3n-skx-xxv710

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.78       3.24 
2. 2.88 3.36

3. 23 76 107 23 51 95
4. 64 101 123 60 114 137
5. 152 189 220 122 150 170

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.85      10.83 
2. 0.86 11.05

3. 53 95 115 53 160 198
4. 252 480 514 256 508 538
5. 403 510 573 440 572 625

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.67       5.84 
2. 1.80 6.26

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.56       3.32 
2. 2.63 3.41

3. 22 23 24 22 31 48
4. 59 92 114 69 116 141
5. 129 155 169 140 167 200

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.73       9.42 
2. 0.75 9.76

3. 44 119 124 44 54 65
4. 120 242 279 143 246 331
5. 336 394 460 463 601 636

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.60       5.78 
2. 1.70 6.14

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.43       4.90 
2. 4.57 5.04

3. 19 25 29 18 30 37
4. 36 51 63 60 73 83
5. 78 99 113 70 88 103

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.48       9.36 
2. 8.65 9.55

3. 19 27 43 19 30 41
4. 37 52 62 34 52 70
5. 73 87 100 77 106 135

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 16.51      18.22 
2. 17.10 18.88

3. 21 34 51 19 33 41
4. 35 46 57 32 39 45
5. 85 106 125 63 75 85

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.59      20.20 
2. 1.68 21.35

3. 23 50 62 23 39 57
4. 57 103 142 51 104 135
5. 141 182 215 131 166 201

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.97      37.78 
2. 3.18 40.52

3. 24 36 50 23 33 72
4. 53 69 80 49 89 106
5. 113 136 153 111 135 158

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.01      10.30 
2. 3.26 11.16

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.84      20.00 
2. 6.18 21.14

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.31      38.73 
2. 11.72 40.11

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.97       4.38 
2. 4.37 4.82

3. 19 28 43 18 23 30
4. 40 59 78 19 60 84
5. 75 91 109 70 90 106

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.08       8.92 
2. 8.46 9.34

3. 19 32 40 19 28 38
4. 35 51 65 33 45 54
5. 82 100 117 67 80 93

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 15.66      17.29 
2. 16.38 18.08

3. 24 36 46 24 38 51
4. 33 40 46 34 42 48
5. 65 77 88 63 75 86

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.22      15.55 
2. 1.28 16.27

3. 24 75 104 23 28 112
4. 66 177 200 89 234 265
5. 226 302 353 162 211 246

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.36      30.12 
2. 2.45 31.19

3. 24 59 78 24 66 77
4. 52 68 84 50 86 102
5. 99 117 134 112 134 150

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.30       7.88 
2. 2.86 9.78

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.44      18.62 
2. 5.75 19.68

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.25      35.07 
2. 10.77 36.88

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.98       3.48 
2. 2.98 3.48

3. 23 105 134 23 98 125
4. 72 150 173 103 157 183
5. 168 200 242 156 189 230

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.88      11.26 
2. 0.88 11.26

3. 55 116 148 53 118 149
4. 168 339 371 206 387 412
5. 429 540 612 492 617 682

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.84       6.42 
2. 1.87 6.52

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.69       3.49 
2. 2.72 3.52

3. 22 96 122 22 79 105
4. 58 123 143 86 154 176
5. 172 204 254 123 159 202

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.75       9.71 
2. 0.76 9.81

3. 44 48 120 44 46 50
4. 126 303 337 133 281 344
5. 393 505 531 374 474 553

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.75       6.32 
2. 1.77 6.39

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.92       5.43 
2. 4.94 5.45

3. 19 57 68 18 74 81
4. 35 74 87 50 84 98
5. 86 112 128 79 97 111

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.61      10.61 
2. 9.80 10.82

3. 19 34 58 19 33 47
4. 37 53 62 36 55 62
5. 77 93 108 64 77 88

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 21.19      23.40 
2. 21.41 23.63

3. 19 32 39 19 30 40
4. 32 38 43 31 38 44
5. 67 79 88 59 69 76

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.72      21.96 
2. 1.74 22.18

3. 23 28 45 23 107 126
4. 92 204 223 70 146 179
5. 186 233 262 114 139 154

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.31      42.16 
2. 3.34 42.53

3. 23 33 52 23 37 72
4. 53 109 154 56 106 119
5. 152 201 231 120 147 162

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.56      12.19 
2. 3.60 12.31

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.99      23.92 
2. 7.09 24.28

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.16      41.62 
2. 12.54 42.91

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.73       5.22 
2. 4.77 5.27

3. 19 19 50 18 32 50
4. 32 38 50 46 61 73
5. 86 109 122 89 106 119

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.21      10.16 
2. 9.44 10.42

3. 19 32 42 19 50 60
4. 43 54 61 50 58 64
5. 79 96 113 67 82 97

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 20.88      23.05 
2. 21.09 23.28

3. 24 38 50 24 36 49
4. 32 40 45 32 40 45
5. 64 75 83 59 68 77

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.36      17.36 
2. 1.38 17.54

3. 24 36 47 23 102 132
4. 48 121 140 89 203 244
5. 217 306 329 201 276 294

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.64      33.68 
2. 2.70 34.36

3. 24 42 56 24 50 60
4. 42 75 90 65 103 122
5. 123 146 163 122 149 172

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.17      10.86 
2. 3.22 11.03

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.39      21.88 
2. 6.49 22.21

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 13.13      44.93 
2. 13.19 45.16

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.51       0.60 
2. 0.52 0.60

3. 29 56 145 29 39 151
4. 206 760 1059 327 908 1251
5. 859 1428 1697 894 1444 1711

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.38       4.89 
2. 0.38 4.89

3. 61 114 127 61 73 99
4. 191 592 811 256 605 786
5. 918 1427 1695 1029 1720 2179

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.43       1.52 
2. 0.47 1.63

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.51       0.66 
2. 0.51 0.66

3. 28 32 87 28 32 103
4. 206 752 1059 299 877 1233
5. 866 1423 1696 871 1427 1704

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.36       4.59 
2. 0.36 4.64

3. 52 87 102 50 74 124
4. 150 485 684 177 512 731
5. 879 1522 1768 945 1666 2093

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.41       1.47 
2. 0.46 1.67

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.55       0.61 
2. 0.55 0.61

3. 24 29 101 24 29 144
4. 213 742 1035 204 763 1120
5. 802 1422 1696 805 1423 1697

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.47       6.04 
2. 0.48 6.07

3. 29 47 73 29 33 56
4. 107 418 671 148 396 555
5. 506 966 1265 556 1162 1426

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.52       1.78 
2. 0.53 1.81

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.55       0.60 
2. 0.55 0.61

3. 24 29 91 24 29 131
4. 209 713 971 232 796 1125
5. 759 1408 1696 777 1416 1683

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.45       5.72 
2. 0.45 5.75

3. 30 58 84 29 40 86
4. 122 363 523 175 493 668
5. 504 1064 1415 626 1174 1437

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.44       1.51 
2. 0.52 1.78

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  3.69       4.31 
2. 3.73 4.35

3. 23 54 72 23 45 50
4. 57 79 95 64 94 113
5. 173 203 226 173 205 227

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.90      11.58 
2. 0.91 11.70

3. 53 145 163 53 155 167
4. 122 180 195 200 372 443
5. 428 495 559 496 616 669

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.06       7.20 
2. 2.08 7.26

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.26       4.22 
2. 3.30 4.28

3. 23 84 98 22 48 59
4. 70 112 131 73 130 158
5. 144 173 193 156 182 204

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.77       9.95 
2. 0.78 10.04

3. 44 84 91 44 119 148
4. 158 447 498 269 578 600
5. 534 662 750 504 630 796

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.94       7.00 
2. 1.95 7.03

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.81       7.52 
2. 6.88 7.60

3. 19 35 52 18 31 43
4. 42 59 70 38 54 70
5. 86 100 111 86 99 111

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.97       7.70 
2. 6.99 7.72

3. 19 24 39 18 28 37
4. 35 45 55 36 47 55
5. 83 97 107 84 98 109

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.96       7.69 
2. 7.07 7.80

