.  0.83       2.49

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.51       1.01 
 2.  1.51       1.02 
  
 3.   30   73  102        30   70   90  
 4.   86  194  210        97  181  230  
 5.  262  321  374       265  332  380  

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.80       1.88 
 2.  2.84       1.91 
  
 3.   29   52   87        29  132  175  
 4.   77  147  160        84  169  210  
 5.  153  185  210       157  199  242  

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.13 
 2.  0.34       4.15 
  
 3.   69  118  165        69  106  166  
 4.  387  638  821       370  688  802  
 5.  929 1303 1520       963 1317 1413  

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.03 
 2.  0.66       8.07 
  
 3.   69  112  130        69  202  215  
 4.  265  551  672       297  691  782  
 5.  630  777  863       608  811  915  

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.81       2.42 
 2.  0.82       2.44 

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.61       4.81 
 2.  1.62       4.84

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.23       0.83 
 2.  1.23       0.83 
  
 3.   29   69  104        29   47   61  
 4.  107  228  274        89  231  262  
 5.  257  344  373       245  333  392  

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.34       1.57 
 2.  2.35       1.58 
  
 3.   29  127  165        29  100  140  
 4.   85  126  172       115  185  231  
 5.  137  179  198       164  226  270  

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.30 
 2.  0.27       3.32 
  
 3.   60  100  119        60   68   84  
 4.  207  288  350       130  404  494  
 5.  710  945 1160       649  958 1202  

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.52       6.43 
 2.  0.53       6.50 
  
 3.   60  101  127        60  158  198  
 4.  222  515  621       344  757  837  
 5.  509  652  759       674  817  973  

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.68       2.04 
 2.  0.69       2.06 

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.35       4.03 
 2.  1.36       4.07

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.16       1.45 
 2.  2.17       1.46 
  
 3.   26   78   89        26   78  101  
 4.   81  156  185        70  142  186  
 5.  156  188  223       150  202  228  

 64b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.17       2.80 
 2.  4.21       2.83 
  
 3.   26   64  107        26   57   86  
 4.   60   87   96        68  110  131  
 5.   83   99  122       106  130  154  

 1518b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.79       9.67 
 2.  0.79       9.72 
  
 3.   29   60   93        29   61   76  
 4.   94  195  228       125  303  379  
 5.  288  382  490       279  387  489  

 1518b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.58      19.45 
 2.  1.59      19.54 
  
 3.   29   61   91        29  152  185  
 4.  165  279  303       103  223  247  
 5.  237  292  347       238  294  323  

 imix-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.48       4.43 
 2.  1.49       4.45 

 imix-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.86       8.56 
 2.  2.89       8.65

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.14       1.43 
 2.  2.15       1.44 
  
 3.   26   74  101        26   53   75  
 4.   81  143  166        73  145  184  
 5.  162  203  230       171  221  259  

 64b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.14       2.78 
 2.  4.19       2.81 
  
 3.   26   75  100        26   86  109  
 4.   55   99  113        73  126  141  
 5.   84  103  120       107  134  154  

 1518b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.69       8.43 
 2.  0.69       8.47 
  
 3.   30   89  119        30   63   82  
 4.   55  356  436        88  362  434  
 5.  322  457  572       340  456  540  

 1518b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.37      16.85 
 2.  1.38      17.02 
  
 3.   30   56   87        30  145  186  
 4.  118  226  283       140  294  337  
 5.  276  352  411       285  344  382  

 imix-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.39       4.16 
 2.  1.40       4.20 

 imix-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.68       8.02 
 2.  2.71       8.10

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.42       0.28 
 2.  0.42       0.28 
  
 3.   44   85  116        43   49   76  
 4.  182  489  704       159  545  753  
 5. 1681 2501 3125      1576 2325 2931  

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.78       0.52 
 2.  0.78       0.53 
  
 3.   43   91  171        42   50  145  
 4.  245  754 1051       268  835 1178  
 5.  546 1051 1298       666 1190 1443  

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.21       2.64 
 2.  0.22       2.65 
  
 3.   76  109  149        76   90  108  
 4.  198  445  594       187  467  618  
 5. 1465 2289 3115      1522 2453 3371  

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.42       5.12 
 2.  0.42       5.17 
  
 3.   74  131  162        74   95  146  
 4.  269  556  745       452  914 1170  
 5.  924 1407 1747      1205 1788 2201  

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       1.01 
 2.  0.34       1.02 

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.63       1.88 
 2.  0.64       1.91

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.40       0.27 
 2.  0.40       0.27 
  
 3.   43   75  138        44   65  118  
 4.  241  521  686       226  588  847  
 5. 1708 2437 3067      1678 2503 3113  

 64b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.70       0.47 
 2.  0.71       0.48 
  
 3.   42   87  119        42   51  175  
 4.  140  541  862       254  771 1063  
 5.  621 1056 1299       658 1174 1468  

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.18       2.26 
 2.  0.18       2.27 
  
 3.   65   71   75        66   71   82  
 4.  188  471  559       185  424  568  
 5. 1039 1556 2047      1046 1691 2457  

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.36       4.42 
 2.  0.36       4.46 
  
 3.   64   97  134        65   84  131  
 4.  322  759  979       425  823 1057  
 5. 1183 1791 2261      1167 1725 2151  

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.31       0.94 
 2.  0.31       0.94 

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.59       1.76 
 2.  0.59       1.78

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.46       0.31 
 2.  0.46       0.31 
  
 3.   37   82  114        35   60  110  
 4.  202  480  664       164  506  727  
 5. 1267 1944 2451      1231 1914 2479  

 64b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.85       0.57 
 2.  0.85       0.57 
  
 3.   32   88  173        31   55  164  
 4.  183  600  889       201  660  982  
 5.  451  827 1055       526 1000 1211  

 1518b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.34       4.13 
 2.  0.34       4.15 
  
 3.   41   71  109        43   66  108  
 4.  185  540  748       187  509  668  
 5. 1591 2391 3033      1603 2363 2975  

