3n-icx-e810cq

100ge2p1e810cq-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  4.77       5.27 
  
 3.   14   20   25        14   20   28  
 4.   29   46   59        27   42   54  
 5.   73   90  119        75   91  120  

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  8.95       9.88 
  
 3.   14   22   34        14   22   36  
 4.   30   40   50        29   38   48  
 5.   83   99  115        81   97  114  

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 16.65      18.39 
  
 3.   15   21   27        15   20   24  
 4.   32   40   47        31   39   46  
 5.   79   94  109        78   93  108  

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  2.23      28.35 
  
 3.   17   28   42        17   28   51  
 4.   27   76   99        27   58   89  
 5.  108  158  201        95  145  176  

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  3.96      50.42 
  
 3.   17   28   42        17   28   36  
 4.   31   48   57        39   58   68  
 5.   80  101  117        79   99  117  

 1518b-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  6.79      86.46 
  
 3.   18   22   27        18   23   27  
 4.   32   44   55        34   51   64  
 5.   76   95  112        76   95  112  

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  3.51      12.00 

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  6.34      21.68 

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 10.85      37.12

100ge2p1e810cq-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  4.31       4.76 
  
 3.   14   22   36        15   25   39  
 4.   27   41   52        30   46   59  
 5.   83  107  130        84  104  129  

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  8.06       8.90 
  
 3.   15   20   22        14   21   27  
 4.   29   38   45        28   38   47  
 5.   93  112  133        92  111  135  

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 14.61      16.13 
  
 3.   16   25   33        15   23   29  
 4.   32   42   51        31   40   49  
 5.  100  130  161        99  128  158  

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  2.03      25.90 
  
 3.   17   30   42        17   29   38  
 4.   39   77   96        38   67   81  
 5.   95  141  175        90  140  167  

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  3.62      46.14 
  
 3.   18   22   29        18   26   34  
 4.   32   50   64        32   50   67  
 5.   80   98  115        75   94  110  

 1518b-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  6.40      81.51 
  
 3.   18   26   37        18   29   42  
 4.   33   51   66        33   45   54  
 5.   78   95  110        82   97  109  

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  3.13      10.71 

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  5.48      18.77 

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  9.93      33.99

100ge2p1e810cq-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  5.40       5.96 
  
 3.   14   21   32        14   23   27  
 4.   30   50   60        33   44   53  
 5.   81   99  110        80   98  112  

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 10.64      11.75 
  
 3.   14   20   27        14   20   29  
 4.   30   39   47        31   40   48  
 5.   84   99  111        81   96  108  

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 23.76      26.23 
  
 3.   15   21   30        15   20   26  
 4.   32   39   45        32   39   45  
 5.   87  103  115        86  101  113  

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  3.06      38.97 
  
 3.   17   32   41        17   28   40  
 4.   41   73  101        35   54   66  
 5.  116  138  159       111  143  163  

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  5.89      74.99 
  
 3.   18   29   35        17   24   39  
 4.   44   57   65        50   75   90  
 5.  103  128  147       105  129  149  

 1518b-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 11.81      150.47 
  
 3.   17   24   35        17   26   35  
 4.   42   55   64        36   44   53  
 5.  119  143  165       118  141  163  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  4.65      15.91 

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  9.35      32.00 

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 19.34      66.18

100ge2p1e810cq-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  5.02       5.54 
  
 3.   14   28   38        14   28   35  
 4.   29   40   49        29   43   57  
 5.   78   93  104        76   92  104  

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 10.25      11.31 
  
 3.   14   20   24        14   19   25  
 4.   30   40   49        29   38   46  
 5.   96  112  124        95  111  123  

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 22.72      25.08 
  
 3.   14   20   27        14   20   24  
 4.   33   40   45        33   39   46  
 5.  119  150  182       116  150  184  

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  2.73      34.83 
  
 3.   17   31   39        17   25   43  
 4.   33   51   67        30   66   82  
 5.   99  131  157       103  129  149  

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  5.43      69.19 
  
 3.   17   24   29        17   26   31  
 4.   32   54   71        31   48   57  
 5.  109  129  146       108  130  145  

 1518b-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 10.98      139.90 
  
 3.   18   26   34        17   25   31  
 4.   37   49   59        35   47   56  
 5.  122  153  186       120  152  185  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  4.30      14.72 

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  8.97      30.69 

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 18.31      62.66

100ge2p1e810cq-avf-ethip4ipsec20000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  3.32       3.67 
  
 3.   14   27   41        14   28   41  
 4.   35   61   76        28   72   98  
 5.  112  152  199        88  153  216  