3. 19 19 43 18 25 28
4. 42 67 74 41 52 61
5. 86 100 110 90 107 121

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.57      20.02 
2. 1.62 20.64

3. 27 77 97 23 47 67
4. 78 120 131 65 183 199
5. 190 242 260 125 158 190

 1518b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.36      30.07 
2. 2.36 30.07

3. 23 41 55 23 68 84
4. 87 120 150 70 128 141
5. 132 153 170 170 216 246

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.62      15.80 
2. 4.66 15.96

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.61      15.79 
2. 4.67 15.98

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.63      15.84 
2. 4.71 16.12

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.96       5.48 
2. 5.25 5.80

3. 21 36 47 19 29 52
4. 41 62 73 32 59 69
5. 124 161 189 59 72 83

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.70       7.40 
2. 6.77 7.48

3. 19 33 39 18 19 27
4. 36 49 60 41 59 69
5. 89 105 120 89 102 113

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.74       7.44 
2. 6.79 7.49

3. 20 37 40 19 34 41
4. 38 57 71 45 70 87
5. 90 105 119 89 104 119

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.50      19.08 
2. 1.51 19.18

3. 23 88 106 23 110 131
4. 30 155 172 133 234 266
5. 231 312 343 228 313 343

 1518b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.50      19.08 
2. 1.51 19.17

3. 23 25 42 23 49 73
4. 35 156 177 121 219 249
5. 217 279 324 241 310 350

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.06      13.88 
2. 4.10 14.02

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.27      14.61 
2. 4.31 14.76

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.09      13.99 
2. 4.13 14.12

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  2.86       3.34 
2. 2.95 3.44

3. 27 53 143 23 70 90
4. 67 119 144 72 149 174
5. 171 209 264 127 160 185

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.88      11.29 
2. 0.89 11.33

3. 53 154 169 53 116 125
4. 219 490 525 225 429 519
5. 503 633 703 472 593 652

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.91       6.65 
2. 1.93 6.72

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  3.03       3.92 
2. 3.05 3.96

3. 23 65 79 23 64 71
4. 58 86 105 68 98 127
5. 131 151 163 165 202 229

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.75       9.70 
2. 0.76 9.79

3. 44 89 109 44 108 123
4. 242 563 657 214 530 547
5. 523 667 810 510 650 776

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.78       6.44 
2. 1.80 6.51

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  5.91       6.52 
2. 5.97 6.59

3. 19 49 59 19 20 21
4. 39 54 65 45 69 89
5. 91 106 124 95 116 133

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.93      24.61 
2. 1.94 24.73

3. 23 34 69 23 62 81
4. 58 121 151 78 137 155
5. 164 216 239 147 175 211

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  4.09      14.00 
2. 4.13 14.14

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  5.81       6.41 
2. 5.87 6.48

3. 19 35 48 19 20 28
4. 47 64 76 48 73 87
5. 95 112 129 96 114 132

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.47      18.76 
2. 1.49 18.94

3. 24 77 93 24 78 97
4. 78 202 221 79 182 207
5. 212 285 315 238 319 355

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.67      12.56 
2. 3.73 12.75

25ge2p1xxv710-avf-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.45       2.86 
2. 2.66 3.10

3. 23 45 138 23 82 114
4. 59 100 142 61 101 121
5. 160 190 376 117 157 222

 1518b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.82      10.46 
2. 0.85 10.84

3. 53 78 120 53 84 104
4. 180 300 317 126 270 308
5. 405 493 656 428 539 649

 imix-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.52       5.30 
2. 1.66 5.78

25ge2p1xxv710-avf-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.15       2.78 
2. 2.43 3.16

3. 23 27 46 22 36 51
4. 104 153 167 44 86 142
5. 136 188 602 105 148 371

 1518b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.71       9.17 
2. 0.73 9.45

3. 44 68 80 44 79 87
4. 193 368 423 127 299 372
5. 379 477 527 362 478 540

 imix-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.41       5.08 
2. 1.56 5.64

25ge2p1xxv710-avf-ethip4ipsec20000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.65       4.03 
2. 4.16 4.59

3. 19 38 45 18 31 36
4. 40 64 75 38 64 76
5. 87 109 140 81 106 135

 64b-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.04       7.77 
2. 7.52 8.30

3. 19 19 24 19 20 27
4. 35 51 64 32 44 57
5. 72 94 131 66 81 96

 64b-8t4c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 13.37      14.76 
2. 14.13 15.60

3. 21 35 53 22 40 51
4. 35 43 50 35 43 49
5. 66 80 94 64 78 93

 1518b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.46      18.57 
2. 1.54 19.62

3. 24 28 59 23 38 66
4. 39 150 165 36 140 152
5. 160 212 256 188 241 287

 1518b-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.79      35.49 
2. 2.87 36.58

3. 24 47 62 23 31 43
4. 45 64 82 47 85 99
5. 112 143 166 112 143 161

 imix-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.47       8.46 
2. 2.86 9.78

 imix-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.90      16.76 
2. 5.33 18.25

 imix-8t4c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.22      31.55 
2. 9.64 33.00

25ge2p1xxv710-avf-ethip4ipsec20000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.42       3.77 
2. 3.87 4.28

3. 19 21 47 19 35 53
4. 37 69 86 39 62 70
5. 79 107 147 78 111 128

 64b-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.34       7.00 
2. 6.97 7.70

3. 19 25 38 19 42 60
4. 32 48 65 45 53 58
5. 74 98 127 59 72 86

 64b-8t4c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 12.38      13.67 
2. 13.02 14.37

3. 20 36 46 19 36 48
4. 33 41 49 33 42 49
5. 62 74 86 66 82 98

 1518b-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.16      14.76 
2. 1.23 15.62

3. 24 50 68 24 28 36
4. 46 129 148 55 107 126
5. 262 341 384 131 174 201

 1518b-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.27      28.89 
2. 2.35 29.92

3. 24 39 52 24 80 100
4. 66 124 135 48 65 79
5. 116 158 187 103 126 144

 imix-2t1c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.20       7.54 
2. 2.55 8.73

 imix-4t2c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.32      14.80 
2. 4.71 16.11

 imix-8t4c-avf-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.46      28.95 
2. 8.94 30.59

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.05       2.39 
2. 2.27 2.66

3. 24 62 79 23 65 173
4. 61 77 89 107 184 233
5. 156 198 686 134 176 627

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.78       9.99 
2. 0.81 10.35

3. 54 122 135 53 63 78
4. 230 427 534 192 398 429
5. 519 647 747 446 554 598

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.36       4.74 
2. 1.47 5.13

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.76       2.28 
2. 2.09 2.71

3. 23 82 108 23 142 178
4. 68 139 172 108 204 243
5. 120 170 766 187 243 730

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.68       8.80 
2. 0.70 9.11

3. 45 91 101 46 76 81
4. 273 501 553 153 313 348
5. 573 687 724 328 422 484

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.30       4.68 
2. 1.38 4.97

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.00       3.31 
2. 3.33 3.68

3. 19 35 49 19 29 54
4. 44 99 128 50 77 96
5. 119 153 497 82 116 379

 64b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.44       6.01 
2. 5.84 6.45

3. 19 20 29 19 26 33
4. 39 61 79 36 60 78
5. 76 96 160 66 81 103

 64b-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.60      11.70 
2. 10.98 12.12

3. 19 31 42 20 37 51
4. 35 44 53 36 46 55
5. 71 88 111 63 76 91

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.38      17.58 
2. 1.43 18.20

3. 24 30 54 23 25 106
4. 100 216 245 72 192 260
5. 207 281 313 219 288 322

 1518b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.58      32.92 
2. 2.62 33.42

3. 24 41 54 24 32 51
4. 53 81 93 62 101 118
5. 97 123 150 119 149 168

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.14       7.31 
2. 2.33 7.96

 imix-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.26      14.59 
2. 4.46 15.27

 imix-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.15      27.91 
2. 8.44 28.90

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.90       3.20 
2. 3.08 3.40