 1518b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.63       7.76 
 2.  0.64       7.84 
  
 3.   39   72  115        39   51  125  
 4.  274  783 1075       226  741 1028  
 5.  621 1089 1372       663 1134 1421  

 imix-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.42       1.25 
 2.  0.42       1.26 

 imix-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.77       2.32 
 2.  0.78       2.34

40ge2p1xl710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.45       0.30 
 2.  0.45       0.31 
  
 3.   37   74  114        36   53   93  
 4.  234  517  697       217  599  850  
 5. 1587 2199 2671      1686 2431 2903  

 64b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.84       0.56 
 2.  0.85       0.57 
  
 3.   31   91  151        31  100  244  
 4.  151  571  929       154  645 1024  
 5.  403  727  968       547 1074 1316  

 1518b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.31       3.84 
 2.  0.32       3.88 
  
 3.   44   70  115        44   55   88  
 4.  149  481  684       130  456  638  
 5. 1783 2627 3363      1778 2583 3261  

 1518b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.59       7.28 
 2.  0.60       7.35 
  
 3.   43   98  181        39   87  200  
 4.  254  696  933       324  829 1115  
 5.  667 1059 1329       753 1258 1590  

 imix-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.40       1.20 
 2.  0.41       1.22 

 imix-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.76       2.28 
 2.  0.77       2.29

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.82       1.22 
 2.  1.83       1.23 
  
 3.   30   70  105        30   95  116  
 4.   97  175  220        74  181  224  
 5.  260  313  351       268  323  384  

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  3.60       2.42 
 2.  3.62       2.43 
  
 3.   30   71   99        29   99  124  
 4.   65   89  108        93  148  169  
 5.  150  179  203       146  186  209  

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.35       4.27 
 2.  0.35       4.29 
  
 3.   69  108  147        68  100  121  
 4.  262  467  629       231  563  671  
 5.  843 1194 1391       777 1112 1181  

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.67       8.19 
 2.  0.67       8.23 
  
 3.   68  208  223        68  163  195  
 4.  316  649  728       327  672  763  
 5.  523  682  771       589  783  881  

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.90       2.70 
 2.  0.91       2.72 

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.78       5.33 
 2.  1.80       5.38

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.43       0.96 
 2.  1.43       0.96 
  
 3.   29   80  102        29   47   67  
 4.   92  180  225        75  177  235  
 5.  225  276  309       231  290  323  

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.82       1.90 
 2.  2.84       1.91 
  
 3.   29   59   84        29   53   73  
 4.   66   89  103        63  100  134  
 5.  119  150  171       115  143  164  

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.28       3.41 
 2.  0.28       3.43 
  
 3.   59   99  128        59   73   87  
 4.  167  343  448       177  389  465  
 5.  705  969 1090       760 1002 1261  

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.57 
 2.  0.54       6.60 
  
 3.   59  103  139        59  171  197  
 4.  258  564  600       301  703  863  
 5.  522  675  754       695  877  915  

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.75       2.24 
 2.  0.75       2.25 

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.48       4.44 
 2.  1.49       4.46

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.95       1.98 
 2.  2.95       1.98 
  
 3.   45   78  100        45  126  147  
 4.   91  133  152       100  155  177  
 5.  225  257  278       220  258  283  

 64b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.94       3.32 
 2.  5.01       3.37 
  
 3.   49   79   97        45   76   93  
 4.   82   99  109        84  103  113  
 5.  148  169  179       153  170  191  

 1518b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.72      33.44 
 2.  2.73      33.61 
  
 3.   53   93  155        52   78  104  
 4.  106  149  166        98  146  171  
 5.  353  372  389       320  350  369  

 1518b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.29      40.52 
 2.  3.29      40.52 
  
 3.   52   68   90        52   68  108  
 4.   79  114  131        71  106  115  
 5.  112  128  139       111  129  139  

 imix-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.72       8.13 
 2.  2.72       8.13 

 imix-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.66      13.94 
 2.  4.71      14.08

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.93       1.97 
 2.  2.95       1.98 
  
 3.   46   74  103        45   60   75  
 4.  102  173  187       106  170  191  
 5.  233  266  286       229  264  291  

 64b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.96       3.33 
 2.  5.04       3.38 
  
 3.   49   56   81        46   62   83  
 4.   68   86   99        61   84   98  
 5.  155  176  193       154  182  197  

 1518b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.72      33.43 
 2.  2.73      33.60 
  
 3.   54  118  142        54   82  115  
 4.  124  171  189       115  183  201  
 5.  316  337  354       318  343  362  

 1518b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.15      38.72 
 2.  3.15      38.72 
  
 3.   57   87   95        53   64   77  
 4.   88  107  115        73  116  126  
 5.  124  142  151       124  143  151  

 imix-1t1c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.72       8.13 
 2.  2.72       8.13 

 imix-2t2c-ethip4ipsec1tnlhw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.66      13.93 
 2.  4.71      14.07

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  1.73       1.17 
 2.  1.74       1.17 
  
 3.   30   71   87        30  102  123  
 4.   80  210  270       100  183  217  
 5.  278  329  399       276  335  401  

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  3.40       2.28 
 2.  3.43       2.31 
  
 3.   30   82   90        29   52   82  
 4.   82  139  152        94  166  185  
 5.  155  189  223       146  188  223  

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.24 
 2.  0.35       4.26 
  
 3.   69  107  161        69  103  115  
 4.  244  492  553       190  539  616  
 5.  802  966 1105       804  965 1119  

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.66       8.06 
 2.  0.66       8.10 
  
 3.   68  106  110        68  159  203  
 4.  307  675  807       319  693  773  
 5.  541  700  802       550  755  853  

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.88       2.64 
 2.  0.89       2.65 

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  1.71       5.11 
 2.  1.73       5.16

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  1.38       0.93 
 2.  1.38       0.93 
  
 3.   29   95  129        29   73   93  
 4.  115  231  262        96  277  304  
 5.  234  310  345       250  321  363  

 64b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  2.71       1.82 
 2.  2.73       1.83 
  
