3n-skx-xxv710

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.53       3.28 
2. 2.58 3.35

3. 66 172 260 101 203 302
4. 82 121 145 139 236 293
5. 215 265 332 228 291 329

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.70       9.01 
2. 0.70 9.05

3. 110 233 344 134 239 330
4. 203 358 459 212 338 439
5. 429 603 708 438 588 693

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.57       5.67 
2. 1.60 5.78

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.41       4.87 
2. 4.54 5.02

3. 59 171 276 89 199 293
4. 50 62 72 50 86 98
5. 133 158 186 136 168 194

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.47       9.35 
2. 8.60 9.49

3. 60 152 193 87 199 276
4. 47 64 75 49 63 82
5. 115 133 150 113 131 150

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 16.09      17.77 
2. 16.50 18.22

3. 24 33 40 23 33 41
4. 48 57 65 47 56 64
5. 118 138 154 117 136 152

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.51      19.18 
2. 1.56 19.86

3. 94 206 296 84 193 285
4. 69 157 189 94 197 224
5. 152 204 2020 153 209 2199

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.75      35.03 
2. 2.79 35.56

3. 83 190 286 83 185 276
4. 84 145 215 70 103 137
5. 189 278 411 180 265 429

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.95      10.11 
2. 3.06 10.47

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.62      19.23 
2. 5.94 20.32

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.60      36.28 
2. 10.87 37.20

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.39       4.85 
2. 4.51 4.97

3. 61 162 195 108 210 298
4. 50 66 79 66 78 109
5. 133 160 195 132 159 196

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.10       8.95 
2. 8.23 9.08

3. 83 135 221 72 144 185
4. 53 70 90 53 72 88
5. 114 133 148 111 131 146

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 15.27      16.86 
2. 15.66 17.29

3. 20 34 44 24 38 44
4. 46 56 65 45 55 63
5. 122 142 159 120 140 157

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.24      15.75 
2. 1.26 16.07

3. 98 206 296 94 178 249
4. 104 193 276 95 161 197
5. 195 260 2215 169 239 2507

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.30      29.36 
2. 2.34 29.80

3. 58 181 288 81 192 276
4. 87 146 195 90 187 207
5. 167 212 263 161 202 257

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.68       9.17 
2. 2.77 9.50

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.22      17.86 
2. 5.35 18.32

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.64      33.00 
2. 9.79 33.50

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.63       3.41 
2. 2.64 3.43

3. 45 168 283 92 196 282
4. 95 163 208 87 136 167
5. 204 272 293 176 208 226

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.72       9.25 
2. 0.72 9.25

3. 103 227 333 122 237 345
4. 184 299 365 185 291 391
5. 455 600 701 452 596 700

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.65       5.98 
2. 1.67 6.04

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.81       5.32 
2. 4.86 5.37

3. 83 188 277 102 205 283
4. 54 94 123 60 86 107
5. 129 160 177 122 151 175

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.70      10.71 
2. 9.80 10.82

3. 52 94 116 57 128 158
4. 48 61 76 45 57 70
5. 111 128 143 110 129 145

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 21.08      23.27 
2. 21.29 23.50

3. 23 31 38 23 32 38
4. 48 56 61 48 55 61
5. 116 134 147 116 134 146

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.61      20.53 
2. 1.62 20.64

3. 67 168 255 113 225 316
4. 84 172 254 99 168 220
5. 161 195 235 161 214 261

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.17      40.43 
2. 3.19 40.63

3. 68 174 282 55 176 277
4. 87 137 187 91 151 173
5. 257 346 385 240 318 358

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.36      11.51 
2. 3.40 11.63

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.75      23.12 
2. 6.82 23.35

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 13.49      46.18 
2. 13.63 46.64

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.67       5.16 
2. 4.73 5.22

3. 103 222 313 58 151 261
4. 57 78 109 53 72 86
5. 127 155 175 122 150 172

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.62      10.62 
2. 9.72 10.73

3. 77 175 231 79 163 239
4. 52 74 98 57 84 118
5. 126 160 187 129 160 184

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 20.47      22.60 
2. 20.78 22.94

3. 25 34 41 22 32 41
4. 48 56 63 48 56 63
5. 123 142 157 122 142 155

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.33      16.93 
2. 1.34 17.10

3. 104 204 272 96 204 306
4. 87 140 166 108 178 218
5. 208 258 292 205 250 285

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.64      33.67 
2. 2.64 33.67

3. 87 184 281 35 172 292
4. 85 136 177 107 182 218
5. 200 239 263 224 251 278

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.11      10.66 
2. 3.11 10.66

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.17      21.11 
2. 6.20 21.22

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 12.35      42.26 
2. 12.47 42.68

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.83       0.91 
2. 0.83 0.92