3. 19 58 107 19 42 61
4. 62 116 134 52 110 131
5. 116 157 506 87 120 455

 64b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.10       5.63 
2. 5.47 6.04

3. 19 37 41 19 37 52
4. 31 47 62 37 69 84
5. 76 96 267 70 91 119

 64b-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.11      11.16 
2. 10.47 11.56

3. 23 39 51 20 37 50
4. 35 45 55 34 44 53
5. 72 90 115 68 82 100

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.12      14.27 
2. 1.15 14.63

3. 24 35 56 24 83 135
4. 97 284 325 150 313 366
5. 262 344 383 280 378 411

 1518b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.15      27.36 
2. 2.17 27.63

3. 25 33 53 24 47 59
4. 33 71 105 47 91 105
5. 113 146 170 118 156 185

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.96       6.71 
2. 2.10 7.20

 imix-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.77      12.89 
2. 3.96 13.55

 imix-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.39      25.29 
2. 7.62 26.07

25ge2p1xxv710-avf-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  3.04       3.55 
2. 3.08 3.60

3. 23 76 131 23 123 147
4. 74 128 150 104 172 178
5. 158 190 236 138 186 242

 1518b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.88      11.25 
2. 0.88 11.25

3. 53 75 116 56 91 101
4. 157 330 388 134 290 338
5. 400 469 527 450 539 584

 imix-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.90       6.61 
2. 1.91 6.67

25ge2p1xxv710-avf-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.75       3.57 
2. 2.78 3.61

3. 22 47 58 22 151 162
4. 44 119 148 93 159 190
5. 159 192 238 137 193 244

 1518b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.76       9.78 
2. 0.76 9.78

3. 44 64 91 44 67 73
4. 126 231 257 130 222 313
5. 334 413 485 364 453 505

 imix-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.79       6.48 
2. 1.80 6.51

25ge2p1xxv710-avf-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.24       5.79 
2. 5.33 5.88

3. 19 46 75 18 45 81
4. 38 77 103 56 81 96
5. 95 111 131 90 105 119

 64b-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.07      12.22 
2. 11.27 12.44

3. 19 22 31 19 26 35
4. 35 46 53 36 50 59
5. 76 91 102 67 80 90

 64b-8t4c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 22.91      25.29 
2. 23.26 25.68

3. 25 35 44 19 34 44
4. 34 40 45 32 38 44
5. 74 85 94 65 76 84

 1518b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.75      22.32 
2. 1.77 22.54

3. 23 64 84 23 76 97
4. 73 114 138 78 164 194
5. 147 191 218 153 185 222

 1518b-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.44      43.83 
2. 3.51 44.72

3. 23 33 44 23 83 103
4. 52 93 103 63 98 114
5. 133 158 175 132 159 177

 imix-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.67      12.57 
2. 3.73 12.76

 imix-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.65      26.18 
2. 7.76 26.55

 imix-8t4c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 14.24      48.76 
2. 14.24 48.76

25ge2p1xxv710-avf-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.03       5.56 
2. 5.11 5.64

3. 18 41 58 18 61 79
4. 37 64 78 51 80 93
5. 95 115 125 70 105 118

 64b-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.87      12.00 
2. 11.09 12.24

3. 19 32 41 18 27 36
4. 37 50 61 32 42 51
5. 75 88 97 68 79 89

 64b-8t4c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 22.48      24.82 
2. 22.82 25.20

3. 25 36 42 24 38 54
4. 33 41 48 32 39 44
5. 74 85 94 66 76 85

 1518b-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.38      17.51 
2. 1.39 17.69

3. 24 77 92 23 75 88
4. 76 193 243 81 201 223
5. 233 318 346 195 236 261

 1518b-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.71      34.52 
2. 2.76 35.15

3. 24 54 79 24 39 56
4. 41 71 97 53 102 115
5. 146 173 188 121 146 162

 imix-2t1c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.30      11.28 
2. 3.35 11.46

 imix-4t2c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.84      23.42 
2. 6.91 23.65

 imix-8t4c-avf-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 14.25      48.76 
2. 14.25 48.76

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  3.40       3.97 
2. 3.43 4.01

3. 23 48 76 23 57 89
4. 63 125 140 67 101 130
5. 170 212 242 147 177 199

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.90      11.52 
2. 0.90 11.58

3. 56 81 110 55 127 155
4. 139 240 262 152 294 321
5. 453 550 617 464 556 629

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.02       7.03 
2. 2.03 7.08

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.02       3.91 
2. 3.06 3.97

3. 22 53 97 22 62 86
4. 55 118 137 77 133 146
5. 161 195 228 138 179 215

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.77       9.90 
2. 0.77 10.00

3. 44 73 87 44 63 77
4. 185 425 518 255 496 599
5. 519 663 767 403 511 592

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.89       6.85 
2. 1.90 6.87

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.92       6.53 
2. 5.98 6.60

3. 21 58 66 18 42 47
4. 45 70 82 34 63 70
5. 90 108 130 80 96 111

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.73      12.95 
2. 11.92 13.16

3. 25 39 44 19 25 35
4. 40 56 64 39 50 59
5. 79 92 101 75 88 99

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.39       8.15 
2. 7.47 8.25

3. 19 40 53 18 19 22
4. 35 54 71 25 37 45
5. 69 84 96 30 40 47

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.88      24.00 
2. 1.90 24.24

3. 23 69 83 23 59 100
4. 69 124 141 100 175 194
5. 189 246 262 180 236 255

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.53      45.00 
2. 3.56 45.28

3. 23 43 60 23 37 49
4. 52 86 105 56 77 90
5. 117 140 157 100 124 139

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.17      14.26 
2. 4.23 14.48

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.33      14.83 
2. 4.35 14.88

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 14.17      48.51 
2. 14.24 48.76

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.83       6.44 
2. 5.89 6.50

3. 19 46 59 18 19 20
4. 40 86 93 46 81 101
5. 95 112 134 87 102 118

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.71      10.72 
2. 9.98 11.02

3. 19 26 37 18 32 42
4. 35 45 56 32 42 49
5. 73 96 108 48 57 65

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 20.12      22.21 
2. 20.73 22.88

3. 27 40 51 26 40 52
4. 32 39 44 32 38 42
5. 75 96 108 49 57 65

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.45      18.46 
2. 1.46 18.65

3. 23 24 25 23 25 34
4. 57 109 122 48 157 231
5. 177 223 259 210 272 301

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.51      31.95 
2. 2.54 32.36

3. 24 32 44 23 31 42
4. 41 89 108 41 66 85
5. 88 106 118 86 114 135

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.71      12.71 
2. 3.77 12.92

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.32      25.04 
2. 7.42 25.41

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 14.17      48.50 
2. 14.28 48.87

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  3.67       4.29 
2. 3.71 4.33

3. 23 45 54 23 61 78
4. 72 128 154 96 150 174
5. 180 224 246 179 223 243

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.91      11.61 
2. 0.91 11.67

3. 53 110 125 53 129 148
4. 127 275 301 261 452 524
5. 448 537 647 490 605 677

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.06       7.18 
2. 2.07 7.21

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.25       4.21 
2. 3.27 4.24

3. 22 76 100 22 103 118
4. 66 125 154 94 161 186
5. 164 199 243 151 191 236

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.77       9.94 
2. 0.77 9.99

3. 44 86 90 43 94 123
4. 158 283 350 94 305 366
5. 435 529 571 392 470 520

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.92       6.94 
2. 1.94 7.01

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.78       7.49 
2. 6.83 7.54

3. 19 47 60 19 49 81
4. 41 61 72 59 80 93
5. 90 106 124 85 101 117

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.61       8.40 
2. 7.73 8.53

3. 19 19 20 18 28 36
4. 32 45 57 32 48 59
5. 74 86 95 72 85 94

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.65       8.45 
2. 7.75 8.55

3. 19 19 31 18 25 36
4. 39 59 69 29 42 50
5. 67 79 89 64 75 85

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.97      25.04 
2. 1.98 25.17