 3.   29   69   88        29  138  171  
 4.   75  137  150       100  163  208  
 5.  130  158  191       134  167  199  

 1518b-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.28       3.39 
 2.  0.28       3.41 
  
 3.   60  100  130        60   72   91  
 4.  164  449  485       162  425  482  
 5.  884 1110 1231       876 1144 1382  

 1518b-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.48 
 2.  0.53       6.52 
  
 3.   59   99  115        59   70  106  
 4.  262  544  649       339  664  721  
 5.  684  817  913       705  851  911  

 imix-1t1c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.73       2.20 
 2.  0.74       2.22 

 imix-2t2c-ethip4ipsec1tnlhw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  1.43       4.29 
 2.  1.45       4.33

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  3.39       2.28 
 2.  3.41       2.29 
  
 3.   47   76  111        58   80  105  
 4.   72  109  135        81  102  124  
 5.  199  228  252       207  233  258  

 64b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  6.73       4.52 
 2.  6.83       4.59 
  
 3.   45   76   90        45   78   93  
 4.   73   88  100        75   90  101  
 5.  143  160  173       153  170  188  

 1518b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  3.10      38.12 
 2.  3.12      38.42 
  
 3.   52  147  156        52   74   92  
 4.  123  156  166       106  164  181  
 5.  296  320  333       293  317  331  

 1518b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  3.29      40.46 
 2.  3.29      40.46 
  
 3.   52   78  104        52   73   95  
 4.   73   93  123        72  114  126  
 5.   97  119  131        95  113  125  

 imix-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  3.09       9.24 
 2.  3.11       9.29 

 imix-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  6.12      18.30 
 2.  6.21      18.58

40ge2p1xl710-ethip4ipsec1tnlhw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.41       2.29 
 2.  3.43       2.30 
  
 3.   45  117  138        45   75   93  
 4.   90  124  145        86  141  168  
 5.  195  221  248       192  226  261  

 64b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  6.76       4.54 
 2.  6.83       4.59 
  
 3.   46   81   95        45   77   96  
 4.   70   87   96        71   89  100  
 5.  147  164  179       149  167  184  

 1518b-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.08      37.95 
 2.  3.12      38.39 
  
 3.   57   75   95        53   86  106  
 4.   93  127  145        91  118  138  
 5.  280  300  315       279  305  321  

 1518b-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.14      38.61 
 2.  3.14      38.61 
  
 3.   53  112  122        53   60   93  
 4.   73   92  101        75  102  112  
 5.  108  128  138       108  131  141  

 imix-1t1c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.09       9.25 
 2.  3.11       9.30 

 imix-2t2c-ethip4ipsec1tnlhw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  6.12      18.31 
 2.  6.19      18.50

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.82       1.22 
 2.  1.83       1.23 
  
 3.   29   64   74        29   76   96  
 4.   97  154  210        94  169  202  
 5.  268  316  362       275  321  362  

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  3.57       2.40 
 2.  3.61       2.42 
  
 3.   30   61   84        30   67  109  
 4.   76  126  149        79  122  146  
 5.  144  172  193       121  145  162  

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.35       4.25 
 2.  0.35       4.27 
  
 3.   69  121  152        69  103  130  
 4.  216  506  545       229  419  520  
 5.  787 1043 1155       849 1125 1365  

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.67       8.18 
 2.  0.67       8.22 
  
 3.   68  160  211        68  140  157  
 4.  376  645  741       349  703  800  
 5.  503  693  800       551  764  861  

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.90       2.69 
 2.  0.91       2.72 

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.77       5.29 
 2.  1.80       5.37

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.42       0.95 
 2.  1.43       0.96 
  
 3.   29   82   98        29   41   59  
 4.  112  206  264       109  235  291  
 5.  217  274  308       216  279  308  

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.82       1.89 
 2.  2.83       1.90 
  
 3.   29   73  124        29  112  137  
 4.   73  104  123        88  150  184  
 5.  116  143  162       135  168  196  

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.28       3.41 
 2.  0.28       3.43 
  
 3.   60   96  126        60   82   90  
 4.  223  343  418       197  492  597  
 5.  934 1239 1416       956 1325 1548  

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.56 
 2.  0.54       6.60 
  
 3.   59  140  167        59   93  113  
 4.  260  547  624       367  677  772  
 5.  679  873  967       666  852  888  

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.74       2.22 
 2.  0.75       2.24 

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.48       4.42 
 2.  1.49       4.46

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.74       1.84 
 2.  2.77       1.86 
  
 3.   25   78  104        25   38   58  
 4.   83  128  165        76  137  176  
 5.  174  211  240       170  212  239  

 64b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.56       3.07 
 2.  4.59       3.08 
  
 3.   25   42   51        25   39   48  
 4.   34   65  101        67   76   86  
 5.   75   96  112        64   82   97  

 1518b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.85      10.49 
 2.  0.86      10.55 
  
 3.   29   70   81        29   99  122  
 4.  108  294  315        96  234  316  
 5.  260  373  403       285  410  477  

 1518b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.63      20.07 
 2.  1.65      20.28 
  
 3.   29  113  188        29   93  129  
 4.   75  178  199       153  255  301  
 5.  164  219  247       210  272  295  

 imix-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.72       5.16 
 2.  1.73       5.18 

 imix-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.29       9.85 
 2.  3.33       9.95

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.69       1.81 
 2.  2.71       1.82 
  
 3.   26   76   98        26   87  110  
 4.   88  132  184        85  152  185  
 5.  183  204  237       188  211  239  

 64b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.56       3.06 
 2.  4.58       3.08 
  
 3.   25   75   94        26   64   87  
 4.   37   49   59        48   58   66  
 5.   77   99  113        65   85   98  

 1518b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.73       9.02 
 2.  0.74       9.07 
  
 3.   29   57  111        29   45   65  
 4.   89  402  510       138  322  375  
 5.  301  421  493       314  435  526  

 1518b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.42      17.50 
 2.  1.43      17.59 
  