 64b-4t2c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  5.95       6.57 
  
 3.   18   25   29        16   23   33  
 4.   31   39   46        30   38   46  
 5.   82  100  119        81  100  117  

 64b-8t4c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 11.36      12.54 
  
 3.   15   20   26        15   21   26  
 4.   30   40   53        26   33   38  
 5.   88  107  125        88  108  125  

 1518b-2t1c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  1.90      24.16 
  
 3.   18   33   48        17   33   39  
 4.   30   66   87        35   54   72  
 5.  113  160  202       118  162  194  

 1518b-4t2c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  3.54      45.09 
  
 3.   17   19   26        18   19   55  
 4.   34   74   94        37   58  102  
 5.   91  122  142        91  121  140  

 1518b-8t4c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  6.30      80.22 
  
 3.   18   27   39        18   22   29  
 4.   34   55   65        31   44   56  
 5.   85  102  119        81  102  115  

 imix-2t1c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  2.57       8.80 

 imix-4t2c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  4.85      16.59 

 imix-8t4c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  9.02      30.86

100ge2p1e810cq-avf-ethip4ipsec20000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  2.94       3.25 
  
 3.   15   34   51        15   31   45  
 4.   56   80   90        44   72   93  
 5.   86  114  136        89  122  149  

 64b-4t2c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  5.52       6.09 
  
 3.   15   22   29        15   23   30  
 4.   43   61   73        45   59   68  
 5.   84  102  119        83  103  119  

 64b-8t4c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 10.31      11.38 
  
 3.   15   19   24        15   19   24  
 4.   28   38   47        28   38   47  
 5.   83  102  116        82  100  116  

 1518b-2t1c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  1.80      22.89 
  
 3.   18   27   40        18   25   37  
 4.   35   67   88        39   82  102  
 5.  104  151  173       109  150  174  

 1518b-4t2c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  3.32      42.31 
  
 3.   18   28   42        18   28   39  
 4.   34   59   74        30   60   75  
 5.   84  118  149        95  114  133  

 1518b-8t4c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  6.05      77.03 
  
 3.   18   23   31        18   25   31  
 4.   45   60   70        32   42   51  
 5.   83  102  117        81   99  116  

 imix-2t1c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  2.35       8.05 

 imix-4t2c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  4.59      15.72 

 imix-8t4c-avf-ethip4ipsec20000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  8.47      29.01

100ge2p1e810cq-avf-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  5.62       6.21 
  
 3.   14   17   20        14   19   27  
 4.   22   35   47        28   43   51  
 5.   92  109  123        88  105  120  

 64b-4t2c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 12.66      13.98 
  
 3.   15   20   26        14   20   23  
 4.   32   40   47        32   41   49  
 5.   80   92  102        80   93  102  

 64b-8t4c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 26.62      29.39 
  
 3.   16   21   25        15   19   22  
 4.   35   41   46        34   40   46  
 5.   91  107  119        89  105  116  

 1518b-2t1c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  3.01      38.36 
  
 3.   17   33   41        17   23   28  
 4.   49   83   99        31   68   89  
 5.  103  127  144       102  122  139  

 1518b-4t2c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  6.47      82.38 
  
 3.   17   28   32        17   25   30  
 4.   38   48   57        40   57   67  
 5.  167  223  267       168  220  264  

 1518b-8t4c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 12.80      163.01 
  
 3.   17   23   29        18   24   29  
 4.   38   47   56        37   48   54  
 5.  114  131  146       114  132  148  

 imix-2t1c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  4.79      16.38 

 imix-4t2c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 10.18      34.86 

 imix-8t4c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 21.07      72.12

100ge2p1e810cq-avf-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  5.45       6.01 
  
 3.   14   20   23        14   21   25  
 4.   29   38   48        25   37   45  
 5.  102  120  135       102  120  136  

 64b-4t2c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 12.09      13.34 
  
 3.   14   20   26        14   19   23  
 4.   31   41   50        30   41   49  
 5.   83   97  108        81   95  105  

 64b-8t4c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 26.54      29.30 
  
 3.   15   20   26        14   20   25  
 4.   35   40   47        34   39   46  
 5.   98  116  130        97  114  127  

 1518b-2t1c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  2.78      35.42 
  
 3.   17   36   43        17   32   50  
 4.   31   47   64        35   70   88  
 5.   95  116  133        98  119  135  

 1518b-4t2c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  5.87      74.70 
  
 3.   17   29   37        17   25   32  
 4.   52   65   75        24   29   48  
 5.  141  170  201       141  168  199  

 1518b-8t4c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 11.95      152.16 
  