3. 23 24 28 23 59 69
4. 56 123 143 57 132 159
5. 191 241 262 170 212 232

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.54      45.10 
2. 3.56 45.28

3. 23 58 110 23 61 78
4. 62 119 133 52 80 96
5. 110 136 155 108 130 150

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.57      15.63 
2. 4.61 15.79

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.61      15.78 
2. 4.66 15.94

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.03      30.92 
2. 9.13 31.23

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.63       7.32 
2. 6.70 7.40

3. 19 24 37 18 40 62
4. 44 67 78 53 81 92
5. 92 108 127 92 107 124

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 13.26      14.64 
2. 13.46 14.86

3. 19 31 50 19 27 41
4. 38 52 61 38 53 62
5. 88 103 115 88 103 114

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.74       7.44 
2. 6.85 7.56

3. 19 34 39 18 19 34
4. 30 52 61 29 48 58
5. 75 91 108 48 61 69

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.48      18.87 
2. 1.49 18.96

3. 23 24 50 23 49 70
4. 67 180 211 111 219 246
5. 210 259 309 199 270 300

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.48      18.88 
2. 1.50 19.08

3. 23 45 68 23 85 106
4. 37 144 179 55 143 177
5. 136 203 246 109 174 212

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.00      13.71 
2. 4.04 13.84

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.33      14.81 
2. 4.37 14.96

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.16      14.23 
2. 4.20 14.38

25ge2p1xxv710-avf-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  2.89       3.37 
2. 2.93 3.42

3. 23 79 94 23 106 121
4. 63 124 147 88 154 189
5. 171 203 247 155 207 247

 1518b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.86      11.07 
2. 0.87 11.18

3. 53 108 136 53 96 113
4. 195 410 432 137 261 284
5. 431 505 584 433 505 571

 imix-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.78       6.22 
2. 1.82 6.35

25ge2p1xxv710-avf-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.66       3.45 
2. 2.69 3.49

3. 22 100 117 22 140 169
4. 57 118 149 86 165 179
5. 180 210 254 125 153 196

 1518b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.74       9.60 
2. 0.75 9.69

3. 44 48 87 44 77 80
4. 110 248 278 155 266 283
5. 425 531 563 367 495 539

 imix-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.71       6.18 
2. 1.74 6.27

25ge2p1xxv710-avf-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.72       5.21 
2. 4.79 5.29

3. 19 20 49 18 19 21
4. 39 51 62 43 55 62
5. 92 114 129 81 106 123

 64b-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.49       9.37 
2. 8.92 9.85

3. 19 28 37 18 33 46
4. 27 40 51 33 54 64
5. 69 82 93 67 81 95

 64b-8t4c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 17.32      19.13 
2. 17.85 19.71

3. 19 31 39 19 31 44
4. 33 41 48 31 38 43
5. 68 81 90 59 69 78

 1518b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.69      21.56 
2. 1.73 21.99

3. 23 26 52 23 47 56
4. 62 137 154 49 124 150
5. 175 213 243 127 170 188

 1518b-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.22      41.03 
2. 3.30 42.08

3. 23 43 54 23 45 65
4. 44 81 103 53 82 102
5. 118 140 156 113 131 144

 imix-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.29      11.27 
2. 3.32 11.38

 imix-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.45      22.09 
2. 6.58 22.54

 imix-8t4c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.96      44.36 
2. 13.16 45.03

25ge2p1xxv710-avf-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.60       5.07 
2. 4.64 5.12

3. 19 58 74 18 82 99
4. 51 84 98 20 91 108
5. 91 115 130 81 101 115

 64b-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.70       9.61 
2. 8.97 9.90

3. 19 26 36 19 36 45
4. 36 52 66 39 51 60
5. 75 89 101 69 81 90

 64b-8t4c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 16.87      18.62 
2. 17.12 18.90

3. 19 32 41 19 33 46
4. 34 42 48 34 42 47
5. 65 78 88 57 68 77

 1518b-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.32      16.81 
2. 1.36 17.32

3. 24 24 25 23 57 76
4. 54 175 204 96 229 254
5. 217 283 308 208 277 319

 1518b-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.56      32.66 
2. 2.59 32.99

3. 24 25 28 24 47 57
4. 47 72 88 45 79 87
5. 107 136 153 90 105 117

 imix-2t1c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.95      10.10 
2. 3.01 10.31

 imix-4t2c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.83      19.96 
2. 5.92 20.27

 imix-8t4c-avf-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 11.63      39.82 
2. 11.87 40.63

25ge2p1xxv710-avf-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.92       2.25 
2. 2.06 2.41

3. 24 65 93 24 58 73
4. 85 141 166 61 117 166
5. 137 180 643 140 179 209

 1518b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  0.78       9.98 
2. 0.80 10.18

3. 55 68 110 56 69 85
4. 113 250 301 162 319 378
5. 403 498 575 433 581 734

 imix-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac256sha-ndrpdr

 1.  1.33       4.65 
2. 1.39 4.84

25ge2p1xxv710-avf-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.85       2.40 
2. 1.93 2.50

3. 23 87 157 23 28 89
4. 78 164 208 67 111 128
5. 152 198 723 143 194 235

 1518b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.67       8.68 
2. 0.69 8.95

3. 45 54 67 46 132 159
4. 133 239 308 206 462 516
5. 450 537 584 433 522 582

 imix-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.23       4.44 
2. 1.30 4.71

25ge2p1xxv710-avf-ethip4ipsec60000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.65       2.93 
2. 3.02 3.33

3. 19 47 62 19 29 58
4. 32 77 95 35 67 93
5. 103 129 498 100 126 182

 64b-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.04       5.56 
2. 5.38 5.94

3. 19 36 54 19 36 43
4. 38 57 70 36 53 67
5. 74 92 169 75 90 112

 64b-8t4c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.86      10.88 
2. 10.31 11.39

3. 20 35 46 19 34 45
4. 38 50 59 34 44 51
5. 75 90 118 58 70 83

 1518b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.33      16.98 
2. 1.37 17.50

3. 24 24 25 24 64 92
4. 71 207 235 61 138 173
5. 214 298 327 153 205 251

 1518b-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.51      31.94 
2. 2.57 32.75

3. 24 25 30 24 33 45
4. 49 78 92 55 85 100
5. 108 135 172 86 104 121

 imix-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.04       6.97 
2. 2.18 7.47

 imix-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.99      13.67 
2. 4.14 14.15

 imix-8t4c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.80      26.71 
2. 8.08 27.67

25ge2p1xxv710-avf-ethip4ipsec60000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.58       2.85 
2. 2.83 3.12

3. 19 22 40 19 51 75
4. 42 85 112 55 103 138
5. 84 117 339 97 122 176

 64b-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.84       5.34 
2. 5.09 5.62

3. 19 22 29 19 23 52
4. 36 59 74 36 70 86
5. 91 107 215 90 106 125

 64b-8t4c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.28      10.24 
2. 9.61 10.61

3. 20 36 48 20 35 45
4. 42 53 63 33 43 52
5. 73 90 120 55 66 78

 1518b-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.10      14.01 
2. 1.12 14.22

3. 24 41 51 24 26 46
4. 112 297 328 106 267 320
5. 157 206 243 220 305 329

 1518b-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.11      26.88 
2. 2.14 27.29

3. 25 26 68 24 43 56
4. 50 99 123 53 112 154
5. 122 156 181 112 161 196

 imix-2t1c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.88       6.43 
2. 1.97 6.73

 imix-4t2c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.66      12.53 
2. 3.83 13.11

 imix-8t4c-avf-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.25      24.81 
2. 7.43 25.44

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.60       3.04 
2. 2.72 3.18

3. 23 65 84 23 50 79
4. 68 94 104 78 137 152
5. 176 209 249 112 147 181

 1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.82      10.44 
2. 0.84 10.81

3. 57 88 108 57 86 114
4. 182 302 329 185 270 324
5. 412 489 557 399 481 540

 imix-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.56       5.43 
2. 1.65 5.74

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.38       3.08 
2. 2.51 3.26