 3.   29   98  131        29   69  107  
 4.   99  226  253       126  274  325  
 5.  202  270  307       246  316  348  

 imix-1t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.61       4.81 
 2.  1.62       4.84 

 imix-2t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.12       9.32 
 2.  3.15       9.41

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  1.73       1.17 
 2.  1.74       1.17 
  
 3.   30  100  118        30  122  153  
 4.  119  182  244        94  204  238  
 5.  269  319  364       275  329  397  

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  3.38       2.27 
 2.  3.40       2.28 
  
 3.   30   83   99        29   96  120  
 4.   69  109  135        68  131  151  
 5.  111  132  147       134  172  208  

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.35       4.25 
 2.  0.35       4.27 
  
 3.   69  111  164        69  106  123  
 4.  266  415  507       253  552  726  
 5.  933 1272 1427       976 1273 1388  

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.06 
 2.  0.66       8.10 
  
 3.   69  109  140        68  202  215  
 4.  280  567  686       357  628  696  
 5.  456  583  657       537  738  838  

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  0.88       2.64 
 2.  0.89       2.66 

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac256sha-ndrpdr 

 1.  1.72       5.13 
 2.  1.73       5.18

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  1.37       0.92 
 2.  1.38       0.93 
  
 3.   29  110  118        29   67  101  
 4.   89  195  206        88  210  258  
 5.  223  277  339       237  297  335  

 64b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  2.71       1.82 
 2.  2.72       1.83 
  
 3.   29   87   99        29   98  142  
 4.   97  167  189       115  171  187  
 5.  127  176  218       146  217  257  

 1518b-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.28       3.39 
 2.  0.28       3.40 
  
 3.   60   89  112        60   85   93  
 4.  276  582  670       266  558  633  
 5.  848 1147 1339       921 1323 1587  

 1518b-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.47 
 2.  0.53       6.53 
  
 3.   59   88  109        59  145  172  
 4.  294  651  740       345  668  756  
 5.  528  728  769       650  800  892  

 imix-1t1c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  0.73       2.20 
 2.  0.74       2.21 

 imix-2t2c-ethip4ipsec1tnlsw-ip4base- 
 policy-aes128cbc-hmac512sha-ndrpdr 

 1.  1.43       4.29 
 2.  1.44       4.31

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  2.57       1.73 
 2.  2.58       1.73 
  
 3.   26   83  100        26  102  131  
 4.   98  163  192        99  170  195  
 5.  125  193  218       182  198  217  

 64b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  4.11       2.76 
 2.  4.15       2.79 
  
 3.   26   54   74        26   38   61  
 4.   52   75   85        57  106  118  
 5.   74   95  112        86  113  133  

 1518b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  0.84      10.28 
 2.  0.84      10.39 
  
 3.   29   57   72        29   71   97  
 4.  126  251  311        77  282  357  
 5.  291  404  473       282  397  449  

 1518b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  1.55      19.07 
 2.  1.57      19.26 
  
 3.   29   64   85        29  115  144  
 4.   75  186  207        94  217  246  
 5.  215  286  317       204  275  304  

 imix-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  1.65       4.94 
 2.  1.66       4.97 

 imix-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes128gcm-ndrpdr 

 1.  3.06       9.15 
 2.  3.07       9.19

40ge2p1xl710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  2.51       1.69 
 2.  2.54       1.70 
  
 3.   26   62  106        26   42   60  
 4.   73  115  160        62  122  165  
 5.  143  184  196       163  217  246  

 64b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  4.11       2.76 
 2.  4.15       2.79 
  
 3.   26   63   75        26   48   95  
 4.   52   84  102        57  102  120  
 5.   80  103  123        82  105  127  

 1518b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.72       8.88 
 2.  0.73       8.92 
  
 3.   30   69   80        30   39   67  
 4.  100  247  318        76  340  419  
 5.  308  412  502       295  451  556  

 1518b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  1.37      16.91 
 2.  1.38      16.99 
  
 3.   30   78  101        30  129  185  
 4.   82  165  187       142  272  321  
 5.  142  195  217       226  285  321  

 imix-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  1.55       4.64 
 2.  1.56       4.67 

 imix-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  2.91       8.72 
 2.  2.93       8.76

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.35       0.91 
 2.  1.36       0.91 
  
 3.   38   66  129        41   91  115  
 4.  115  211  252        90  231  317  
 5.  270  345  421       278  359  454  

 64b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.41       1.62 
 2.  2.42       1.63 
  
 3.   30   93  119        30  162  204  
 4.  106  195  208        85  124  197  
 5.  197  225  270       154  197  227  

 1518b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.31       3.88 
 2.  0.32       3.89 
  
 3.   69  113  142        69  109  170  
 4.  286  499  605       257  598  701  
 5.  862 1207 1433       813 1144 1312  

 1518b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.62       7.64 
 2.  0.62       7.68 
  
 3.   69  115  134        69  191  216  
 4.  337  581  668       355  734  844  
 5.  484  665  775       635  843  980  

 imix-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.72       2.15 
 2.  0.73       2.19 

 imix-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.39       4.16 
 2.  1.44       4.29

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.07       0.72 
 2.  1.09       0.73 
  
 3.   29   67  100        29   77  102  
 4.  143  215  264       126  301  351  
 5.  282  342  423       284  357  438  

 64b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.96       1.32 
 2.  1.98       1.33 
  
 3.   29  162  204        29  151  187  
 4.   94  188  232       132  235  265  
 5.  167  211  244       186  235  268  

 1518b-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.25       3.13 
 2.  0.26       3.14 
  
 3.   60   81  130        60   75   92  
 4.  201  384  431       222  419  494  
 5.  937 1288 1461       952 1355 1541  

 1518b-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.50       6.16 
 2.  0.51       6.22 
  
 3.   60  112  130        60   83  104  
 4.  303  615  674       330  757  870  
 5.  790 1021 1124       693  858 1170  

 imix-1t1c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.61       1.84 
 2.  0.62       1.86 

 imix-2t2c-ethip4ipsec20000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.18       3.53 
 2.  1.20       3.58