3. 68 189 300 105 190 278
4. 149 347 522 182 369 552
5. 505 749 1041 528 783 1013

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.58       7.36 
2. 0.58 7.36

3. 89 206 311 90 197 296
4. 153 407 531 193 375 518
5. 403 799 1010 430 747 940

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.75       2.57 
2. 0.75 2.58

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.74       2.26 
2. 1.76 2.28

3. 106 206 279 109 204 272
4. 74 140 215 66 137 174
5. 181 223 252 189 232 253

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.52       6.77 
2. 0.52 6.77

3. 147 223 293 134 220 287
4. 193 398 434 190 364 464
5. 412 554 682 344 487 580

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.91       6.90 
2. 1.93 6.97

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.64       4.02 
2. 3.67 4.06

3. 66 135 221 87 184 260
4. 48 75 100 62 112 134
5. 107 129 144 132 164 190

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.88       7.59 
2. 6.91 7.63

3. 66 122 185 81 142 198
4. 46 62 71 43 58 67
5. 81 95 105 89 103 118

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.80       7.51 
2. 6.84 7.55

3. 20 39 48 19 30 40
4. 37 61 69 40 57 66
5. 82 95 104 86 104 122

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.13      14.40 
2. 1.14 14.48

3. 98 196 278 123 216 288
4. 82 161 247 152 242 299
5. 187 257 274 184 256 295

 1518b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.92      24.47 
2. 1.94 24.71

3. 119 187 259 120 206 278
4. 112 186 236 76 130 157
5. 146 189 227 153 184 203

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.39       8.17 
2. 2.40 8.21

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.64      15.87 
2. 4.71 16.11

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.70      16.07 
2. 4.72 16.15

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.60       3.97 
2. 3.64 4.01

3. 75 156 215 91 185 265
4. 73 109 130 104 172 209
5. 131 169 191 132 163 185

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.53       3.90 
2. 3.55 3.92

3. 73 165 206 59 158 193
4. 57 90 115 55 77 93
5. 121 149 181 114 140 157

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.76       7.47 
2. 6.83 7.54

3. 20 25 44 19 36 48
4. 42 59 71 41 61 87
5. 80 92 102 90 103 114

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.95      12.13 
2. 0.96 12.20

3. 129 225 299 130 225 303
4. 131 191 269 139 212 312
5. 270 322 366 276 342 404

 1518b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  0.95      12.15 
2. 0.96 12.21

3. 116 230 322 135 231 275
4. 101 223 286 119 204 239
5. 321 423 479 312 389 455

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.00      13.68 
2. 4.02 13.75

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.31      14.77 
2. 4.36 14.92

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.18       7.46 
2. 2.18 7.46

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.00       3.32 
2. 3.05 3.37

3. 66 173 260 98 206 309
4. 67 83 99 66 124 151
5. 171 196 217 184 234 259

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.91      11.59 
2. 0.91 11.65

3. 107 214 298 100 195 288
4. 151 258 332 124 222 305
5. 306 415 485 283 368 432

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.55      12.15 
2. 3.59 12.28

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.69       4.78 
2. 3.69 4.78

3. 77 182 319 114 221 274
4. 68 89 108 80 115 140
5. 89 110 131 91 113 135

 64b-8t4c-avf-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  7.31       9.48 
2. 7.50 9.72

3. 64 167 198 86 190 233
4. 81 107 129 77 97 118
5. 189 214 238 184 205 226

 imix-8t4c-avf-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  4.91      17.76 
2. 5.01 18.12

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  8.14       8.98 
2. 8.30 9.16

3. 86 189 245 66 179 224
4. 56 71 82 54 66 78
5. 157 178 194 123 137 150

 64b-8t4c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  7.87       8.69 
2. 8.28 9.14

3. 67 109 137 59 122 154
4. 62 77 91 53 68 79
5. 152 173 190 132 149 163

 imix-4t2c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  6.11      20.90 
2. 6.32 21.65

 imix-8t4c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  6.90      23.61 
2. 7.11 24.33

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  8.10       8.94 
2. 8.31 9.17

3. 69 102 122 69 132 154
4. 59 74 83 54 69 79
5. 160 178 194 130 147 161

 64b-8t4c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  7.82       8.64 
2. 8.22 9.08

3. 83 119 139 80 196 239
4. 59 75 89 63 77 90
5. 152 173 191 132 148 163

 imix-4t2c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.37      18.39 
2. 6.00 20.53

 imix-8t4c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  6.89      23.57 
2. 7.10 24.29

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.80       4.92 
2. 3.83 4.97

3. 97 196 315 110 223 311
4. 89 140 175 81 122 146
5. 112 141 169 109 135 158

 64b-8t4c-avf-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  7.29       9.45 
2. 7.44 9.65

