3n-skx-xxv710

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.53       1.70 
2. 2.58 1.73

3. 23 63 74 23 31 70
4. 46 78 102 55 102 144
5. 122 173 194 123 156 172

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.85      10.45 
2. 0.86 10.55

3. 50 58 109 53 160 190
4. 192 304 335 237 527 586
5. 394 462 524 460 556 627

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.64       4.90 
2. 1.65 4.94

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.24       1.51 
2. 2.29 1.54

3. 22 54 76 22 28 89
4. 26 77 91 31 111 142
5. 121 155 171 90 116 135

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.73       9.01 
2. 0.74 9.14

3. 45 50 112 42 50 71
4. 91 234 288 125 408 498
5. 341 424 468 429 558 662

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.54       4.61 
2. 1.57 4.68

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.62       2.43 
2. 3.65 2.45

3. 19 33 67 19 26 36
4. 39 60 78 41 82 110
5. 90 116 144 81 104 127

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.59       4.43 
2. 6.72 4.52

3. 19 30 41 19 30 38
4. 39 61 76 35 48 56
5. 79 99 115 69 84 97

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.72       8.55 
2. 13.05 8.77

3. 20 35 48 19 36 46
4. 38 56 74 33 43 52
5. 90 123 149 72 87 101

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.52      18.74 
2. 1.52 18.74

3. 23 55 64 23 73 85
4. 60 123 136 73 164 192
5. 174 251 291 153 216 243

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.80      34.45 
2. 2.80 34.45

3. 24 38 55 23 25 51
4. 41 103 124 50 67 81
5. 102 118 129 85 104 117

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.66       7.96 
2. 2.70 8.09

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.95      14.80 
2. 5.07 15.18

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.31      27.83 
2. 9.49 28.40

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.49       2.34 
2. 3.50 2.35

3. 19 56 63 19 48 56
4. 40 61 75 43 80 107
5. 84 108 122 76 101 127

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.32       4.25 
2. 6.42 4.31

3. 19 28 45 19 20 30
4. 41 69 83 32 47 64
5. 84 104 122 62 75 87

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 11.67       7.85 
2. 12.09 8.12

3. 25 36 47 19 35 49
4. 34 44 52 34 43 50
5. 73 89 102 58 69 78

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.22      15.07 
2. 1.25 15.37

3. 24 55 86 23 50 59
4. 74 165 212 26 107 118
5. 163 207 239 170 228 281

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.31      28.40 
2. 2.33 28.68

3. 24 26 68 24 42 63
4. 47 91 120 27 82 112
5. 95 127 148 117 163 196

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.41       7.20 
2. 2.45 7.34

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.54      13.58 
2. 4.73 14.13

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.59      25.68 
2. 8.83 26.42

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.66       1.79 
2. 2.69 1.81

3. 23 77 115 23 51 99
4. 64 104 124 55 73 82
5. 160 188 217 124 161 172

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.87      10.66 
2. 0.87 10.72

3. 53 56 114 53 71 79
4. 162 307 359 157 241 294
5. 426 510 557 386 446 496

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.74       5.19 
2. 1.75 5.24

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.38       1.60 
2. 2.41 1.62

3. 22 39 58 22 47 66
4. 61 134 151 55 107 124
5. 128 147 161 134 168 202

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.75       9.26 
2. 0.75 9.26

3. 45 73 85 45 64 68
4. 122 273 304 156 351 378
5. 352 443 488 370 467 521

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.62       4.86 
2. 1.65 4.93

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.06       2.73 
2. 4.12 2.77

3. 19 39 51 19 31 58
4. 40 64 80 41 70 86
5. 99 121 140 76 98 114

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.89       5.30 
2. 8.09 5.43

3. 19 34 42 19 33 39
4. 33 47 58 34 48 60
5. 76 92 105 69 84 97

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 18.15      12.20 
2. 18.42 12.38

3. 27 40 52 26 40 54
4. 33 39 45 30 39 45
5. 66 77 86 63 74 84

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.61      19.80 
2. 1.63 20.00

3. 23 24 61 23 65 84
4. 60 87 112 58 172 188
5. 132 172 198 144 195 216

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.09      37.97 
2. 3.13 38.54

3. 24 44 51 23 28 42
4. 53 66 77 53 92 109
5. 97 111 124 96 114 129

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.00       8.98 
2. 3.03 9.07

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.07      18.15 
2. 6.16 18.43

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.74      38.09 
2. 12.86 38.47

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.94       2.65 
2. 3.98 2.68

3. 19 34 55 18 21 55
4. 46 81 101 41 69 85
5. 87 107 123 79 102 117

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.64       5.13 
2. 7.80 5.24

3. 19 31 38 19 36 42
4. 38 51 64 31 48 59
5. 79 96 109 69 82 93

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 17.55      11.80 
2. 17.91 12.03

3. 23 36 48 23 35 45
4. 32 39 46 32 39 44
5. 64 76 85 60 70 79

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.30      15.98 
2. 1.31 16.06

3. 24 25 62 23 58 75
4. 80 163 210 62 165 211
5. 150 199 227 172 213 274

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.50      30.80 
2. 2.55 31.34

3. 24 37 54 24 44 56
4. 42 58 66 48 86 107
5. 92 108 124 135 150 165

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.76       8.27 
2. 2.79 8.35

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.60      16.76 
2. 5.69 17.01

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.76      26.20 
2. 9.01 26.94

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.57       0.38 
2. 0.58 0.39

3. 29 73 153 29 81 199
4. 156 680 953 289 838 1189
5. 632 1262 1525 734 1419 1716

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.41       5.06 
2. 0.42 5.12

3. 57 98 117 57 105 178
4. 197 640 873 282 765 1052
5. 1046 1549 1900 1138 1788 2187

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.45       1.35 
2. 0.52 1.55

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.56       0.38 
2. 0.57 0.38

3. 28 53 148 28 38 59
4. 167 632 1013 225 794 1087
5. 608 1093 1312 744 1398 1705

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.38       4.72 
2. 0.39 4.82

3. 49 84 100 48 53 58
4. 162 537 726 122 273 372
5. 1038 1726 2227 618 1173 1458

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.48       1.44 
2. 0.51 1.53

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.61       0.41 
2. 0.62 0.42

3. 24 28 98 24 28 40
4. 140 613 963 136 589 826
5. 690 1258 1592 534 1147 1447

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.52       6.36 
2. 0.52 6.40

3. 30 59 111 29 33 108
4. 209 627 804 192 668 911
5. 624 1290 1628 716 1353 1659

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.50       1.50 
2. 0.59 1.76

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.61       0.41 
2. 0.61 0.41

3. 25 39 102 24 34 69
4. 97 552 780 213 724 1003
5. 482 1138 1433 695 1336 1597

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.49       6.03 
2. 0.49 6.09

3. 30 58 74 29 33 90
4. 90 370 708 240 736 1098
5. 510 1039 1290 829 1489 1802

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.50       1.50 
2. 0.58 1.73

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  3.78       2.54 
2. 3.84 2.58

3. 23 61 79 22 67 145
4. 78 132 154 91 139 156
5. 177 206 238 195 232 240

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.91      11.17 
2. 0.92 11.28

3. 49 122 138 49 136 161
4. 180 358 422 253 459 543
5. 452 564 619 515 641 710

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.13       6.37 
2. 2.14 6.40

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.26       2.19 
2. 3.29 2.21

3. 22 86 119 22 65 80
4. 60 112 136 83 140 174
5. 148 175 207 148 184 218

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.77       9.52 
2. 0.78 9.57

3. 41 83 91 41 99 119
4. 203 545 573 266 569 617
5. 486 609 682 508 631 692

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.98       5.93 
2. 1.99 5.96

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.83       4.59 
2. 6.90 4.64

3. 19 48 55 18 55 67
4. 48 68 77 46 79 87
5. 93 109 124 94 111 127

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.01       4.71 
2. 7.11 4.78