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.83       1.23 
 2.  1.84       1.24 
  
 3.   26   71  100        26   72   92  
 4.   92  140  195        72  181  217  
 5.  193  240  296       199  254  302  

 64b-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.38       2.27 
 2.  3.40       2.28 
  
 3.   26   58   96        26  101  130  
 4.   68  107  127        81  147  171  
 5.  138  172  211       125  164  195  

 1518b-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.69       8.45 
 2.  0.69       8.47 
  
 3.   30   57   69        30   50   83  
 4.  118  247  294       116  285  371  
 5.  331  457  542       302  457  535  

 1518b-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.32      16.22 
 2.  1.34      16.47 
  
 3.   29   73   87        29   56   87  
 4.   82  226  257       116  246  301  
 5.  282  346  424       225  272  314  

 imix-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.21       3.62 
 2.  1.24       3.70 

 imix-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.26       6.76 
 2.  2.31       6.90

40ge2p1xl710-ethip4ipsec20000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.77       1.19 
 2.  1.80       1.21 
  
 3.   26   59   66        26   49   84  
 4.   82  137  183        67  162  192  
 5.  181  218  244       176  229  262  

 64b-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.29       2.21 
 2.  3.36       2.26 
  
 3.   26   83  106        26   54  102  
 4.   70  108  135        85  153  186  
 5.  127  156  198       130  182  223  

 1518b-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.59       7.30 
 2.  0.59       7.30 
  
 3.   30   70   76        30   47   69  
 4.  212  385  519       181  547  659  
 5.  423  606  683       456  648  723  

 1518b-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.13      13.91 
 2.  1.15      14.16 
  
 3.   30   61   78        30   58   90  
 4.  161  318  360       149  347  389  
 5.  249  319  358       275  371  423  

 imix-1t1c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.14       3.42 
 2.  1.16       3.47 

 imix-2t2c-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.09       6.25 
 2.  2.13       6.38

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.06       0.71 
 2.  1.06       0.71 
  
 3.   31   99  128        31   69   90  
 4.  125  251  303       100  271  328  
 5.  332  439  495       333  438  549  

 64b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.89       1.27 
 2.  1.91       1.28 
  
 3.   30  103  128        30  115  158  
 4.  139  246  279       137  227  270  
 5.  190  239  279       229  277  355  

 1518b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.30       3.74 
 2.  0.31       3.75 
  
 3.   70  115  170        70  104  115  
 4.  187  418  532       205  416  447  
 5.  843 1039 1245       867 1069 1310  

 1518b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.60       7.41 
 2.  0.61       7.44 
  
 3.   69  119  141        69  157  183  
 4.  389  629  742       397  709  772  
 5.  549  731  820       658  850  971  

 imix-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.62       1.85 
 2.  0.63       1.88 

 imix-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.13       3.38 
 2.  1.15       3.45

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.90       0.60 
 2.  0.90       0.61 
  
 3.   30  111  132        30   69   95  
 4.  143  296  335       123  310  421  
 5.  323  435  524       329  454  549  

 64b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.55       1.04 
 2.  1.56       1.05 
  
 3.   30  105  130        30   50   87  
 4.  158  275  290       141  264  299  
 5.  210  301  351       222  336  385  

 1518b-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.25       3.04 
 2.  0.25       3.04 
  
 3.   61   96  113        61   72   86  
 4.  230  454  491       150  468  575  
 5.  714 1021 1235       755 1059 1299  

 1518b-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.49       6.02 
 2.  0.49       6.08 
  
 3.   60  107  122        60  139  167  
 4.  390  805  856       362  738  808  
 5.  714  924 1137       673  806  922  

 imix-1t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       1.57 
 2.  0.53       1.60 

 imix-2t2c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.99       2.95 
 2.  1.00       3.00

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.44       0.96 
 2.  1.46       0.98 
  
 3.   27   98  142        27   67   96  
 4.   84  140  199        76  197  229  
 5.  195  255  299       196  263  318  

 64b-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.53       1.70 
 2.  2.56       1.72 
  
 3.   26  104  146        26  107  147  
 4.   74  135  166        77  148  176  
 5.  127  157  172       165  204  255  

 1518b-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.63       7.79 
 2.  0.64       7.86 
  
 3.   30   64   80        30   48   63  
 4.  170  291  480       151  475  562  
 5.  420  586  667       430  604  723  

 1518b-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.17      14.42 
 2.  1.20      14.71 
  
 3.   30   81  131        30   92  123  
 4.  104  279  335       155  292  335  
 5.  218  302  344       259  355  402  

 imix-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.02       3.06 
 2.  1.04       3.10 

 imix-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.72       5.15 
 2.  1.76       5.25

40ge2p1xl710-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.41       0.94 
 2.  1.42       0.95 
  
 3.   26  120  150        26   65   92  
 4.  107  214  243       117  216  246  
 5.  212  270  314       212  275  325  

 64b-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.47       1.66 
 2.  2.55       1.72 
  
 3.   26   88  117        26   92  130  
 4.  103  167  207        71  159  185  
 5.  108  132  185        99  161  183  

 1518b-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.56       6.91 
 2.  0.56       6.95 
  
 3.   31   67   88        31   57   70  
 4.  216  327  433       203  520  589  
 5.  429  600  730       458  630  690  

 1518b-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.06      13.05 
 2.  1.06      13.05 
  
 3.   30  102  123        30  107  135  
 4.  178  332  397       157  363  413  
 5.  320  418  508       314  398  463  

 imix-1t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.95       2.84 
 2.  0.96       2.88 

 imix-2t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.66       4.96 
 2.  1.69       5.06

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.54       1.03 
 2.  1.54       1.04 
  
 3.   30  104  120        30   65   99  
 4.   90  188  202       108  214  234  
 5.  258  326  385       264  337  389  

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.92       1.96 
 2.  2.93       1.97 
  
 3.   29   91  127        29  107  164  
 4.   73  127  154        97  148  174  
 5.  185  223  269       156  201  240  