3. 61 141 167 109 212 266
4. 78 106 127 100 132 157
5. 188 212 236 183 204 228

 imix-8t4c-avf-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  4.94      17.87 
2. 5.02 18.14

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  8.00       8.83 
2. 8.25 9.10

3. 79 146 176 84 148 217
4. 66 84 99 57 71 81
5. 162 184 201 126 141 154

 64b-8t4c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  7.79       8.60 
2. 8.19 9.04

3. 58 174 210 52 117 138
4. 58 73 85 58 74 85
5. 153 174 194 126 142 156

 imix-4t2c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  6.10      20.89 
2. 6.45 22.07

 imix-8t4c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  6.82      23.33 
2. 7.02 24.04

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  7.97       8.80 
2. 8.21 9.07

3. 83 189 231 99 204 246
4. 64 80 92 68 87 109
5. 171 196 216 134 153 169

 64b-8t4c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  7.71       8.51 
2. 8.15 8.99

3. 112 206 242 60 102 122
4. 71 88 105 54 66 77
5. 159 183 204 127 143 156

 imix-4t2c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.34      18.26 
2. 5.55 19.01

 imix-8t4c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  6.79      23.23 
2. 7.03 24.06

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.93       3.80 
2. 2.95 3.82

3. 69 183 283 88 214 324
4. 97 159 201 116 184 260
5. 191 233 271 210 254 284

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.73       9.49 
2. 0.73 9.49

3. 124 245 354 134 258 353
4. 162 243 337 165 261 308
5. 363 460 544 354 456 533

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.21       4.38 
2. 1.22 4.42

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.11       6.75 
2. 6.20 6.85

3. 82 165 218 102 199 299
4. 66 100 133 75 112 146
5. 146 167 179 143 165 178

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.74      10.75 
2. 9.89 10.91

3. 86 181 246 57 106 147
4. 48 68 88 43 56 66
5. 76 131 157 81 144 164

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 21.22      23.42 
2. 21.54 23.78

3. 26 35 44 25 34 40
4. 48 57 62 47 55 62
5. 112 141 156 111 140 155

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.71      21.78 
2. 1.73 22.00

3. 110 203 309 105 224 317
4. 84 138 231 81 120 222
5. 171 222 248 153 215 238

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.45      43.94 
2. 3.45 43.94

3. 91 190 289 113 203 275
4. 87 135 168 71 101 135
5. 185 216 241 175 205 228

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.87       9.81 
2. 2.89 9.91

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.37      18.37 
2. 5.42 18.56

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.88      44.09 
2. 12.88 44.09

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.03       6.65 
2. 6.12 6.75

3. 90 175 230 100 166 252
4. 67 92 123 54 85 97
5. 143 166 178 139 162 181

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 12.26      13.54 
2. 12.32 13.61

3. 45 120 151 77 166 213
4. 44 59 70 50 64 76
5. 138 159 176 144 163 178

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 23.73      26.20 
2. 24.09 26.60

3. 31 38 44 30 38 44
4. 52 60 67 51 59 66
5. 150 189 209 137 182 202

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.44      18.31 
2. 1.44 18.31

3. 94 197 271 119 224 314
4. 102 157 181 119 183 261
5. 173 212 263 172 238 280

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.79      35.48 
2. 2.79 35.48

3. 112 207 302 65 195 289
4. 66 98 123 84 174 198
5. 174 202 221 176 202 222

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.52      12.03 
2. 3.53 12.09

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.00      23.95 
2. 7.00 23.95

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 12.68      43.39 
2. 12.74 43.61

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.12       4.04 
2. 3.12 4.04

3. 66 160 238 60 159 263
4. 132 207 273 138 220 277
5. 197 248 284 210 256 276

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.61       7.89 
2. 0.61 7.93

3. 128 222 324 116 213 319
4. 212 468 567 252 429 508
5. 421 637 766 401 637 758

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.33       4.81 
2. 1.33 4.81

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.72       5.21 
2. 4.74 5.24

3. 103 202 292 85 182 271
4. 62 77 104 91 122 138
5. 115 149 166 86 139 176

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.31       5.87 
2. 5.37 5.93

3. 50 195 285 107 206 290
4. 73 121 145 76 115 149
5. 69 118 148 102 126 142

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.27      10.23 
2. 9.41 10.39

3. 20 33 42 20 32 44
4. 39 57 65 35 52 59
5. 69 121 138 43 110 129

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.42      18.08 
2. 1.43 18.17

3. 98 182 267 89 197 295
4. 89 167 232 91 187 286
5. 190 269 322 140 233 304

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.45      31.24 
2. 2.45 31.24

3. 45 172 276 25 167 280
4. 102 199 251 113 209 243
5. 167 204 244 131 179 227

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.30      14.71 
2. 4.30 14.71