3. 19 48 64 18 59 79
4. 42 69 77 46 76 85
5. 91 108 125 98 121 138

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.01       4.71 
2. 7.12 4.78

3. 19 22 48 18 56 75
4. 41 58 68 53 76 84
5. 93 112 126 95 115 130

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.99      24.51 
2. 2.00 24.63

3. 23 50 67 23 70 88
4. 54 107 130 112 198 224
5. 142 168 186 195 246 266

 1518b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.99      24.53 
2. 2.00 24.66

3. 23 110 139 23 53 76
4. 57 147 172 85 165 201
5. 128 164 188 164 217 236

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.65      13.91 
2. 4.67 13.98

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.91      14.69 
2. 4.96 14.84

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.62      13.83 
2. 4.72 14.11

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.69       4.50 
2. 6.76 4.54

3. 19 30 59 19 37 58
4. 49 71 84 48 76 88
5. 94 113 129 92 110 128

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.95       4.67 
2. 6.98 4.69

3. 19 43 61 18 55 75
4. 55 76 81 56 74 81
5. 94 107 121 94 109 126

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.93       4.65 
2. 6.99 4.70

3. 18 27 45 18 33 80
4. 41 71 79 54 82 92
5. 90 104 115 91 107 119

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.50      18.44 
2. 1.51 18.53

3. 23 24 83 23 32 45
4. 73 122 141 25 139 165
5. 186 243 279 204 291 327

 1518b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.95      23.94 
2. 1.97 24.18

3. 23 37 81 23 56 89
4. 71 149 173 59 113 132
5. 174 229 250 144 182 199

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.08      12.19 
2. 4.10 12.26

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.53      13.55 
2. 4.58 13.69

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.07      12.19 
2. 4.12 12.31

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  3.36       2.26 
2. 3.38 2.27

3. 23 66 93 23 105 157
4. 82 130 152 96 151 175
5. 160 198 227 163 209 235

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.88      10.85 
2. 0.89 10.91

3. 50 104 113 50 114 145
4. 218 532 559 205 476 493
5. 489 611 635 488 617 677

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.96       5.85 
2. 1.97 5.91

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  3.06       2.05 
2. 3.07 2.06

3. 22 50 124 22 129 151
4. 63 126 140 79 149 166
5. 141 177 199 163 214 241

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.75       9.25 
2. 0.76 9.29

3. 42 116 138 42 82 107
4. 172 462 578 207 529 556
5. 530 668 760 516 622 659

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.83       5.48 
2. 1.85 5.53

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  5.70       3.83 
2. 5.76 3.87

3. 19 63 74 19 81 94
4. 55 79 89 57 84 95
5. 98 119 135 99 121 138

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.88      23.17 
2. 1.90 23.41

3. 23 59 74 23 145 163
4. 71 146 188 116 172 221
5. 196 244 268 203 250 276

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  3.98      11.91 
2. 4.02 12.03

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  5.45       3.66 
2. 5.53 3.72

3. 19 33 45 19 78 94
4. 53 82 97 53 82 98
5. 92 112 130 97 120 138

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.47      18.07 
2. 1.48 18.16

3. 24 89 104 23 118 138
4. 88 223 265 108 222 251
5. 215 263 293 239 310 339

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.59      10.73 
2. 3.64 10.90

25ge2p1xxv710-avf-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.28       1.53 
2. 2.34 1.57

3. 23 24 25 23 50 79
4. 77 114 138 80 146 172
5. 121 157 184 130 160 187

 1518b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.81       9.96 
2. 0.82 10.11

3. 50 124 157 50 87 116
4. 192 344 371 271 511 538
5. 405 507 545 452 551 630

 imix-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.50       4.47 
2. 1.55 4.63

25ge2p1xxv710-avf-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.04       1.37 
2. 2.10 1.41

3. 23 30 63 22 38 56
4. 74 156 195 53 93 111
5. 137 182 215 145 201 241

 1518b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.71       8.72 
2. 0.71 8.77

3. 42 82 92 42 117 131
4. 137 254 407 157 366 444
5. 327 427 514 336 450 534

 imix-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.40       4.20 
2. 1.42 4.26

25ge2p1xxv710-avf-ethip4ipsec20000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.10       2.08 
2. 3.21 2.15

3. 19 37 59 19 25 57
4. 37 63 100 43 73 95
5. 96 123 143 98 126 153

 64b-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.61       3.77 
2. 5.75 3.86

3. 19 36 48 19 35 39
4. 44 75 87 36 52 64
5. 87 109 129 82 102 122

 64b-8t4c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.21       6.86 
2. 10.36 6.96

3. 19 30 40 19 33 41
4. 39 50 59 35 46 54
5. 76 93 108 64 78 91

 1518b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.38      16.95 
2. 1.38 17.04

3. 24 53 102 23 24 55
4. 46 124 157 68 138 169
5. 185 253 288 141 181 225

 1518b-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.53      31.16 
2. 2.53 31.16

3. 24 26 30 24 28 43
4. 47 71 96 43 58 64
5. 83 101 118 83 100 117

 imix-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.18       6.53 
2. 2.27 6.80

 imix-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.03      12.07 
2. 4.22 12.62

 imix-8t4c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.87      23.53 
2. 8.03 24.01

25ge2p1xxv710-avf-ethip4ipsec20000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.94       1.98 
2. 3.08 2.07

3. 19 58 98 19 37 57
4. 25 74 90 45 61 76
5. 94 118 139 92 118 138

 64b-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.24       3.52 
2. 5.29 3.56

3. 19 24 43 19 30 42
4. 40 64 77 34 53 73
5. 72 92 111 62 79 93

 64b-8t4c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.84       6.61 
2. 9.89 6.65

3. 20 34 46 19 39 52
4. 35 43 51 37 49 59
5. 68 83 98 68 82 95

 1518b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.11      13.68 
2. 1.13 13.88

3. 24 24 25 24 41 50
4. 79 130 162 54 148 171
5. 164 199 232 186 269 302

 1518b-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.12      26.04 
2. 2.12 26.04

3. 24 25 26 24 25 53
4. 44 74 89 63 115 141
5. 95 115 131 102 133 166

 imix-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.02       6.04 
2. 2.08 6.23

 imix-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.78      11.31 
2. 3.86 11.54

 imix-8t4c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.12      21.29 
2. 7.23 21.62

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.88       1.27 
2. 2.03 1.36

3. 23 41 82 23 126 163
4. 80 160 197 106 202 242
5. 144 200 231 172 237 316

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.76       9.37 
2. 0.76 9.37

3. 51 72 83 51 129 146
4. 148 273 298 317 612 637
5. 487 592 635 466 587 654

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.29       3.84 
2. 1.34 4.00

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.72       1.16 
2. 1.83 1.23

3. 23 63 99 23 97 130
4. 119 216 260 126 232 268
5. 200 272 316 206 261 316

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.67       8.22 
2. 0.68 8.35

3. 43 117 149 43 150 168
4. 151 522 554 226 565 671
5. 443 591 665 530 695 808

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.19       3.55 
2. 1.22 3.66

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.50       1.68 
2. 2.66 1.78

3. 19 48 106 19 98 122
4. 71 141 160 67 140 169
5. 94 145 197 94 128 180

 64b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.43       2.98 
2. 4.73 3.18

3. 20 20 24 19 20 36
4. 66 78 86 24 35 42
5. 95 119 149 97 121 154

 64b-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.22       5.52 
2. 8.34 5.60

3. 20 34 50 19 47 62
4. 38 56 69 40 57 66
5. 74 93 107 60 74 88

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.25      15.39 
2. 1.26 15.47

3. 24 78 94 24 85 105
4. 122 290 325 136 300 346
5. 184 238 290 221 314 352

 1518b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.30      28.26 
2. 2.31 28.41

3. 24 26 40 24 37 52
4. 28 82 106 35 101 126
5. 113 157 173 119 159 172

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.85       5.54 
2. 1.92 5.74

 imix-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.51      10.50 
2. 3.64 10.88

 imix-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.24      18.65 
2. 6.56 19.61