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.14 
 2.  0.34       4.16 
  
 3.   69  115  178        69  105  133  
 4.  224  500  535       228  490  554  
 5.  745  990 1158       788 1010 1223  

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.05 
 2.  0.66       8.10 
  
 3.   68  114  136        68  120  147  
 4.  279  600  694       360  713  817  
 5.  576  768  857       614  780  885  

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.83       2.47 
 2.  0.83       2.48 

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.64       4.89 
 2.  1.65       4.94

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.25       0.84 
 2.  1.26       0.84 
  
 3.   29  108  130        29   54   78  
 4.   88  212  261       101  192  241  
 5.  275  335  385       267  340  397  

 64b-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.39       1.61 
 2.  2.43       1.63 
  
 3.   29   87  102        29  141  197  
 4.  109  214  227       100  200  214  
 5.  180  216  247       126  181  207  

 1518b-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.31 
 2.  0.27       3.33 
  
 3.   60   95  101        60   71   85  
 4.  154  448  473       229  382  414  
 5.  623  932 1061       662  865 1104  

 1518b-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.48 
 2.  0.53       6.51 
  
 3.   59  168  197        59  120  151  
 4.  352  684  766       283  647  723  
 5.  639  783  981       619  790  908  

 imix-1t1c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.69       2.07 
 2.  0.70       2.08 

 imix-2t2c-ethip4ipsec400tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.37       4.09 
 2.  1.39       4.16

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.22       1.49 
 2.  2.23       1.50 
  
 3.   26   61   86        26   38   49  
 4.   82  142  202        78  166  194  
 5.  155  186  224       146  196  223  

 64b-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.19       2.81 
 2.  4.23       2.84 
  
 3.   26   56   66        25   97  116  
 4.   77  111  128        61  117  133  
 5.  101  128  147        85  115  150  

 1518b-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.79       9.74 
 2.  0.80       9.79 
  
 3.   29   51   70        29   65   91  
 4.   88  337  379       115  314  401  
 5.  330  421  508       316  442  562  

 1518b-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.58      19.47 
 2.  1.59      19.57 
  
 3.   29   77  113        29  107  189  
 4.  166  274  296       166  281  308  
 5.  202  243  268       236  298  338  

 imix-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.50       4.49 
 2.  1.52       4.54 

 imix-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.94       8.78 
 2.  2.98       8.91

40ge2p1xl710-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.19       1.47 
 2.  2.20       1.48 
  
 3.   26   61   77        26   48   73  
 4.   50   96  125        66  114  142  
 5.  149  189  218       157  192  217  

 64b-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.19       2.81 
 2.  4.23       2.84 
  
 3.   26   80  107        25   95  112  
 4.   68  106  117        74  109  115  
 5.   89  114  137        77   94  108  

 1518b-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.69       8.47 
 2.  0.70       8.56 
  
 3.   30   82  103        30   43   56  
 4.  107  309  377        86  376  408  
 5.  318  455  521       301  442  528  

 1518b-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.38      16.98 
 2.  1.39      17.07 
  
 3.   29   75  108        29  114  140  
 4.   91  200  248       102  231  295  
 5.  243  296  330       247  303  336  

 imix-1t1c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.42       4.24 
 2.  1.42       4.26 

 imix-2t2c-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.76       8.26 
 2.  2.79       8.34

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.66       1.12 
 2.  1.67       1.12 
  
 3.   30  105  119        30   75   95  
 4.   80  167  185       102  209  253  
 5.  266  325  372       279  339  409  

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  3.19       2.14 
 2.  3.22       2.16 
  
 3.   29   68   96        29   73   90  
 4.   70   95  110        87  145  160  
 5.  155  188  219       138  176  219  

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.19 
 2.  0.34       4.21 
  
 3.   69  108  153        69  117  187  
 4.  265  510  543       200  517  612  
 5.  929 1167 1335       904 1190 1367  

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.66       8.13 
 2.  0.66       8.17 
  
 3.   68  164  187        68  175  188  
 4.  280  617  724       369  705  796  
 5.  489  638  732       620  829  929  

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.86       2.57 
 2.  0.86       2.58 

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.73       5.16 
 2.  1.74       5.22

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.32       0.89 
 2.  1.34       0.90 
  
 3.   29  123  151        29   72   93  
 4.  100  201  241       121  262  315  
 5.  260  326  421       262  338  403  

 64b-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.57       1.73 
 2.  2.60       1.75 
  
 3.   29   87  119        29  134  181  
 4.  102  186  211        91  163  192  
 5.  172  183  220       144  179  233  

 1518b-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.36 
 2.  0.27       3.38 
  
 3.   60   94  124        60   88   94  
 4.  247  466  503       189  521  601  
 5.  829 1174 1380       778 1095 1254  

 1518b-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.53 
 2.  0.53       6.56 
  
 3.   59  167  200        59  100  116  
 4.  286  653  776       341  733  826  
 5.  558  749  784       711  830  921  

 imix-1t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.72       2.14 
 2.  0.72       2.15 

 imix-2t2c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.44       4.31 
 2.  1.46       4.36

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.45       1.65 
 2.  2.47       1.66 
  
 3.   26   60   73        26   92  119  
 4.   78  115  181        90  159  187  
 5.  145  209  232       164  222  243  

 64b-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.42       2.97 
 2.  4.46       3.00 
  
 3.   25   56   82        25   85  115  
 4.   54   75   93        64   87  108  
 5.   91  118  139        90  115  132  

 1518b-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.82      10.09 
 2.  0.82      10.14 
  
 3.   29   80  103        29   50   81  
 4.  102  272  307        92  372  447  
 5.  285  364  420       286  381  452  

 1518b-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.62      19.93 
 2.  1.63      20.03 
  
 3.   29   52   74        29  116  154  
 4.   93  171  210       106  223  250  
 5.  219  281  308       233  288  325  

 imix-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.58       4.74 
 2.  1.60       4.79 

 imix-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.22       9.63 
 2.  3.25       9.73

40ge2p1xl710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.40       1.62 
 2.  2.42       1.62 
  