 3.   18   27   34        17   25   33  
 4.   40   48   55        40   53   61  
 5.  122  146  168       122  147  169  

 imix-2t1c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  4.55      15.58 

 imix-4t2c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  9.72      33.27 

 imix-8t4c-avf-ethip4ipsec400tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 20.28      69.41

100ge2p1e810cq-avf-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  7.24       7.99 
  
 3.   14   24   33        16   24   30  
 4.   35   54   68        33   47   62  
 5.  100  117  130        96  114  128  

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 12.50      13.80 
  
 3.   14   20   27        14   20   27  
 4.   30   39   48        28   37   44  
 5.   64  113  130        59  100  123  

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 21.52      23.76 
  
 3.   14   19   24        14   18   22  
 4.   25   35   40        30   37   42  
 5.   53  100  116        88  106  119  

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  3.40      43.26 
  
 3.   17   29   47        17   24   36  
 4.   37   67   89        37   59   74  
 5.   97  119  134        85  114  132  

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  6.07      77.36 
  
 3.   17   36   51        17   35   48  
 4.   48   58   65        42   55   65  
 5.   81  161  198        86  171  202  

 1518b-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 11.29      143.74 
  
 3.   17   23   33        17   22   27  
 4.   29   42   59        29   38   47  
 5.   89  201  259        81  202  261  

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  5.62      19.24 

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 11.16      38.21 

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 19.37      66.30

100ge2p1e810cq-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  7.00       7.73 
  
 3.   14   20   29        14   21   27  
 4.   32   42   49        33   49   59  
 5.   94  107  119        89  103  118  

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 14.59      16.11 
  
 3.   15   22   26        14   20   26  
 4.   34   42   48        33   40   47  
 5.  105  123  139       103  121  136  

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 24.53      27.08 
  
 3.   14   20   25        14   20   25  
 4.   30   38   44        29   37   43  
 5.   66  113  133        61  106  131  

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  3.17      40.34 
  
 3.   17   35   54        17   25   37  
 4.   43   66   78        35   61   76  
 5.   96  122  138       116  145  169  

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  6.29      80.17 
  
 3.   18   28   34        17   26   31  
 4.   37   56   67        33   50   62  
 5.  100  120  134       109  123  135  

 1518b-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 10.40      132.44 
  
 3.   17   24   29        17   25   31  
 4.   33   47   57        33   45   59  
 5.   64  156  206        68  175  210  

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  5.48      18.77 

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 10.90      37.31 

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 18.99      65.00

100ge2p1e810cq-avf-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  4.96       5.47 
  
 3.   14   23   31        15   24   32  
 4.   21   42   56        25   47   59  
 5.   46   91  105        77   94  107  

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 10.92      12.06 
  
 3.   14   20   24        14   19   25  
 4.   29   38   45        23   32   39  
 5.   76   93  106        45   79   95  

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2. 16.74      18.48 
  
 3.   14   19   23        14   19   24  
 4.   25   34   40        24   34   41  
 5.   77  121  140        78  125  148  

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  2.11      26.86 
  
 3.   17   39   47        17   22   39  
 4.   38   94  113        39   69  107  
 5.  116  157  169       117  142  167  

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  5.49      69.91 
  
 3.   17   27   32        17   25   32  
 4.   27   56   69        52   74   82  
 5.   70  123  138       111  126  140  

 1518b-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  8.28      105.47 
  
 3.   17   21   27        17   28   36  
 4.   31   43   51        31   46   54  
 5.  135  172  193       134  217  244  

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  4.42      15.13 

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  8.87      30.36 

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 2.  8.91      30.50

100ge2p1e810cq-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  5.31       5.86 
  
 3.   14   21   35        14   22   31  
 4.   24   36   44        22   37   51  
 5.   82  100  117        52   90  108  

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  6.48       7.15 
  
 3.   14   19   27        14   18   20  
 4.   28   47   56        17   30   46  
 5.   77   89   96        24   71   93  

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  6.49       7.17 
  
 3.   14   17   24        13   15   24  
 4.   22   34   39        15   24   37  
 5.   66   79   91        18   62   81  

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  3.16      40.18 
  
 3.   17   31   37        17   29   38  
 4.   41   64   80        33   71   88  
 5.  106  123  140       110  134  150  

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  6.82      86.87 
  
 3.   17   23   30        17   27   38  
 4.   38   50   59        33   44   53  
 5.  118  136  153       118  135  152  

 1518b-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  4.89      62.25 
  
 3.   17   25   31        17   25   38  
 4.   23   36   46        29   43   53  
 5.   37  134  160        74  136  155  

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  5.56      19.04 

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2.  4.17      14.27 

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 2. 13.15      45.01