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.37       1.59 
2. 2.56 1.72

3. 19 41 73 19 134 156
4. 47 111 142 78 158 182
5. 98 130 207 89 121 149

 64b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.18       2.81 
2. 4.32 2.91

3. 20 21 53 19 49 67
4. 51 74 87 67 101 117
5. 91 119 143 78 106 124

 64b-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.95       5.34 
2. 8.11 5.45

3. 20 42 54 20 42 55
4. 40 57 66 41 61 69
5. 82 103 125 77 95 111

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.03      12.67 
2. 1.03 12.67

3. 24 73 97 24 26 32
4. 145 341 363 108 234 258
5. 242 342 372 190 247 292

 1518b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.98      24.37 
2. 1.97 24.25

3. 25 35 54 25 54 72
4. 53 118 140 66 154 181
5. 109 149 171 127 177 198

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.69       5.07 
2. 1.75 5.22

 imix-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.26       9.74 
2. 3.36 10.04

 imix-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.34      18.97 
2. 6.47 19.35

25ge2p1xxv710-avf-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.86       1.92 
2. 2.88 1.94

3. 23 26 80 22 59 69
4. 60 93 134 55 110 128
5. 146 174 197 127 157 179

 1518b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.87      10.76 
2. 0.87 10.76

3. 50 134 147 50 170 198
4. 185 373 407 238 458 542
5. 476 545 638 385 486 559

 imix-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.83       5.47 
2. 1.85 5.52

25ge2p1xxv710-avf-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.51       1.69 
2. 2.54 1.71

3. 22 26 70 22 23 68
4. 60 91 116 60 105 130
5. 146 163 173 109 157 164

 1518b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.76       9.30 
2. 0.76 9.34

3. 42 48 86 42 79 88
4. 150 329 404 138 266 312
5. 360 474 542 362 483 570

 imix-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.69       5.04 
2. 1.70 5.09

25ge2p1xxv710-avf-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.55       3.06 
2. 4.62 3.11

3. 19 19 41 18 26 34
4. 20 51 70 22 58 65
5. 87 106 120 74 91 102

 64b-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.88       6.64 
2. 10.13 6.81

3. 19 32 45 19 27 36
4. 37 48 56 35 46 56
5. 78 93 104 70 81 92

 64b-8t4c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 20.06      13.48 
2. 20.47 13.76

3. 23 37 49 25 37 48
4. 33 40 45 33 39 45
5. 74 86 96 64 75 83

 1518b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.65      20.34 
2. 1.67 20.54

3. 23 37 50 23 45 59
4. 38 85 94 69 143 152
5. 170 214 238 130 157 175

 1518b-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.29      40.48 
2. 3.36 41.30

3. 23 33 51 23 31 40
4. 50 77 90 50 78 92
5. 119 138 152 113 131 145

 imix-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.29       9.85 
2. 3.34 9.99

 imix-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.97      20.85 
2. 7.08 21.16

 imix-8t4c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 14.24      42.60 
2. 14.24 42.60

25ge2p1xxv710-avf-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.34       2.92 
2. 4.40 2.96

3. 19 26 38 18 30 39
4. 35 59 91 52 75 90
5. 80 96 108 75 93 105

 64b-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.63       6.47 
2. 9.82 6.60

3. 19 30 37 19 35 44
4. 37 52 60 35 47 58
5. 75 89 103 69 81 92

 64b-8t4c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 19.83      13.33 
2. 20.13 13.53

3. 19 35 43 24 36 51
4. 35 44 50 33 41 46
5. 76 88 98 66 76 86

 1518b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.32      16.27 
2. 1.34 16.43

3. 24 68 89 23 44 59
4. 55 147 166 64 101 182
5. 195 254 306 192 238 273

 1518b-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.61      32.10 
2. 2.66 32.75

3. 24 40 56 24 29 45
4. 45 73 93 51 98 114
5. 130 152 170 106 126 142

 imix-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.99       8.93 
2. 3.02 9.02

 imix-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.29      18.80 
2. 6.38 19.09

 imix-8t4c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 13.03      38.97 
2. 13.16 39.37

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  3.19       2.14 
2. 3.27 2.20

3. 23 49 59 22 128 153
4. 84 139 177 80 142 164
5. 158 201 230 151 197 238

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.90      11.04 
2. 0.90 11.04

3. 50 107 114 50 175 206
4. 160 348 456 250 467 563
5. 446 538 600 452 582 641

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.99       5.96 
2. 2.01 6.02

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.84       1.91 
2. 2.87 1.93

3. 22 40 51 22 138 156
4. 62 122 148 76 152 185
5. 144 176 200 142 184 226

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.77       9.44 
2. 0.78 9.54

3. 42 68 139 41 97 119
4. 188 348 499 214 513 552
5. 427 545 612 541 664 764

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.84       5.49 
2. 1.86 5.55

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.24       3.52 
2. 5.37 3.61

3. 19 38 52 18 65 85
4. 48 80 90 42 84 105
5. 94 113 129 88 104 121

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.49       7.05 
2. 10.70 7.19

3. 19 33 48 19 41 56
4. 37 48 55 40 55 61
5. 86 101 111 74 88 101

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 21.83      14.67 
2. 22.36 15.03

3. 19 20 31 26 34 41
4. 35 44 52 36 43 51
5. 82 96 106 63 73 82

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.81      22.32 
2. 1.84 22.66

3. 23 28 49 23 56 73
4. 53 148 172 97 201 217
5. 199 262 286 189 246 267

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.55      43.63 
2. 3.59 44.12

3. 24 35 44 23 49 64
4. 51 86 95 58 104 113
5. 122 143 162 125 150 164

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.83      11.46 
2. 3.87 11.58

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.48      22.37 
2. 7.63 22.82

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 14.17      42.39 
2. 14.24 42.60

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.18       3.48 
2. 5.29 3.55

3. 19 45 59 18 69 81
4. 40 70 83 54 91 108
5. 108 127 146 74 103 117

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.19       6.85 
2. 10.39 6.98

3. 19 33 41 19 36 51
4. 38 54 62 38 59 67
5. 85 100 111 67 80 89

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.04       4.73 
2. 7.14 4.80

3. 19 34 57 18 26 35
4. 38 61 71 23 36 43
5. 72 85 95 32 44 51

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.41      17.37 
2. 1.43 17.54

3. 23 26 44 23 89 117
4. 84 185 209 73 201 254
5. 215 280 304 211 294 327

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.61      32.11 
2. 2.64 32.53

3. 23 75 93 23 68 117
4. 52 109 127 45 112 138
5. 83 104 121 106 138 159

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.46      10.34 
2. 3.51 10.49

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.88      20.57 
2. 6.95 20.78

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 11.84      35.41 
2. 12.06 36.06

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  3.72       2.50 
2. 3.79 2.55

3. 23 56 67 23 118 139
4. 88 133 155 85 138 154
5. 175 214 224 179 216 231

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.91      11.18 
2. 0.91 11.23

3. 50 180 193 49 127 169
4. 140 342 370 252 468 496
5. 464 564 638 496 628 694

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.11       6.31 
2. 2.12 6.34

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.23       2.17 
2. 3.24 2.18

3. 22 25 120 22 112 125
4. 83 131 152 93 151 176
5. 137 173 190 155 190 245

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.77       9.47 
2. 0.78 9.56

3. 42 131 159 41 99 125
4. 174 406 434 223 497 593
5. 478 606 661 526 681 796

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.96       5.87 
2. 1.98 5.93

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.75       4.54 
2. 6.79 4.56

3. 19 43 68 18 37 49
4. 45 78 88 52 78 90
5. 92 107 125 92 112 126

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.77       4.55 
2. 6.90 4.64

3. 19 62 67 18 22 28
4. 39 59 68 22 52 59
5. 95 111 125 39 53 60

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 14.96      10.05 
2. 15.11 10.15