 3.   26   73   96        26   41   56  
 4.   81  106  120        85  156  180  
 5.  154  205  230       157  198  231  

 64b-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.41       2.97 
 2.  4.44       2.98 
  
 3.   26   69  109        25   77  100  
 4.   52   90  106        90  120  132  
 5.   75   92  105        93  119  138  

 1518b-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.71       8.70 
 2.  0.71       8.75 
  
 3.   30   59   74        30   52   76  
 4.  116  227  264       118  269  340  
 5.  385  508  604       396  535  607  

 1518b-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.41      17.29 
 2.  1.41      17.38 
  
 3.   29  137  157        29  148  184  
 4.  113  231  281       136  282  315  
 5.  258  328  372       256  337  377  

 imix-1t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.48       4.44 
 2.  1.51       4.50 

 imix-2t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.95       8.81 
 2.  2.99       8.94

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.80       1.21 
 2.  1.81       1.22 
  
 3.   34   58   67        33  105  125  
 4.  118  221  260       119  209  278  
 5.  270  328  376       278  342  404  

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  3.55       2.39 
 2.  3.59       2.41 
  
 3.   29  103  143        29  115  166  
 4.   74  128  147        87  147  172  
 5.  155  187  212       155  189  224  

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.24 
 2.  0.35       4.26 
  
 3.   69  131  173        69  120  145  
 4.  275  435  508       282  513  632  
 5.  929 1253 1448       945 1263 1387  

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.66       8.16 
 2.  0.67       8.20 
  
 3.   68  101  116        68  115  203  
 4.  354  605  664       368  632  694  
 5.  458  600  692       580  756  839  

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.90       2.68 
 2.  0.90       2.69 

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.77       5.29 
 2.  1.79       5.34

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.41       0.95 
 2.  1.42       0.96 
  
 3.   29   85   99        29   41   60  
 4.   82  200  224        85  199  253  
 5.  220  293  330       228  296  325  

 64b-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.80       1.88 
 2.  2.82       1.89 
  
 3.   29  113  136        28   88  118  
 4.   79  137  192        89  170  188  
 5.  152  180  205       164  207  253  

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.28       3.39 
 2.  0.28       3.41 
  
 3.   59   96  130        59   74   90  
 4.  168  474  504       130  400  460  
 5.  742 1007 1178       810 1092 1368  

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.53       6.55 
 2.  0.54       6.61 
  
 3.   59  131  167        59   83  112  
 4.  231  523  628       335  710  818  
 5.  531  697  803       704  886  920  

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.74       2.22 
 2.  0.75       2.24 

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.47       4.40 
 2.  1.49       4.44

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.72       1.83 
 2.  2.74       1.84 
  
 3.   26  109  138        26   45   62  
 4.   72  103  140        67  122  152  
 5.  170  219  243       173  202  240  

 64b-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.54       3.05 
 2.  4.58       3.08 
  
 3.   25   48   60        25   62   80  
 4.   66   81   86        97  115  121  
 5.   76   99  112        77   98  113  

 1518b-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.85      10.43 
 2.  0.85      10.49 
  
 3.   29   72  106        29   81   94  
 4.  102  197  255        81  295  326  
 5.  221  291  392       230  340  364  

 1518b-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.64      20.12 
 2.  1.64      20.22 
  
 3.   29   92  126        29  108  139  
 4.  120  212  243       108  218  294  
 5.  200  263  297       211  269  302  

 imix-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.70       5.09 
 2.  1.73       5.17 

 imix-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.30       9.86 
 2.  3.31       9.91

40ge2p1xl710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.67       1.79 
 2.  2.68       1.80 
  
 3.   26   84  121        26   86  124  
 4.   72  142  167        77  137  164  
 5.  157  208  246       120  193  212  

 64b-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.54       3.05 
 2.  4.57       3.07 
  
 3.   25   43   55        25   44   59  
 4.   67   81   91        28   41   51  
 5.   73   97  107        68   90  103  

 1518b-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.73       8.93 
 2.  0.73       8.97 
  
 3.   29   55   82        29   77   94  
 4.   68  392  511       120  306  390  
 5.  336  461  543       365  490  606  

 1518b-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.42      17.47 
 2.  1.43      17.56 
  
 3.   29   65   91        29  109  148  
 4.   85  190  229       135  268  290  
 5.  133  176  204       225  289  335  

 imix-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.59       4.76 
 2.  1.61       4.81 

 imix-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.12       9.33 
 2.  3.15       9.42

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.49       1.00 
 2.  1.49       1.00 
  
 3.   30  104  117        30   95  165  
 4.   95  178  219       104  223  261  
 5.  248  318  357       251  324  353  

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  2.74       1.84 
 2.  2.74       1.84 
  
 3.   30   73   91        29   79   99  
 4.   66   91  113        86  165  185  
 5.  115  139  155       162  198  235  

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.34       4.13 
 2.  0.34       4.15 
  
 3.   69  121  175        69  113  179  
 4.  230  552  593       239  533  580  
 5.  790 1036 1228       848 1127 1362  

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.65       8.02 
 2.  0.65       8.06 
  
 3.   68   99  133        68  162  176  
 4.  308  558  633       321  675  778  
 5.  440  564  657       585  792  894  

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.81       2.41 
 2.  0.81       2.43 

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.58       4.72 
 2.  1.59       4.75

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.21       0.82 
 2.  1.22       0.82 
  
 3.   29   90  142        29   77   96  
 4.  142  211  267       138  307  392  
 5.  242  313  366       254  327  378  

 64b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.28       1.53 
 2.  2.30       1.55 
  
 3.   29  114  148        29  149  190  
 4.   58  141  172       131  208  250  
 5.  179  229  290       158  206  260  

 1518b-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.27       3.30 
 2.  0.27       3.32 
  
 3.   60   95  108        60   84  131  
 4.  193  488  530       216  467  563  
 5.  569  880  952       631  864  919  

 1518b-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.52       6.45 
 2.  0.53       6.48 
  