3. 22 37 52 22 50 81
4. 55 88 128 56 84 100
5. 110 139 164 141 169 213

 1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.71       9.17 
2. 0.73 9.44

3. 46 73 149 46 71 93
4. 158 355 434 167 405 481
5. 403 500 578 419 530 620

 imix-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.51       5.46 
2. 1.58 5.72

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.06       4.49 
2. 4.17 4.60

3. 30 61 79 23 46 63
4. 47 67 85 46 66 84
5. 87 108 130 75 94 112

 64b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.70       8.50 
2. 7.93 8.76

3. 19 39 61 19 46 75
4. 36 48 59 46 68 78
5. 72 87 102 61 75 88

 64b-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 14.19      15.67 
2. 14.70 16.23

3. 33 50 67 32 51 66
4. 36 44 51 32 41 49
5. 62 74 85 59 70 81

 1518b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.41      17.96 
2. 1.51 19.26

3. 24 70 82 23 35 53
4. 83 190 221 117 238 267
5. 165 218 247 160 211 255

 1518b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.55      32.52 
2. 2.64 33.69

3. 24 48 76 24 55 80
4. 55 112 127 52 77 92
5. 93 114 137 89 109 127

 imix-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.60       8.90 
2. 2.82 9.64

 imix-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.05      17.27 
2. 5.30 18.16

 imix-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.40      32.17 
2. 9.49 32.49

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.60       3.97 
2. 4.06 4.48

3. 19 46 83 18 42 71
4. 47 70 86 49 80 101
5. 92 114 135 78 101 122

 64b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.34       8.10 
2. 7.64 8.44

3. 34 58 77 30 59 77
4. 36 45 53 42 56 66
5. 64 80 92 68 83 93

 64b-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 13.41      14.81 
2. 13.82 15.26

3. 35 51 72 26 53 77
4. 27 38 48 37 45 52
5. 63 76 88 54 65 76

 1518b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.14      14.51 
2. 1.21 15.40

3. 24 51 68 24 62 85
4. 75 109 187 71 121 180
5. 171 221 264 190 256 336

 1518b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.11      26.84 
2. 2.16 27.53

3. 24 41 72 24 47 77
4. 54 120 140 62 107 123
5. 96 117 134 113 140 162

 imix-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.36       8.06 
2. 2.62 8.96

 imix-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.49      15.36 
2. 4.74 16.23

 imix-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.63      29.53 
2. 8.76 29.98

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.83       3.30 
2. 2.87 3.35

3. 23 73 87 23 84 173
4. 82 149 171 107 190 225
5. 187 239 291 162 204 248

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.85      10.87 
2. 0.86 11.04

3. 57 127 159 56 184 209
4. 158 293 353 185 358 470
5. 459 560 645 460 586 642

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.74       6.06 
2. 1.75 6.12

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.57       3.33 
2. 2.58 3.35

3. 22 41 129 22 96 141
4. 59 122 135 96 178 197
5. 185 205 247 119 145 178

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.74       9.52 
2. 0.74 9.61

3. 47 96 112 45 76 88
4. 191 400 494 153 277 325
5. 456 570 649 546 663 732

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.66       5.99 
2. 1.66 6.02

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.50       4.97 
2. 4.52 4.99

3. 18 40 60 18 37 49
4. 36 50 62 48 64 78
5. 98 119 141 84 107 124

 64b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.82       9.74 
2. 8.87 9.79

3. 32 61 78 18 46 76
4. 35 45 54 37 48 56
5. 71 84 97 64 77 91

 64b-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 18.70      20.65 
2. 18.79 20.75

3. 32 50 65 27 48 65
4. 32 39 45 33 40 47
5. 58 69 78 55 65 74

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.63      20.79 
2. 1.63 20.79

3. 23 62 77 23 43 61
4. 66 126 140 76 129 150
5. 205 261 297 200 257 283

 1518b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.03      38.56 
2. 3.03 38.56

3. 32 61 90 24 50 76
4. 50 74 86 61 80 98
5. 103 124 138 105 127 141

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.13      10.73 
2. 3.15 10.78

 imix-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.21      21.27 
2. 6.24 21.37

 imix-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.57      43.04 
2. 12.57 43.04

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.33       4.78 
2. 4.37 4.83

3. 18 49 68 18 38 78
4. 42 68 97 66 98 133
5. 103 127 152 91 116 144

 64b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.53       9.42 
2. 8.62 9.51

3. 33 57 79 19 48 78
4. 39 58 68 39 54 64
5. 69 82 95 62 75 85

 64b-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 17.98      19.85 
2. 18.16 20.05

3. 35 58 75 35 57 73
4. 30 37 43 29 37 42
5. 57 67 76 55 64 73

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.30      16.52 
2. 1.30 16.61

3. 24 50 75 23 70 104
4. 75 139 199 95 212 240
5. 178 246 288 182 240 314

 1518b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.45      31.21 
2. 2.47 31.48

3. 24 44 72 24 48 79
4. 75 99 116 54 80 110
5. 96 139 170 130 154 170

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.87       9.81 
2. 2.88 9.86

 imix-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.73      19.63 
2. 5.73 19.63

 imix-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 11.51      39.40 
2. 11.51 39.40

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.51       0.60 
2. 0.51 0.60

3. 29 51 120 29 33 111
4. 201 736 1032 322 900 1235
5. 835 1433 1805 827 1436 1806

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.38       4.81 
2. 0.38 4.85

3. 61 123 187 60 86 142
4. 180 522 729 299 762 1018
5. 805 1469 1812 1302 2097 2649

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.46       1.60 
2. 0.46 1.61

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.50       0.65 
2. 0.51 0.66

3. 29 52 125 28 61 156
4. 196 729 1021 212 768 1134
5. 837 1453 1829 814 1447 1839

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.35       4.56 
2. 0.35 4.58

3. 52 82 122 52 83 98
4. 108 229 321 202 617 820
5. 594 1226 1521 1028 1742 2223

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.46       1.65 
2. 0.46 1.65

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.55       0.60 
2. 0.55 0.61

3. 24 29 79 24 29 119
4. 201 705 956 181 736 1071
5. 786 1339 1640 791 1339 1641

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.47       5.92 
2. 0.47 5.92

3. 31 71 101 29 44 96
4. 110 605 868 164 583 827
5. 826 1459 1814 677 1233 1550

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  0.52       1.78 
2. 0.52 1.79

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.54       0.60 
2. 0.55 0.60

3. 25 42 120 24 28 102
4. 250 769 1073 161 715 1047
5. 778 1339 1649 748 1329 1637

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.44       5.57 
2. 0.44 5.63

3. 31 67 104 30 67 96
4. 72 308 478 153 637 930
5. 461 1051 1348 780 1425 1821

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.51       1.76 
2. 0.52 1.77

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.50       4.09 
2. 3.54 4.13

3. 23 57 71 23 63 95
4. 70 122 150 75 105 128
5. 213 268 296 196 242 278

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.88      11.24 
2. 0.88 11.29

3. 54 139 154 53 114 140
4. 185 280 331 188 376 399
5. 450 549 615 479 604 664

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.94       6.78 
2. 1.96 6.85

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  3.10       4.02 
2. 3.12 4.04

3. 22 75 95 22 123 146
4. 69 131 137 92 153 171
5. 164 201 241 161 206 248

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.75       9.73 
2. 0.76 9.78

3. 45 83 107 46 81 105
4. 117 237 277 165 275 343
5. 438 556 637 368 442 498

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.82       6.57 
2. 1.85 6.67

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.27       6.92 
2. 6.30 6.96

3. 27 61 77 25 66 73
4. 42 59 71 41 60 74
5. 88 105 119 84 100 115

 64b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.50       7.18 
2. 6.54 7.22

3. 23 55 74 18 45 77
4. 40 58 77 43 67 79
5. 81 95 108 83 99 114

 64b-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.50       7.18 
2. 6.54 7.22

3. 19 52 68 18 56 77
4. 43 60 72 43 59 70
5. 79 93 103 89 106 121

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.88      23.94 
2. 1.89 24.06