3. 19 35 49 19 38 51
4. 37 48 58 35 49 58
5. 72 85 95 72 86 95

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.94      23.88 
2. 1.95 24.00

3. 23 105 119 23 81 99
4. 80 145 174 98 199 222
5. 174 232 258 204 247 267

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.04      25.14 
2. 2.06 25.39

3. 23 42 81 23 34 75
4. 27 71 100 62 149 168
5. 60 108 128 119 170 186

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.55      13.60 
2. 4.62 13.81

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.55      13.60 
2. 4.61 13.77

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.69      14.04 
2. 4.77 14.27

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.62       4.45 
2. 6.69 4.49

3. 19 22 62 19 57 66
4. 50 76 89 58 86 99
5. 91 108 122 96 114 132

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.65       4.47 
2. 6.71 4.51

3. 19 22 32 19 31 47
4. 25 49 61 39 66 79
5. 35 50 58 81 99 116

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 13.36       8.98 
2. 13.56 9.11

3. 19 28 43 19 36 53
4. 33 43 49 42 58 65
5. 38 48 57 98 113 125

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.48      18.17 
2. 1.48 18.26

3. 23 31 124 23 89 112
4. 127 228 255 83 192 214
5. 192 273 322 221 293 321

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.89      35.56 
2. 2.96 36.46

3. 24 28 81 23 67 110
4. 57 113 148 77 123 151
5. 156 195 220 150 189 212

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.99      11.92 
2. 4.03 12.04

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.09      12.24 
2. 4.18 12.49

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 14.10      42.17 
2. 14.28 42.71

25ge2p1xxv710-avf-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.55       1.71 
2. 2.57 1.73

3. 23 42 58 23 53 69
4. 73 120 138 61 80 101
5. 126 156 180 110 135 147

 1518b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.86      10.56 
2. 0.87 10.67

3. 50 67 107 54 68 77
4. 177 273 341 179 326 401
5. 420 508 582 374 456 518

 imix-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.67       5.00 
2. 1.69 5.05

25ge2p1xxv710-avf-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.31       1.55 
2. 2.36 1.59

3. 22 50 70 22 42 60
4. 103 192 215 58 129 151
5. 132 183 224 97 125 158

 1518b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.74       9.16 
2. 0.75 9.21

3. 42 85 89 42 105 124
4. 168 440 505 245 572 608
5. 392 494 547 474 593 674

 imix-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.55       4.63 
2. 1.57 4.70

25ge2p1xxv710-avf-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.63       2.44 
2. 3.67 2.46

3. 19 31 48 19 19 27
4. 37 61 75 40 64 88
5. 87 110 129 64 84 99

 64b-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.78       4.55 
2. 7.06 4.74

3. 19 26 35 19 30 38
4. 36 52 66 33 52 65
5. 93 116 135 66 82 96

 64b-8t4c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.91       8.68 
2. 13.37 8.99

3. 19 32 43 20 33 42
4. 36 46 53 33 41 48
5. 72 86 99 60 72 82

 1518b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.57      19.27 
2. 1.57 19.27

3. 23 24 27 23 52 88
4. 73 115 188 62 161 175
5. 129 172 197 174 234 273

 1518b-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.85      35.06 
2. 2.89 35.59

3. 24 47 90 24 52 67
4. 51 103 140 45 79 110
5. 136 218 280 165 309 374

 imix-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.72       8.14 
2. 2.78 8.31

 imix-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.29      15.81 
2. 5.34 15.97

 imix-8t4c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.40      31.10 
2. 10.61 31.73

25ge2p1xxv710-avf-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.56       2.39 
2. 3.68 2.47

3. 19 29 49 19 41 47
4. 35 60 69 41 74 92
5. 83 102 118 84 106 122

 64b-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.49       4.36 
2. 6.60 4.43

3. 19 35 41 19 32 40
4. 34 48 62 34 47 59
5. 77 94 109 63 76 88

 64b-8t4c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 12.72       8.55 
2. 12.98 8.72

3. 21 38 51 22 36 48
4. 33 40 47 32 39 44
5. 68 82 94 59 71 79

 1518b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.28      15.70 
2. 1.28 15.70

3. 24 36 46 23 24 29
4. 75 170 201 32 148 171
5. 146 221 259 126 185 218

 1518b-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.38      29.34 
2. 2.46 30.23

3. 24 25 26 24 35 48
4. 54 88 107 48 74 96
5. 103 122 140 107 137 168

 imix-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.48       7.42 
2. 2.52 7.53

 imix-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.87      14.55 
2. 5.04 15.07

 imix-8t4c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.63      28.81 
2. 9.88 29.54

25ge2p1xxv710-avf-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.78       1.19 
2. 1.88 1.26

3. 24 70 107 23 145 192
4. 66 143 201 81 182 213
5. 197 259 318 194 253 325

 1518b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.74       9.05 
2. 0.74 9.14

3. 51 181 196 51 131 155
4. 275 630 702 272 582 613
5. 478 619 728 470 623 746

 imix-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.22       3.64 
2. 1.25 3.75

25ge2p1xxv710-avf-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.62       1.09 
2. 1.69 1.13

3. 23 33 87 23 64 168
4. 81 188 221 102 244 294
5. 141 198 240 186 260 334

 1518b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.65       8.05 
2. 0.66 8.13

3. 43 65 81 42 90 111
4. 152 492 523 332 665 759
5. 555 713 764 559 746 826

 imix-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.14       3.40 
2. 1.17 3.51

25ge2p1xxv710-avf-ethip4ipsec60000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.37       1.59 
2. 2.44 1.64

3. 19 46 79 19 139 158
4. 81 134 159 76 115 136
5. 136 170 216 120 194 212

 64b-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.11       2.77 
2. 4.28 2.88

3. 20 50 84 20 45 61
4. 53 91 115 37 95 115
5. 83 111 134 93 120 147

 64b-8t4c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.56       5.08 
2. 7.71 5.18

3. 20 32 40 20 53 64
4. 46 62 74 41 63 75
5. 79 99 116 65 77 89

 1518b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.18      14.49 
2. 1.20 14.70

3. 24 37 58 24 117 135
4. 97 238 268 109 299 340
5. 213 283 316 236 322 365

 1518b-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.20      27.11 
2. 2.23 27.38

3. 24 86 112 24 104 129
4. 47 125 142 80 149 184
5. 121 154 173 121 162 178

 imix-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.71       5.12 
2. 1.77 5.30

 imix-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.25       9.73 
2. 3.35 10.03

 imix-8t4c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.24      18.65 
2. 6.33 18.94

25ge2p1xxv710-avf-ethip4ipsec60000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.11       1.42 
2. 2.31 1.55

3. 19 66 94 19 102 124
4. 71 137 168 109 178 231
5. 134 185 217 134 182 215

 64b-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.84       2.58 
2. 4.01 2.70

3. 20 50 67 20 62 80
4. 46 91 110 47 98 115
5. 91 119 143 94 122 146

 64b-8t4c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.32       4.92 
2. 7.61 5.11

3. 20 20 22 20 57 71
4. 41 59 69 41 66 76
5. 78 92 110 79 97 115

 1518b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.01      12.41 
2. 1.01 12.49

3. 24 87 115 24 39 66
4. 93 292 309 165 361 413
5. 299 423 459 293 428 466

 1518b-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.91      23.55 
2. 1.91 23.55

3. 25 50 66 24 51 113
4. 39 113 128 66 138 182
5. 122 178 213 149 210 242

 imix-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.60       4.78 
2. 1.64 4.90

 imix-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.04       9.10 
2. 3.13 9.38

 imix-8t4c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.02      18.01 
2. 6.11 18.29

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.34       1.57 
2. 2.34 1.57

3. 23 41 65 23 51 79
4. 70 101 135 71 113 146
5. 155 193 222 109 137 161

 1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.80       9.89 
2. 0.81 9.94