 3.   60  171  198        60  169  197  
 4.  313  683  759       316  703  809  
 5.  641  819  944       662  832  928  

 imix-1t1c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.68       2.03 
 2.  0.68       2.04 

 imix-2t2c-ethip4ipsec5000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.34       3.99 
 2.  1.34       4.01

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.11       1.42 
 2.  2.12       1.42 
  
 3.   26   60   80        26   50   73  
 4.   71  142  164        63  134  174  
 5.  152  188  216       158  199  225  

 64b-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.15       2.79 
 2.  4.15       2.79 
  
 3.   26   90  122        26   46   72  
 4.   56   94  111        71  116  137  
 5.  101  123  143        94  118  140  

 1518b-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.78       9.62 
 2.  0.79       9.67 
  
 3.   29   72   86        29   63   90  
 4.  106  201  255       102  306  376  
 5.  331  430  509       323  448  535  

 1518b-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.55      19.12 
 2.  1.58      19.41 
  
 3.   29   60   88        29   81  111  
 4.   96  208  223       139  262  286  
 5.  244  310  336       234  307  331  

 imix-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.46       4.37 
 2.  1.47       4.39 

 imix-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.79       8.33 
 2.  2.81       8.42

40ge2p1xl710-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.08       1.40 
 2.  2.10       1.41 
  
 3.   26   99  114        26   55   80  
 4.  105  196  239       105  195  245  
 5.  153  203  232       157  211  242  

 64b-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.10       2.76 
 2.  4.14       2.78 
  
 3.   26   61   94        25   49   66  
 4.   66   99  119        63  103  124  
 5.  109  137  161       103  125  147  

 1518b-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.68       8.38 
 2.  0.68       8.42 
  
 3.   30   58   64        30   86   95  
 4.  152  385  448       102  442  538  
 5.  398  558  661       413  573  647  

 1518b-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.35      16.66 
 2.  1.36      16.74 
  
 3.   30   96  136        30   89  192  
 4.  139  251  306       135  285  350  
 5.  207  262  313       252  316  351  

 imix-1t1c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.37       4.10 
 2.  1.38       4.12 

 imix-2t2c-ethip4ipsec5000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.62       7.83 
 2.  2.65       7.91

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.00       0.67 
 2.  1.00       0.67 
  
 3.   31   72  106        31  101  130  
 4.  160  282  387       135  322  413  
 5.  327  429  500       323  426  531  

 64b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.77       1.19 
 2.  1.77       1.19 
  
 3.   31   93  111        30   90  119  
 4.  105  223  261       131  249  284  
 5.  188  244  280       181  247  273  

 1518b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.30       3.68 
 2.  0.30       3.70 
  
 3.   70  104  139        70  104  120  
 4.  221  534  585       281  487  567  
 5.  752 1022 1234       853 1149 1378  

 1518b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.60       7.34 
 2.  0.60       7.41 
  
 3.   69  109  128        69   92  129  
 4.  274  589  677       280  599  716  
 5.  577  743  837       474  581  649  

 imix-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  0.60       1.78 
 2.  0.60       1.81 

 imix-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac256sha-ndrpdr 

 1.  1.07       3.20 
 2.  1.10       3.28

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.86       0.58 
 2.  0.86       0.58 
  
 3.   30  101  120        30   51   74  
 4.  146  342  380       143  392  505  
 5.  305  413  493       317  423  509  

 64b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.53       1.02 
 2.  1.54       1.03 
  
 3.   30   97  115        30  110  138  
 4.  111  218  262       135  259  284  
 5.  214  271  293       217  291  340  

 1518b-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.25       3.02 
 2.  0.25       3.03 
  
 3.   61   93  101        61   73  109  
 4.  159  498  533       178  439  520  
 5.  655  952 1036       756 1058 1312  

 1518b-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.49       6.01 
 2.  0.49       6.07 
  
 3.   60  106  120        60  118  144  
 4.  286  665  739       368  747  853  
 5.  678  883  996       802 1060 1318  

 imix-1t1c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.52       1.55 
 2.  0.52       1.56 

 imix-2t2c-ethip4ipsec60000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.93       2.79 
 2.  0.97       2.91

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.34       0.90 
 2.  1.35       0.91 
  
 3.   27  115  136        27   68   93  
 4.  117  214  253        94  283  326  
 5.  231  314  351       225  298  364  

 64b-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.33       1.57 
 2.  2.36       1.59 
  
 3.   26   85  117        26   74   97  
 4.   76   94  128        59   89  114  
 5.  132  171  189       111  166  196  

 1518b-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.62       7.68 
 2.  0.63       7.76 
  
 3.   30   67   82        30   38   54  
 4.  116  272  339       110  272  332  
 5.  422  574  655       404  564  717  

 1518b-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.15      14.20 
 2.  1.17      14.34 
  
 3.   30   59   72        30   82  112  
 4.   59  233  273       177  307  373  
 5.  221  302  345       268  354  402  

 imix-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.98       2.92 
 2.  0.99       2.95 

 imix-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.63       4.89 
 2.  1.67       4.99

40ge2p1xl710-ethip4ipsec60000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.32       0.89 
 2.  1.33       0.89 
  
 3.   27   72   98        27   61   79  
 4.  107  222  255        94  219  275  
 5.  227  304  361       200  276  361  

 64b-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.31       1.55 
 2.  2.33       1.57 
  
 3.   26   94  115        26   31   55  
 4.   86  126  139        72  150  183  
 5.  148  189  210       128  179  203  

 1518b-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.56       6.87 
 2.  0.56       6.91 
  
 3.   31   64  100        31   71   95  
 4.   66  433  504       149  295  388  
 5.  319  454  505       329  421  541  

 1518b-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.04      12.75 
 2.  1.04      12.85 
  
 3.   31   68   88        31  103  128  
 4.  165  337  382       187  355  409  
 5.  285  399  498       306  407  532  

 imix-1t1c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.92       2.75 
 2.  0.93       2.79 

 imix-2t2c-ethip4ipsec60000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.57       4.70 
 2.  1.60       4.77