3. 23 40 75 23 44 68
4. 51 100 117 69 130 155
5. 176 215 238 149 189 214

 1518b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.19      27.95 
2. 2.21 28.09

3. 23 44 72 23 82 102
4. 68 131 155 95 193 213
5. 175 205 223 162 211 232

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.09      14.01 
2. 4.11 14.08

 imix-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.32      14.80 
2. 4.35 14.87

 imix-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.33      14.81 
2. 4.35 14.89

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.13       6.77 
2. 6.16 6.80

3. 19 50 74 18 51 69
4. 44 60 69 55 83 91
5. 92 110 126 93 111 127

 64b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.41       7.07 
2. 6.44 7.11

3. 29 56 77 18 43 70
4. 44 59 71 40 53 69
5. 88 105 120 90 108 123

 64b-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.37       7.03 
2. 6.44 7.10

3. 19 56 75 27 61 80
4. 39 57 67 51 80 95
5. 82 98 112 92 109 124

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.44      18.36 
2. 1.45 18.45

3. 23 24 61 23 76 89
4. 54 87 97 82 181 227
5. 158 213 242 221 273 306

 1518b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.73      22.08 
2. 1.73 22.08

3. 23 49 72 23 45 59
4. 52 98 129 62 115 136
5. 183 229 258 156 188 210

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.63      12.43 
2. 3.65 12.49

 imix-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.84      13.13 
2. 3.84 13.13

 imix-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.77      12.91 
2. 3.79 12.97

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  3.14       3.67 
2. 3.17 3.71

3. 24 66 99 30 57 74
4. 77 144 160 76 127 143
5. 172 210 247 180 215 243

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  0.86      10.94 
2. 0.86 11.00

3. 60 121 141 58 118 138
4. 134 223 262 197 360 399
5. 364 465 520 414 481 542

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac256sha-ndrpdr

 1.  1.81       6.31 
2. 1.82 6.34

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  2.91       3.77 
2. 2.94 3.81

3. 23 43 56 23 89 122
4. 62 103 129 86 128 156
5. 170 199 220 176 211 246

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  0.73       9.50 
2. 0.74 9.55

3. 44 109 135 44 55 103
4. 170 449 517 157 386 444
5. 516 665 778 456 596 655

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
policy-aes128cbc-hmac512sha-ndrpdr

 1.  1.68       6.08 
2. 1.69 6.11

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  5.48       6.05 
2. 5.50 6.08

3. 19 49 75 19 49 66
4. 46 67 81 46 68 86
5. 95 111 124 103 122 139

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  1.81      23.08 
2. 1.82 23.19

3. 24 70 80 23 52 69
4. 63 119 145 72 123 138
5. 215 270 313 139 180 219

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes128gcm-ndrpdr

 1.  3.62      12.38 
2. 3.64 12.44

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  5.38       5.94 
2. 5.44 6.00

3. 25 46 73 19 73 86
4. 50 81 95 50 69 80
5. 100 118 134 99 118 135

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.40      17.87 
2. 1.41 17.96

3. 24 41 72 24 94 107
4. 56 145 174 94 204 233
5. 165 207 235 189 249 288

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.29      11.27 
2. 3.31 11.33

25ge2p1xxv710-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.21       2.58 
2. 2.49 2.91

3. 23 115 149 23 43 87
4. 75 139 169 60 132 154
5. 142 209 751 145 177 676

 1518b-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.77       9.84 
2. 0.79 10.15

3. 57 111 141 56 114 144
4. 134 270 315 238 394 457
5. 445 555 674 392 491 569

 imix-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.39       4.85 
2. 1.51 5.25

25ge2p1xxv710-ethip4ipsec20000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.02       2.61 
2. 2.25 2.92

3. 23 50 80 22 74 100
4. 37 96 121 130 208 236
5. 117 152 863 128 164 443

 1518b-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.68       8.83 
2. 0.70 9.06

3. 45 93 115 45 63 80
4. 184 328 383 204 459 564
5. 376 479 547 449 555 633

 imix-2t1c-ethip4ipsec20000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.32       4.78 
2. 1.42 5.15

25ge2p1xxv710-ethip4ipsec20000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.30       3.64 
2. 3.68 4.07

3. 19 51 72 18 51 81
4. 46 69 81 43 77 90
5. 92 116 371 84 114 148

 64b-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.12       6.76 
2. 6.60 7.29

3. 20 49 69 22 59 79
4. 40 56 67 39 55 69
5. 67 81 99 71 87 110

 64b-8t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.36      12.54 
2. 11.77 12.99

3. 25 46 77 35 61 78
4. 33 41 48 33 41 48
5. 59 71 82 61 73 86

 1518b-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.33      16.97 
2. 1.39 17.75

3. 24 47 83 24 65 84
4. 78 154 186 47 120 155
5. 130 180 204 171 240 276

 1518b-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.46      31.34 
2. 2.47 31.49

3. 24 37 49 24 89 108
4. 50 73 86 48 116 124
5. 93 117 136 126 149 169

 imix-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.28       7.82 
2. 2.50 8.56

 imix-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.27      14.63 
2. 4.54 15.54

 imix-8t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.07      27.60 
2. 8.19 28.02

25ge2p1xxv710-ethip4ipsec20000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.08       3.40 
2. 3.51 3.87

3. 19 57 79 19 46 70
4. 50 78 101 48 100 129
5. 96 126 328 88 116 155

 64b-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.67       6.26 
2. 6.17 6.81

3. 28 62 82 19 46 72
4. 51 71 84 37 49 59
5. 69 86 106 73 91 115

 64b-8t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.70      11.81 
2. 11.14 12.29

3. 31 53 76 29 53 67
4. 34 45 53 33 42 50
5. 60 72 85 62 74 87

 1518b-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.10      14.01 
2. 1.13 14.44

3. 24 47 79 24 25 56
4. 72 133 166 82 158 188
5. 121 148 176 213 295 336

 1518b-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.03      25.86 
2. 2.05 26.12

3. 25 30 54 24 53 81
4. 54 81 103 53 73 85
5. 111 141 162 105 144 177

 imix-2t1c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.02       6.93 
2. 2.23 7.62

 imix-4t2c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.91      13.37 
2. 4.13 14.13

 imix-8t4c-ethip4ipsec20000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.43      25.42 
2. 7.54 25.81

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.92       2.24 
2. 2.10 2.45

3. 24 63 91 23 74 87
4. 63 101 122 69 135 168
5. 143 187 707 142 185 286

 1518b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.75       9.63 
2. 0.76 9.78

3. 56 95 129 59 122 150
4. 205 370 450 163 272 362
5. 366 460 548 411 534 610

 imix-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.28       4.47 
2. 1.35 4.72

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.80       2.33 
2. 1.95 2.52

3. 23 69 85 23 79 113
4. 48 110 129 93 168 217
5. 144 192 962 166 224 393

 1518b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.66       8.48 
2. 0.66 8.57

3. 45 88 103 45 169 187
4. 128 286 335 268 639 736
5. 419 528 613 543 731 803

 imix-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.22       4.40 
2. 1.29 4.65

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.76       3.05 
2. 2.99 3.31

3. 19 54 78 19 55 75
4. 48 86 110 49 105 124
5. 100 134 638 89 127 277

 64b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.02       5.55 
2. 5.42 5.98

3. 19 46 69 24 52 81
4. 41 57 69 43 70 87
5. 72 89 153 65 81 104

 64b-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.60      10.60 
2. 10.04 11.09

3. 34 59 78 28 46 74
4. 37 47 54 38 52 61
5. 69 85 110 65 78 93

 1518b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.26      16.05 
2. 1.31 16.62

3. 24 66 81 24 92 109
4. 60 136 162 122 268 306
5. 168 208 253 213 262 313

 1518b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.35      29.88 
2. 2.38 30.33

3. 24 31 51 24 46 72
4. 54 69 88 52 67 86
5. 114 158 185 105 141 165

 imix-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.00       6.85 
2. 2.16 7.38

 imix-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.87      13.24 
2. 3.99 13.65

 imix-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.32      25.06 
2. 7.43 25.44