3. 54 118 135 54 72 99
4. 134 271 349 177 247 282
5. 371 457 528 389 479 537

 imix-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.52       4.56 
2. 1.54 4.60

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.14       1.44 
2. 2.15 1.45

3. 22 62 83 22 42 69
4. 63 102 129 66 115 142
5. 119 162 179 120 168 186

 1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.69       8.55 
2. 0.70 8.59

3. 44 79 93 45 102 123
4. 192 299 327 144 333 417
5. 321 428 527 418 539 594

 imix-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.42       4.24 
2. 1.42 4.26

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.26       2.19 
2. 3.36 2.26

3. 19 55 79 23 58 84
4. 49 91 122 50 69 92
5. 102 127 153 94 120 138

 64b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.07       4.08 
2. 6.20 4.16

3. 26 51 79 26 67 81
4. 33 48 59 38 51 60
5. 73 92 114 65 80 91

 64b-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.00       7.39 
2. 11.05 7.43

3. 27 53 77 34 58 76
4. 37 48 55 36 45 54
5. 66 79 92 59 71 83

 1518b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.37      16.90 
2. 1.38 16.99

3. 24 36 65 24 59 80
4. 72 127 148 64 128 171
5. 154 201 232 167 237 280

 1518b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.36      28.99 
2. 2.36 28.99

3. 24 47 76 24 52 81
4. 57 83 103 40 68 88
5. 100 136 156 93 117 133

 imix-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.30       6.89 
2. 2.34 7.00

 imix-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.30      12.85 
2. 4.32 12.92

 imix-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.95      23.79 
2. 7.95 23.79

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.19       2.14 
2. 3.24 2.18

3. 19 53 73 19 45 62
4. 45 89 112 40 70 87
5. 101 127 148 82 111 136

 64b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.91       3.97 
2. 5.94 3.99

3. 19 57 82 19 53 71
4. 40 56 70 40 55 68
5. 85 107 131 76 92 107

 64b-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.63       7.15 
2. 10.96 7.36

3. 24 46 77 28 55 79
4. 34 44 53 35 45 55
5. 72 89 104 64 78 91

 1518b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.13      13.84 
2. 1.13 13.91

3. 24 39 60 24 52 76
4. 101 235 292 71 145 171
5. 282 371 423 140 173 202

 1518b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.00      24.65 
2. 2.02 24.90

3. 24 41 75 24 39 54
4. 52 74 91 51 99 117
5. 113 147 171 118 153 176

 imix-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.22       6.64 
2. 2.24 6.70

 imix-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.06      12.14 
2. 4.08 12.20

 imix-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.47      22.35 
2. 7.47 22.35

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.55       1.71 
2. 2.56 1.72

3. 23 62 80 23 51 80
4. 59 90 109 66 94 101
5. 139 185 213 105 125 153

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.84      10.31 
2. 0.84 10.35

3. 57 100 119 57 116 142
4. 166 304 385 205 312 351
5. 367 444 504 403 476 535

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.65       4.93 
2. 1.65 4.93

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.30       1.55 
2. 2.33 1.56

3. 22 50 84 22 74 88
4. 74 125 166 32 63 99
5. 128 159 179 119 159 185

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.73       9.00 
2. 0.73 9.00

3. 42 125 167 41 95 130
4. 120 332 354 272 586 625
5. 348 446 537 462 600 663

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.53       4.58 
2. 1.55 4.64

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.73       2.51 
2. 3.79 2.55

3. 19 52 75 19 52 84
4. 48 81 100 45 70 89
5. 91 108 124 78 101 125

 64b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.27       4.88 
2. 7.41 4.98

3. 19 46 73 19 44 70
4. 37 47 58 39 52 62
5. 70 84 97 64 78 90

 64b-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 15.87      10.66 
2. 16.03 10.77

3. 30 53 69 34 56 73
4. 33 41 48 32 39 46
5. 60 71 82 59 71 82

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.50      18.49 
2. 1.50 18.49

3. 24 60 79 23 43 51
4. 63 91 162 88 184 212
5. 166 214 249 170 223 263

 1518b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.82      34.75 
2. 2.82 34.75

3. 24 58 77 24 59 79
4. 58 107 124 58 96 119
5. 119 142 155 115 142 155

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.70       8.08 
2. 2.74 8.21

 imix-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.42      16.21 
2. 5.45 16.29

 imix-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.11      33.23 
2. 11.17 33.39

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.66       2.46 
2. 3.68 2.48

3. 19 51 77 25 48 69
4. 45 68 83 43 60 71
5. 88 110 127 82 100 119

 64b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.07       4.75 
2. 7.22 4.85

3. 23 50 78 28 63 77
4. 37 49 59 37 48 59
5. 77 94 109 63 76 87

 64b-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 15.25      10.25 
2. 15.56 10.45

3. 34 56 72 36 59 72
4. 32 39 46 33 40 46
5. 61 73 84 58 69 80

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.22      14.99 
2. 1.23 15.10

3. 24 63 74 24 44 63
4. 47 129 182 52 190 224
5. 149 186 218 151 202 256

 1518b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.31      28.42 
2. 2.33 28.71

3. 24 39 62 24 44 56
4. 53 84 101 75 112 124
5. 102 124 144 117 155 175

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.51       7.50 
2. 2.55 7.62

 imix-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.05      15.09 
2. 5.07 15.17

 imix-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.33      30.90 
2. 10.38 31.05

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.57       0.38 
2. 0.57 0.39

3. 29 55 132 29 46 98
4. 142 610 948 128 537 773
5. 624 1145 1397 519 1125 1412

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.41       5.02 
2. 0.41 5.04

3. 57 108 152 57 101 141
4. 199 561 743 226 561 753
5. 828 1365 1719 825 1454 1819

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.51       1.52 
2. 0.51 1.53

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.56       0.37 
2. 0.56 0.38

3. 29 48 70 28 47 75
4. 119 327 458 182 693 996
5. 368 700 913 621 1257 1619

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.38       4.68 
2. 0.38 4.73

3. 49 98 131 48 68 100
4. 215 562 781 161 524 674
5. 824 1366 1677 944 1589 2012

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.50       1.50 
2. 0.50 1.50

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.61       0.41 
2. 0.61 0.41

3. 24 34 81 24 33 120
4. 184 728 953 214 739 1018
5. 532 1218 1506 642 1265 1636

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.50       6.18 
2. 0.50 6.18

3. 30 62 107 29 42 68
4. 210 616 841 224 706 911
5. 668 1261 1607 749 1317 1664

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.58       1.72 
2. 0.58 1.73

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.61       0.41 
2. 0.61 0.41

3. 25 36 131 25 38 58
4. 160 680 989 115 615 849
5. 602 1240 1522 540 1188 1470

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.48       5.91 
2. 0.48 5.94

3. 30 61 100 29 52 89
4. 243 683 884 148 536 732
5. 768 1372 1734 510 929 1199

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.57       1.70 
2. 0.57 1.71

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.59       2.41 
2. 3.61 2.42

3. 23 69 119 23 55 145
4. 79 134 147 86 142 153
5. 187 232 266 196 250 282

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.88      10.86 
2. 0.89 10.91

3. 49 130 147 49 183 225
4. 149 361 443 240 518 612
5. 456 572 614 470 597 656

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.99       5.95 
2. 2.00 5.98

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  3.10       2.08 
2. 3.11 2.09

3. 22 69 83 22 63 161
4. 67 117 141 74 135 151
5. 149 179 199 160 198 243

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.76       9.30 
2. 0.76 9.34

3. 41 98 125 41 133 157
4. 162 387 443 234 567 654
5. 424 536 618 511 646 764

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.85       5.53 
2. 1.87 5.58

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.29       4.23 
2. 6.32 4.25

3. 19 58 70 18 42 68
4. 53 80 92 57 83 95
5. 93 112 127 104 130 153

 64b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.66       4.48 
2. 6.73 4.52