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.56       2.83 
2. 2.82 3.11

3. 19 43 64 19 47 68
4. 45 80 106 56 100 145
5. 93 121 822 107 130 223

 64b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.83       5.34 
2. 5.08 5.61

3. 19 42 68 19 52 82
4. 45 64 75 46 66 79
5. 69 88 248 65 81 104

 64b-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.07      10.01 
2. 9.39 10.37

3. 30 49 73 20 48 73
4. 43 52 59 40 60 70
5. 62 76 90 61 74 88

 1518b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.05      13.43 
2. 1.07 13.64

3. 24 41 62 24 84 107
4. 70 122 162 149 329 358
5. 202 273 318 232 288 321

 1518b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.98      25.18 
2. 1.98 25.18

3. 25 43 74 24 44 78
4. 56 120 137 54 85 108
5. 95 116 138 121 164 187

 imix-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.80       6.18 
2. 1.94 6.63

 imix-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.56      12.19 
2. 3.69 12.62

 imix-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.73      23.02 
2. 6.86 23.49

25ge2p1xxv710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.85       3.33 
2. 2.86 3.34

3. 23 94 108 23 127 150
4. 63 115 133 79 154 182
5. 150 190 233 157 196 234

 1518b-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.86      10.95 
2. 0.86 10.95

3. 56 121 141 56 134 155
4. 172 270 315 183 414 477
5. 352 411 474 387 473 527

 imix-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.77       6.18 
2. 1.79 6.25

25ge2p1xxv710-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.59       3.36 
2. 2.62 3.39

3. 22 111 135 22 101 121
4. 70 128 144 95 160 189
5. 195 217 270 186 207 254

 1518b-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.74       9.58 
2. 0.75 9.72

3. 45 72 86 45 75 106
4. 169 288 349 105 242 300
5. 449 566 621 434 544 599

 imix-2t1c-ethip4ipsec400tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.68       6.07 
2. 1.69 6.13

25ge2p1xxv710-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.59       5.07 
2. 4.68 5.17

3. 18 44 73 18 19 81
4. 35 55 68 38 48 53
5. 99 123 145 84 107 126

 64b-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.93      10.96 
2. 10.03 11.07

3. 19 51 83 19 48 73
4. 34 42 50 37 50 61
5. 61 72 83 55 66 75

 64b-8t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 20.38      22.50 
2. 20.48 22.61

3. 33 53 69 32 50 66
4. 33 39 43 33 39 44
5. 64 78 89 57 68 77

 1518b-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.62      20.65 
2. 1.62 20.65

3. 23 46 74 23 76 97
4. 60 81 90 55 106 125
5. 130 179 210 134 190 254

 1518b-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.17      40.39 
2. 3.17 40.39

3. 23 58 81 23 62 79
4. 48 65 82 56 104 118
5. 96 109 122 97 115 128

 imix-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.27      11.20 
2. 3.29 11.25

 imix-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.77      23.17 
2. 6.80 23.29

 imix-8t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 13.61      46.60 
2. 13.61 46.60

25ge2p1xxv710-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.50       4.97 
2. 4.54 5.02

3. 18 44 67 18 60 79
4. 19 34 47 80 92 103
5. 96 118 139 91 112 131

 64b-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.65      10.65 
2. 9.79 10.81

3. 19 52 81 19 47 78
4. 42 56 66 36 50 57
5. 65 77 90 58 69 78

 64b-8t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 20.05      22.14 
2. 20.15 22.25

3. 32 47 56 33 53 77
4. 32 38 44 32 39 45
5. 63 75 86 59 70 77

 1518b-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.31      16.72 
2. 1.32 16.81

3. 23 37 75 23 63 80
4. 63 193 263 91 221 264
5. 244 336 387 216 267 303

 1518b-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.57      32.71 
2. 2.57 32.71

3. 24 51 83 24 51 76
4. 67 117 135 66 116 143
5. 85 102 113 116 138 150

 imix-2t1c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.98      10.18 
2. 3.01 10.29

 imix-4t2c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.12      20.93 
2. 6.15 21.04

 imix-8t4c-ethip4ipsec400tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 12.45      42.61 
2. 12.45 42.61

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.21       3.75 
2. 3.24 3.78

3. 23 48 82 23 66 85
4. 92 149 163 106 176 193
5. 199 252 294 150 190 236

 1518b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.87      11.17 
2. 0.88 11.28

3. 53 120 151 53 98 124
4. 189 416 469 232 429 533
5. 471 566 631 457 581 629

 imix-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.89       6.60 
2. 1.91 6.67

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.86       3.70 
2. 2.89 3.74

3. 22 63 129 22 79 153
4. 64 141 162 97 165 215
5. 164 205 251 168 208 244

 1518b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.75       9.65 
2. 0.75 9.75

3. 46 100 113 45 114 139
4. 109 261 282 137 288 359
5. 450 577 655 399 502 574

 imix-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.78       6.43 
2. 1.80 6.50

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.46       6.03 
2. 5.52 6.09

3. 18 57 73 18 72 85
4. 49 80 90 49 72 86
5. 104 128 150 81 98 111

 64b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.08      10.03 
2. 9.18 10.13

3. 25 50 79 21 43 73
4. 32 50 58 30 38 47
5. 63 84 98 49 59 66

 64b-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 18.03      19.91 
2. 18.22 20.11

3. 35 54 67 25 51 77
4. 31 39 45 29 36 43
5. 62 80 92 44 51 57

 1518b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.78      22.73 
2. 1.79 22.85

3. 23 31 47 23 112 132
4. 97 196 227 118 205 239
5. 210 273 306 194 250 274

 1518b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.92      37.15 
2. 2.92 37.15

3. 23 47 74 23 69 84
4. 48 80 103 50 99 120
5. 84 109 125 89 114 126

 imix-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.73      12.76 
2. 3.75 12.82

 imix-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.08      20.80 
2. 6.08 20.80

 imix-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.84      40.54 
2. 11.84 40.54

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.37       5.93 
2. 5.42 5.99

3. 18 52 63 18 51 79
4. 55 76 90 43 83 98
5. 92 113 138 83 100 114

 64b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.96       9.89 
2. 9.10 10.05

3. 27 52 73 30 54 75
4. 27 43 59 35 43 51
5. 65 88 102 45 54 60

 64b-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 17.74      19.59 
2. 17.97 19.84

3. 32 50 70 26 49 77
4. 32 39 45 31 38 44
5. 62 81 94 45 52 59

 1518b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.40      17.82 
2. 1.41 17.91

3. 24 41 70 23 61 79
4. 59 124 168 58 134 149
5. 222 291 316 200 252 282

 1518b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.33      29.68 
2. 2.33 29.68

3. 24 51 75 24 47 74
4. 47 71 92 42 64 83
5. 83 112 135 74 108 126

 imix-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.36      11.49 
2. 3.37 11.54

 imix-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.50      18.81 
2. 5.53 18.92

 imix-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.75      36.79 
2. 10.75 36.79

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  3.49       4.08 
2. 3.51 4.10

3. 23 56 77 23 121 146
4. 79 122 138 93 138 159
5. 212 269 299 203 259 292

 1518b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.87      11.15 
2. 0.88 11.26

3. 53 167 189 52 117 138
4. 178 316 366 245 468 532
5. 485 602 677 463 590 643

 imix-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.94       6.76 
2. 1.96 6.83

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  3.08       3.99 
2. 3.10 4.01

3. 22 77 104 22 143 163
4. 70 122 144 78 139 169
5. 167 201 243 156 189 229

 1518b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.75       9.71 
2. 0.75 9.76

3. 44 76 93 43 67 90
4. 134 444 538 162 445 553
5. 408 511 565 383 491 556

 imix-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.83       6.61 
2. 1.84 6.65

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.19       6.84 
2. 6.26 6.91

3. 23 53 73 18 60 83
4. 52 75 86 54 79 91
5. 99 123 146 88 106 130

 64b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.25       6.90 
2. 6.32 6.98

3. 19 58 73 18 44 70
4. 37 52 64 39 62 82
5. 84 109 119 41 55 67

 64b-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.23       6.87 
2. 6.30 6.95

3. 18 44 70 26 57 76
4. 39 57 68 39 60 75
5. 78 99 115 36 53 64

 1518b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.83      23.36 
2. 1.85 23.60

3. 23 34 66 23 56 77
4. 58 86 96 69 158 184
5. 192 237 263 178 225 249

 1518b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.96      24.98 
2. 1.96 24.98

3. 23 36 68 23 49 85
4. 53 111 155 45 82 109
5. 110 143 160 62 103 122

 imix-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.04      13.84 
2. 4.04 13.84

 imix-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.02      13.76 
2. 4.12 14.11

 imix-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.07      13.94 
2. 4.09 14.01

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.12       6.76 
2. 6.15 6.79

3. 19 53 61 18 77 89
4. 36 63 78 54 80 90
5. 92 110 134 88 106 135

 64b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.13       6.77 
2. 6.20 6.85

3. 20 45 72 18 46 68
4. 47 71 78 39 58 70
5. 84 103 119 38 54 66

 64b-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.14       6.78 
2. 6.19 6.83

3. 27 54 81 18 42 71
4. 36 55 67 38 57 73
5. 78 99 116 39 58 70

 1518b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.42      18.14 
2. 1.43 18.23

3. 23 46 60 23 130 154
4. 90 199 224 105 222 245
5. 230 300 329 230 296 327

 1518b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.56      19.90 
2. 1.56 19.90

3. 24 50 88 23 41 75
4. 56 158 175 52 139 166
5. 143 204 270 83 153 185

 imix-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.58      12.24 
2. 3.61 12.37

 imix-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.62      12.40 
2. 3.63 12.44

 imix-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.61      12.35 
2. 3.63 12.41

25ge2p1xxv710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  2.79       3.26 
2. 2.80 3.27

3. 23 54 72 23 135 153
4. 76 154 160 101 182 197
5. 178 218 262 150 206 245

 1518b-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.84      10.71 
2. 0.85 10.87

3. 53 106 127 54 104 138
4. 227 389 482 290 583 647
5. 494 618 681 535 665 735

 imix-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.67       5.83 
2. 1.68 5.86

25ge2p1xxv710-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.55       3.31 
2. 2.55 3.31

3. 22 40 146 22 85 104
4. 73 156 179 85 160 183
5. 132 201 214 163 212 254

 1518b-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.73       9.48 
2. 0.74 9.63

3. 44 86 112 44 99 172
4. 233 468 580 243 562 660
5. 543 667 771 552 696 809

 imix-2t1c-ethip4ipsec5000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.57       5.68 
2. 1.57 5.68

25ge2p1xxv710-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.33       4.78 
2. 4.38 4.83

3. 19 42 59 18 57 72
4. 50 71 88 43 72 105
5. 112 140 169 98 122 151

 64b-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.02       8.85 
2. 8.06 8.90

3. 31 59 79 29 61 79
4. 37 49 58 40 55 66
5. 64 77 89 57 70 83

 64b-8t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 16.00      17.66 
2. 16.08 17.75

3. 32 52 67 30 52 74
4. 32 40 47 33 40 47
5. 62 73 83 55 65 74

 1518b-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.54      19.56 
2. 1.59 20.26

3. 23 67 77 23 62 83
4. 91 172 187 125 150 166
5. 191 241 272 203 263 290

 1518b-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.76      35.12 
2. 2.76 35.12

3. 24 55 82 24 53 81
4. 50 66 79 52 68 83
5. 130 150 163 98 116 128

 imix-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.93      10.02 
2. 2.96 10.12

 imix-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.53      18.94 
2. 5.56 19.04

 imix-8t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.75      36.79 
2. 10.75 36.79

25ge2p1xxv710-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.21       4.65 
2. 4.26 4.70

3. 19 44 74 18 54 71
4. 51 84 104 49 84 101
5. 95 118 144 85 105 121

 64b-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.74       8.54 
2. 7.97 8.80

3. 19 50 75 19 50 79
4. 40 59 72 42 54 67
5. 73 90 107 60 73 86

 64b-8t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 15.24      16.83 
2. 15.63 17.25

3. 37 68 79 28 42 59
4. 34 42 49 33 42 49
5. 62 74 85 58 68 77

 1518b-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.23      15.65 
2. 1.28 16.29

3. 24 64 80 24 65 78
4. 105 254 339 110 302 346
5. 238 310 350 291 359 398

 1518b-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.24      28.49 
2. 2.27 28.92

3. 24 53 77 24 54 77
4. 49 108 134 55 84 110
5. 126 173 192 110 150 169

 imix-2t1c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.67       9.14 
2. 2.70 9.24

 imix-4t2c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.14      17.60 
2. 5.19 17.77

 imix-8t4c-ethip4ipsec5000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.66      33.07 
2. 9.81 33.57

25ge2p1xxv710-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.87       2.19 
2. 2.03 2.37

3. 24 113 145 23 58 109
4. 86 152 191 99 183 224
5. 199 264 957 189 248 314

 1518b-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  0.72       9.21 
2. 0.73 9.28

3. 57 88 135 57 129 146
4. 192 302 343 163 420 532
5. 365 479 570 458 615 716

 imix-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac256sha-ndrpdr

 1.  1.24       4.34 
2. 1.30 4.54

25ge2p1xxv710-ethip4ipsec60000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.71       2.22 
2. 1.84 2.38

3. 23 43 72 23 124 153
4. 52 117 146 80 203 291
5. 169 246 338 144 197 232

 1518b-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.66       8.50 
2. 0.67 8.63

3. 45 78 103 46 156 170
4. 134 292 377 268 636 740
5. 383 498 557 444 593 729

 imix-2t1c-ethip4ipsec60000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.22       4.40 
2. 1.25 4.51

25ge2p1xxv710-ethip4ipsec60000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.66       2.94 
2. 2.84 3.13

3. 19 50 69 19 50 82
4. 43 88 121 45 112 129
5. 117 150 508 92 125 148

 64b-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.74       5.23 
2. 4.98 5.50

3. 19 47 69 19 42 66
4. 45 58 71 40 60 74
5. 74 92 130 74 94 112

 64b-8t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.09      10.03 
2. 9.41 10.39

3. 32 59 76 33 53 78
4. 45 55 65 39 49 56
5. 67 82 97 63 76 88

 1518b-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.24      15.85 
2. 1.28 16.25

3. 24 39 77 24 64 84
4. 57 97 121 58 164 187
5. 196 265 295 223 284 335

 1518b-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.33      29.72 
2. 2.33 29.72

3. 24 57 77 24 45 58
4. 46 78 89 54 73 84
5. 104 136 162 94 116 134

 imix-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.93       6.61 
2. 2.01 6.88

 imix-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.74      12.78 
2. 3.83 13.11

 imix-8t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.03      24.05 
2. 7.13 24.42

25ge2p1xxv710-ethip4ipsec60000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.45       2.71 
2. 2.61 2.89

3. 19 56 85 19 46 71
4. 49 81 105 48 79 104
5. 101 124 233 109 122 155

 64b-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.63       5.11 
2. 4.74 5.24

3. 19 57 84 19 46 77
4. 45 63 82 54 68 79
5. 72 89 120 76 96 116

 64b-8t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.72       9.63 
2. 8.86 9.78

3. 20 45 77 34 55 77
4. 36 45 54 36 48 59
5. 64 78 94 60 72 86

 1518b-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.04      13.30 
2. 1.05 13.37

3. 25 50 75 24 47 85
4. 84 220 254 61 126 159
5. 199 293 352 200 287 349

 1518b-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.96      24.92 
2. 1.97 25.05

3. 25 62 83 25 65 78
4. 58 119 136 54 94 108
5. 126 165 191 127 180 207

 imix-2t1c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.78       6.09 
2. 1.84 6.30

 imix-4t2c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.39      11.59 
2. 3.52 12.06

 imix-8t4c-ethip4ipsec60000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.68      22.87 
2. 6.72 22.99