3. 18 47 66 18 38 75
4. 54 74 83 56 79 87
5. 93 113 132 97 121 140

 64b-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.69       4.50 
2. 6.72 4.52

3. 18 53 71 18 44 72
4. 45 67 78 56 80 90
5. 95 115 134 98 121 143

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.88      23.18 
2. 1.88 23.18

3. 23 40 96 23 78 159
4. 77 158 195 107 186 214
5. 199 243 281 214 262 294

 1518b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.14      26.31 
2. 2.15 26.44

3. 23 90 158 23 85 178
4. 118 211 234 107 202 225
5. 187 236 260 210 251 276

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.08      12.21 
2. 4.10 12.27

 imix-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.27      12.76 
2. 4.27 12.76

 imix-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.26      12.75 
2. 4.29 12.82

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.18       4.15 
2. 6.21 4.17

3. 18 45 72 18 70 84
4. 54 71 84 53 81 90
5. 102 125 143 102 126 146

 64b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.56       4.41 
2. 6.62 4.45

3. 18 49 85 18 47 70
4. 49 71 79 59 86 93
5. 95 113 132 95 115 135

 64b-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.54       4.39 
2. 6.61 4.44

3. 18 58 70 18 53 76
4. 54 71 80 59 82 91
5. 94 113 129 101 124 145

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.44      17.72 
2. 1.44 17.72

3. 23 30 50 23 100 125
4. 80 196 233 92 242 268
5. 172 248 281 226 302 334

 1518b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.85      22.74 
2. 1.85 22.74

3. 23 121 142 23 104 123
4. 94 196 225 135 226 256
5. 191 239 268 222 279 301

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.61      10.79 
2. 3.64 10.90

 imix-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.00      11.95 
2. 4.00 11.95

 imix-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.99      11.93 
2. 3.99 11.93

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  3.25       2.18 
2. 3.26 2.19

3. 23 109 140 23 139 162
4. 68 117 147 95 160 191
5. 170 209 243 164 208 236

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.86      10.52 
2. 0.86 10.58

3. 50 102 175 50 151 171
4. 179 332 387 270 491 613
5. 447 561 625 448 564 621

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.85       5.52 
2. 1.86 5.55

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  2.94       1.98 
2. 2.96 1.99

3. 22 68 98 22 133 155
4. 80 144 164 90 163 191
5. 167 198 240 152 194 230

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.74       9.05 
2. 0.74 9.05

3. 42 134 169 41 167 192
4. 150 436 504 281 572 616
5. 465 633 719 524 658 722

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.72       5.13 
2. 1.74 5.21

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  5.31       3.57 
2. 5.36 3.60

3. 19 80 94 19 50 97
4. 40 68 81 70 91 102
5. 102 127 141 99 121 140

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.77      21.75 
2. 1.77 21.75

3. 23 38 53 23 69 83
4. 90 215 272 126 206 237
5. 179 236 263 210 277 314

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  3.54      10.58 
2. 3.55 10.63

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  5.18       3.48 
2. 5.26 3.53

3. 19 38 77 19 55 97
4. 55 83 100 61 93 109
5. 105 123 146 89 119 134

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.40      17.26 
2. 1.41 17.35

3. 24 25 42 24 100 117
4. 68 136 168 104 276 301
5. 203 259 283 259 344 369

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.21       9.59 
2. 3.24 9.69

25ge2p1xxv710-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.13       1.43 
2. 2.18 1.47

3. 23 70 85 23 73 100
4. 63 93 111 61 146 179
5. 159 203 234 144 184 210

 1518b-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.76       9.37 
2. 0.76 9.41

3. 50 111 145 50 93 115
4. 179 348 405 210 429 514
5. 391 487 541 389 491 553

 imix-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.39       4.14 
2. 1.40 4.18

25ge2p1xxv710-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.92       1.29 
2. 1.94 1.30

3. 23 56 74 22 50 83
4. 69 95 124 63 91 107
5. 122 151 175 116 143 171

 1518b-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.66       8.18 
2. 0.67 8.22

3. 42 87 103 42 151 174
4. 143 486 566 298 619 672
5. 574 717 805 536 705 797

 imix-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.29       3.85 
2. 1.31 3.91

25ge2p1xxv710-ethip4ipsec20000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.83       1.90 
2. 2.89 1.94

3. 19 47 72 19 43 70
4. 47 71 100 53 89 125
5. 101 127 146 93 126 151

 64b-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.91       3.30 
2. 5.04 3.39

3. 19 49 67 19 45 66
4. 48 67 82 43 60 78
5. 94 115 139 78 97 115

 64b-8t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.85       5.95 
2. 8.98 6.04

3. 24 54 80 31 58 79
4. 33 43 53 39 51 62
5. 67 82 96 67 82 96

 1518b-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.23      15.11 
2. 1.23 15.11

3. 24 46 79 24 64 80
4. 74 229 280 126 282 346
5. 147 194 226 169 226 265

 1518b-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.25      27.70 
2. 2.25 27.70

3. 24 53 73 24 53 75
4. 54 72 83 55 73 93
5. 111 140 160 91 115 135

 imix-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.95       5.83 
2. 2.02 6.04

 imix-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.66      10.93 
2. 3.66 10.95

 imix-8t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.60      19.75 
2. 6.68 19.97

25ge2p1xxv710-ethip4ipsec20000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.70       1.82 
2. 2.80 1.88

3. 19 55 81 19 40 69
4. 48 71 88 60 95 141
5. 123 155 184 82 114 132

 64b-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.75       3.19 
2. 4.82 3.24

3. 19 40 84 19 41 60
4. 45 59 71 39 52 68
5. 80 99 116 71 88 105

 64b-8t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.59       5.77 
2. 8.72 5.86

3. 31 54 75 40 64 82
4. 40 52 62 42 57 68
5. 65 79 92 66 80 93

 1518b-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.02      12.59 
2. 1.03 12.65

3. 24 52 76 24 44 79
4. 55 174 247 64 112 135
5. 191 285 357 168 238 300

 1518b-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.90      23.37 
2. 1.90 23.37

3. 25 40 65 25 55 71
4. 53 74 90 51 88 121
5. 112 152 182 148 179 206

 imix-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.81       5.42 
2. 1.87 5.58

 imix-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.42      10.23 
2. 3.45 10.33

 imix-8t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.27      18.76 
2. 6.27 18.76

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.82       1.22 
2. 1.90 1.28

3. 23 79 109 23 72 167
4. 69 178 214 105 198 240
5. 180 241 283 208 290 325

 1518b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.72       8.81 
2. 0.72 8.85

3. 50 104 123 50 178 200
4. 197 470 562 204 529 628
5. 437 598 705 499 661 764

 imix-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.22       3.64 
2. 1.24 3.71

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.66       1.11 
2. 1.68 1.13

3. 23 66 101 23 69 169
4. 108 231 261 94 266 308
5. 161 228 266 209 281 376

 1518b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.64       7.81 
2. 0.64 7.89

3. 42 136 171 42 152 170
4. 300 642 732 223 619 658
5. 559 752 843 553 756 811

 imix-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.14       3.42 
2. 1.16 3.47

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.41       1.62 
2. 2.46 1.65

3. 19 83 111 19 118 139
4. 52 70 81 105 151 166
5. 122 157 205 137 182 229

 64b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.14       2.78 
2. 4.20 2.82

3. 19 49 81 19 65 82
4. 50 91 103 59 97 117
5. 86 107 128 89 115 137

 64b-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.59       5.10 
2. 7.70 5.17

3. 20 43 51 20 41 70
4. 49 67 76 47 66 75
5. 63 82 95 68 82 98

 1518b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.14      13.99 
2. 1.14 13.99

3. 24 77 123 24 96 114
4. 91 261 286 125 316 374
5. 196 285 322 249 348 381

 1518b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.07      25.49 
2. 2.07 25.49

3. 25 36 54 24 66 131
4. 68 151 172 63 146 171
5. 128 173 197 120 164 183

 imix-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.70       5.08 
2. 1.75 5.24

 imix-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.28       9.81 
2. 3.33 9.96

 imix-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.21      18.56 
2. 6.21 18.56

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.22       1.49 
2. 2.33 1.57

3. 19 63 105 19 93 115
4. 97 158 184 101 178 227
5. 117 160 183 142 184 220

 64b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.99       2.68 
2. 4.03 2.71

3. 19 29 65 19 62 77
4. 51 85 105 50 94 111
5. 96 123 149 95 119 139

 64b-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.40       4.98 
2. 7.44 5.00

3. 20 38 51 20 36 46
4. 43 60 71 47 64 74
5. 74 92 106 70 86 101

 1518b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.96      11.77 
2. 0.96 11.83

3. 25 55 69 24 41 65
4. 90 247 304 114 223 248
5. 240 349 392 180 231 259

 1518b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.81      22.22 
2. 1.81 22.22

3. 25 40 57 25 110 130
4. 51 171 220 47 168 209
5. 126 193 219 146 203 249

 imix-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.57       4.69 
2. 1.61 4.81

 imix-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.03       9.07 
2. 3.08 9.21

 imix-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.79      17.30 
2. 5.82 17.39

25ge2p1xxv710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.68       1.80 
2. 2.71 1.82

3. 23 76 106 23 56 74
4. 64 100 138 75 115 153
5. 163 192 222 121 160 197

 1518b-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.85      10.43 
2. 0.85 10.43

3. 50 108 152 54 87 113
4. 157 260 327 175 283 305
5. 363 441 516 396 507 570

 imix-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.71       5.11 
2. 1.72 5.13

25ge2p1xxv710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.39       1.60 
2. 2.41 1.62

3. 22 64 82 22 70 96
4. 66 120 151 57 91 118
5. 129 167 214 138 165 233

 1518b-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.74       9.06 
2. 0.75 9.24

3. 42 91 106 41 60 102
4. 142 389 475 146 320 370
5. 471 588 660 449 533 610

 imix-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.59       4.74 
2. 1.60 4.79

25ge2p1xxv710-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.06       2.73 
2. 4.10 2.76

3. 19 47 76 19 49 59
4. 43 69 93 46 66 81
5. 86 108 127 85 108 127

 64b-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.77       5.89 
2. 8.95 6.01

3. 22 53 78 31 55 76
4. 38 50 58 36 47 55
5. 70 83 93 63 75 85

 64b-8t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 18.49      12.43 
2. 18.68 12.55

3. 31 54 71 32 53 71
4. 35 42 47 32 39 45
5. 68 79 90 60 71 80

 1518b-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.55      19.08 
2. 1.55 19.11

3. 23 49 82 23 57 79
4. 56 171 189 64 84 97
5. 192 236 269 125 162 196

 1518b-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.05      37.48 
2. 3.05 37.48

3. 24 68 84 25 61 79
4. 49 72 85 45 61 79
5. 110 127 140 100 116 129

 imix-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.92       8.72 
2. 2.94 8.81

 imix-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.02      18.01 
2. 6.05 18.10

 imix-8t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.52      37.46 
2. 12.59 37.64

25ge2p1xxv710-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.96       2.66 
2. 4.00 2.69

3. 19 51 72 19 42 54
4. 42 66 92 48 81 99
5. 80 98 113 75 96 108

 64b-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.48       5.70 
2. 8.70 5.84

3. 29 52 75 35 58 76
4. 37 49 58 42 58 68
5. 69 83 95 62 75 85

 64b-8t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 18.12      12.18 
2. 18.30 12.30

3. 35 54 70 31 52 72
4. 33 40 46 32 39 45
5. 66 78 87 62 73 84

 1518b-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.26      15.46 
2. 1.27 15.61

3. 24 60 81 24 52 71
4. 73 163 199 72 189 225
5. 182 240 273 250 336 401

 1518b-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.48      30.54 
2. 2.48 30.54

3. 24 43 71 24 50 78
4. 69 111 124 51 68 81
5. 104 146 174 101 136 154

 imix-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.71       8.09 
2. 2.72 8.13

 imix-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.57      16.66 
2. 5.60 16.75

 imix-8t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 11.45      34.24 
2. 11.51 34.41

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.09       2.08 
2. 3.12 2.10

3. 23 60 103 22 104 125
4. 81 139 150 104 167 174
5. 180 225 266 166 211 254

 1518b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.87      10.66 
2. 0.87 10.71

3. 50 91 168 52 86 111
4. 183 343 430 187 378 477
5. 513 622 693 398 513 574

 imix-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.86       5.55 
2. 1.87 5.61

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.70       1.81 
2. 2.73 1.83

3. 22 148 161 22 149 157
4. 75 146 177 87 156 191
5. 169 198 225 153 182 234

 1518b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.75       9.21 
2. 0.75 9.21

3. 41 65 83 41 136 162
4. 181 426 460 271 585 648
5. 464 586 674 541 668 765

 imix-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.72       5.15 
2. 1.74 5.21

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.95       3.32 
2. 4.99 3.36

3. 19 33 78 18 61 78
4. 57 81 93 40 75 98
5. 93 120 135 83 102 123

 64b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.26       5.55 
2. 8.40 5.65

3. 19 44 73 18 47 72
4. 41 57 67 40 58 70
5. 70 96 113 54 65 73

 64b-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 16.57      11.13 
2. 16.93 11.38

3. 30 50 71 24 51 71
4. 31 40 47 32 39 45
5. 65 87 101 45 53 59

 1518b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.72      21.12 
2. 1.73 21.34

3. 23 119 143 23 69 91
4. 60 171 189 86 206 271
5. 143 195 210 183 241 259

 1518b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.82      34.70 
2. 2.83 34.87

3. 23 61 79 23 63 85
4. 58 102 128 56 102 122
5. 96 130 146 85 121 135

 imix-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.42      10.23 
2. 3.46 10.33

 imix-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.66      16.93 
2. 5.68 16.99

 imix-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.14      33.33 
2. 11.18 33.43

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.87       3.27 
2. 4.91 3.30

3. 19 80 87 18 38 58
4. 64 81 89 68 88 99
5. 100 128 153 79 103 125

 64b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.13       5.46 
2. 8.24 5.54

3. 32 62 79 19 43 68
4. 38 53 63 43 59 71
5. 69 95 112 53 64 74

 64b-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 16.36      10.99 
2. 16.66 11.19

3. 25 45 69 20 47 73
4. 35 45 53 36 46 54
5. 66 87 101 47 55 63

 1518b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.36      16.77 
2. 1.37 16.85

3. 23 35 61 23 106 124
4. 85 132 158 107 260 308
5. 166 236 305 228 315 360

 1518b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.28      28.02 
2. 2.28 28.02

3. 24 26 46 23 80 99
4. 48 84 120 52 125 147
5. 95 135 158 95 143 158

 imix-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.10       9.26 
2. 3.13 9.36

 imix-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.19      15.53 
2. 5.21 15.58

 imix-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.19      30.46 
2. 10.24 30.62

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.56       2.39 
2. 3.59 2.41

3. 23 52 121 23 86 110
4. 73 125 152 92 148 167
5. 196 242 274 205 255 285

 1518b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.87      10.75 
2. 0.88 10.86

3. 49 140 187 49 175 200
4. 204 467 519 228 506 580
5. 501 609 681 488 613 680

 imix-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.98       5.93 
2. 1.99 5.96

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  3.07       2.06 
2. 3.09 2.07

3. 22 48 75 22 105 143
4. 63 124 142 85 145 166
5. 161 201 244 163 199 247

 1518b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.75       9.26 
2. 0.76 9.31

3. 41 70 85 41 61 82
4. 230 523 606 212 538 638
5. 537 661 737 536 662 745

 imix-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.85       5.53 
2. 1.87 5.58

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.19       4.16 
2. 6.22 4.18

3. 19 44 73 18 44 57
4. 52 73 90 49 77 88
5. 85 101 115 101 130 155

 64b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.27       4.21 
2. 6.34 4.26

3. 19 57 79 18 39 66
4. 42 64 73 38 57 74
5. 81 100 116 42 57 66

 64b-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.27       4.22 
2. 6.33 4.25

3. 19 52 76 18 48 80
4. 45 64 78 37 59 78
5. 77 98 115 39 56 69

 1518b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.84      22.62 
2. 1.84 22.62

3. 23 41 109 23 75 160
4. 81 148 170 110 188 221
5. 199 255 293 204 277 319

 1518b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.93      23.78 
2. 1.93 23.78

3. 23 65 88 23 38 74
4. 53 78 91 42 91 121
5. 103 146 183 73 119 133

 imix-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.97      11.87 
2. 4.01 11.99

 imix-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.98      11.91 
2. 4.02 12.04

 imix-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.99      11.94 
2. 4.02 12.03

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.09       4.09 
2. 6.12 4.11

3. 27 57 76 18 28 87
4. 49 76 86 57 80 89
5. 99 120 138 98 121 142

 64b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.13       4.12 
2. 6.20 4.16

3. 19 54 78 18 47 74
4. 38 61 70 43 61 80
5. 81 102 121 44 60 70

 64b-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.12       4.11 
2. 6.20 4.17

3. 19 52 77 18 49 76
4. 44 64 75 34 55 78
5. 78 99 118 38 57 71

 1518b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.41      17.34 
2. 1.42 17.42

3. 23 102 121 23 77 97
4. 73 189 205 105 231 250
5. 230 300 335 251 311 336

 1518b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.54      18.99 
2. 1.55 19.08

3. 24 36 54 23 27 50
4. 35 92 122 42 141 162
5. 107 173 196 80 151 178

 imix-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.55      10.63 
2. 3.59 10.74

 imix-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.60      10.77 
2. 3.65 10.92

 imix-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.67      10.99 
2. 3.69 11.04

25ge2p1xxv710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.39       1.61 
2. 2.43 1.63

3. 23 35 70 23 70 85
4. 66 134 153 66 78 84
5. 130 164 196 160 198 223

 1518b-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.81       9.92 
2. 0.82 10.07

3. 55 104 138 55 84 108
4. 185 297 396 133 277 324
5. 438 534 601 397 510 600

 imix-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.55       4.62 
2. 1.56 4.67

25ge2p1xxv710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.19       1.47 
2. 2.23 1.50

3. 22 56 79 22 61 83
4. 53 95 131 53 108 128
5. 145 185 213 117 155 182

 1518b-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.72       8.81 
2. 0.72 8.81

3. 45 111 130 45 96 101
4. 199 509 588 122 273 338
5. 459 587 651 343 444 520

 imix-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.47       4.39 
2. 1.48 4.44

25ge2p1xxv710-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.42       2.30 
2. 3.44 2.31

3. 19 56 70 27 50 77
4. 41 64 74 53 90 116
5. 88 108 128 87 116 135

 64b-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.23       4.19 
2. 6.39 4.29

3. 20 50 72 19 49 75
4. 41 55 67 41 58 71
5. 80 98 116 64 79 92

 64b-8t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.28       8.25 
2. 12.71 8.54

3. 35 53 74 35 56 72
4. 33 42 50 35 44 53
5. 65 78 90 61 73 84

 1518b-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.42      17.44 
2. 1.42 17.53

3. 24 49 73 24 72 85
4. 68 109 156 55 133 170
5. 206 254 284 176 216 243

 1518b-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.53      31.18 
2. 2.53 31.18

3. 24 34 65 24 52 77
4. 52 87 97 58 95 115
5. 91 106 121 147 162 177

 imix-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.45       7.32 
2. 2.48 7.43

 imix-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.81      14.39 
2. 4.81 14.39

 imix-8t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.94      26.73 
2. 8.98 26.87

25ge2p1xxv710-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.33       2.24 
2. 3.35 2.25

3. 19 56 84 34 58 84
4. 47 92 123 45 66 85
5. 92 117 131 87 114 133

 64b-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.07       4.08 
2. 6.22 4.18

3. 22 46 76 37 64 78
4. 40 53 67 37 55 66
5. 74 92 108 61 75 86

 64b-8t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 11.97       8.05 
2. 12.28 8.25

3. 33 62 81 38 65 79
4. 32 41 48 33 42 50
5. 70 85 98 60 73 84

 1518b-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.18      14.49 
2. 1.18 14.49

3. 24 40 69 24 61 78
4. 49 159 216 116 250 298
5. 177 234 267 212 279 321

 1518b-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.11      26.02 
2. 2.14 26.28

3. 25 53 75 24 46 72
4. 51 88 106 62 110 131
5. 113 146 169 119 147 172

 imix-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.28       6.80 
2. 2.28 6.81

 imix-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.42      13.22 
2. 4.44 13.29

 imix-8t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.21      24.55 
2. 8.33 24.92

25ge2p1xxv710-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.70       1.14 
2. 1.73 1.16

3. 24 80 112 23 108 141
4. 91 209 229 125 245 272
5. 187 247 272 206 268 334

 1518b-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.70       8.62 
2. 0.71 8.69

3. 50 106 130 51 133 161
4. 216 539 571 284 577 674
5. 430 573 670 536 683 770

 imix-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.16       3.47 
2. 1.18 3.54

25ge2p1xxv710-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.52       1.02 
2. 1.57 1.06

3. 23 29 127 23 85 123
4. 103 202 215 92 214 229
5. 179 263 303 228 305 365

 1518b-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.63       7.76 
2. 0.63 7.80

3. 42 64 87 42 149 172
4. 339 754 787 221 630 673
5. 595 804 864 632 824 877

 imix-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.09       3.26 
2. 1.12 3.34

25ge2p1xxv710-ethip4ipsec60000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.15       1.44 
2. 2.21 1.49

3. 19 66 107 19 81 103
4. 79 147 194 64 150 187
5. 119 166 199 133 192 231

 64b-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.72       2.50 
2. 3.89 2.62

3. 20 61 82 19 30 44
4. 49 89 110 54 104 124
5. 96 115 131 103 119 141

 64b-8t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.10       4.77 
2. 7.21 4.84

3. 20 40 60 20 46 76
4. 48 65 74 42 59 69
5. 72 90 107 69 83 95

 1518b-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.10      13.60 
2. 1.10 13.60

3. 24 46 64 24 120 141
4. 158 306 365 177 338 399
5. 181 261 295 267 370 426

 1518b-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.01      24.75 
2. 2.01 24.75

3. 25 41 57 24 58 78
4. 59 114 146 62 153 175
5. 124 171 187 121 170 187

 imix-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.59       4.76 
2. 1.63 4.88

 imix-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.07       9.19 
2. 3.14 9.38

 imix-8t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.91      17.68 
2. 5.94 17.76

25ge2p1xxv710-ethip4ipsec60000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.10       1.41 
2. 2.15 1.44

3. 19 81 117 19 118 141
4. 55 144 170 99 186 217
5. 135 182 217 132 187 215

 64b-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.69       2.48 
2. 3.71 2.49

3. 20 59 81 19 38 60
4. 46 71 92 47 89 112
5. 100 127 149 94 121 145

 64b-8t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.83       4.59 
2. 6.93 4.66

3. 20 51 67 20 62 76
4. 39 59 70 48 67 75
5. 80 100 118 70 85 101

 1518b-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.94      11.60 
2. 0.94 11.60

3. 25 50 69 24 116 152
4. 90 314 343 157 378 418
5. 296 391 423 298 424 475

 1518b-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.77      21.81 
2. 1.77 21.81

3. 25 43 122 25 42 131
4. 62 146 176 67 171 199
5. 137 193 224 128 194 227

 imix-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.50       4.49 
2. 1.53 4.58

 imix-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.88       8.61 
2. 2.92 8.74

 imix-8t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.54      16.56 
2. 5.57 16.65