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.64      12.47 
2. 3.68 12.60

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.19      31.45 
2. 9.23 31.60

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.65       5.13 
2. 4.70 5.19

3. 65 186 275 95 188 279
4. 63 92 121 61 78 92
5. 88 137 172 121 156 170

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.01       9.95 
2. 9.11 10.05

3. 101 184 254 76 167 255
4. 67 98 110 59 75 92
5. 102 152 180 149 172 188

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.48       4.95 
2. 5.67 6.26

3. 20 31 45 19 26 35
4. 36 50 59 27 42 56
5. 89 109 122 33 94 117

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.18      15.08 
2. 1.19 15.15

3. 102 192 282 69 172 261
4. 98 194 256 116 233 360
5. 221 319 375 184 307 408

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.15      27.34 
2. 2.21 28.18

3. 68 187 301 26 162 278
4. 120 205 271 134 235 304
5. 193 244 285 154 235 286

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.73       9.36 
2. 2.78 9.50

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.99      13.65 
2. 4.05 13.86

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.00      27.37 
2. 8.04 27.51

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.71       4.80 
2. 3.76 4.88

3. 79 224 300 123 249 344
4. 71 103 130 99 157 186
5. 113 147 167 112 149 179

 64b-8t4c-avf-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  7.18       9.30 
2. 7.43 9.63

3. 65 145 174 111 196 238
4. 76 106 131 84 112 138
5. 193 216 238 188 210 234

 imix-8t4c-avf-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  4.94      17.84 
2. 5.04 18.20

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  7.98       8.82 
2. 8.19 9.04

3. 55 145 168 64 164 258
4. 64 81 96 65 83 105
5. 161 182 199 126 141 154

 64b-8t4c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  7.78       8.59 
2. 8.18 9.04

3. 91 144 239 55 109 132
4. 60 74 86 57 73 85
5. 154 174 192 126 141 155

 imix-4t2c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  6.07      20.79 
2. 6.42 21.97

 imix-8t4c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  6.73      23.05 
2. 7.04 24.11

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  7.96       8.79 
2. 8.16 9.01

3. 84 152 171 86 204 296
4. 73 92 112 77 104 122
5. 159 182 201 128 146 161

 64b-8t4c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  7.72       8.52 
2. 8.11 8.96

3. 85 164 189 97 143 222
4. 69 87 105 56 75 87
5. 159 182 200 141 163 183

 imix-4t2c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.37      18.37 
2. 5.53 18.93

 imix-8t4c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  6.69      22.90 
2. 6.93 23.72

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.78       4.89 
2. 3.81 4.94

3. 83 198 305 95 237 321
4. 79 118 144 110 151 177
5. 123 151 178 122 152 182

 64b-8t4c-avf-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  6.45       8.36 
2. 6.62 8.57

3. 83 196 306 59 155 250
4. 96 126 143 79 112 129
5. 192 221 244 162 187 210

 imix-8t4c-avf-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.13      18.54 
2. 5.16 18.63

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  6.98       7.71 
2. 7.09 7.83

3. 72 144 196 114 232 348
4. 60 78 87 78 111 129
5. 141 161 176 112 131 153

 64b-8t4c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  6.83       7.54 
2. 7.14 7.89

3. 59 121 154 85 203 305
4. 69 90 112 70 91 117
5. 147 166 182 118 134 150

 imix-4t2c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.87      20.10 
2. 6.14 21.02

 imix-8t4c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  6.12      20.95 
2. 6.31 21.59

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  6.96       7.68 
2. 7.10 7.84

3. 64 129 146 104 220 295
4. 67 85 96 76 103 121
5. 147 169 189 116 136 156

 64b-8t4c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  6.78       7.48 
2. 7.12 7.87

3. 68 139 159 83 194 258
4. 57 70 80 78 101 122
5. 151 170 190 118 134 151

 imix-4t2c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.41      18.53 
2. 5.66 19.37

 imix-8t4c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  6.12      20.95 
2. 6.28 21.48

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.38       3.08 
2. 2.40 3.11

3. 24 52 71 23 77 100
4. 100 146 164 55 89 120
5. 178 229 608 174 222 717

 1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.67       8.70 
2. 0.67 8.70

3. 46 76 97 46 86 112
4. 118 399 523 178 295 378
5. 445 584 675 434 581 671

 imix-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.46       5.27 
2. 1.47 5.32

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.01       4.42 
2. 4.07 4.49

3. 25 56 77 23 50 81
4. 63 99 122 63 94 113
5. 129 155 187 127 153 184

 64b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.37       8.14 
2. 7.45 8.22

3. 20 36 54 22 46 66
4. 48 64 75 50 65 76
5. 108 128 146 105 125 142

 64b-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 13.65      15.06 
2. 13.78 15.22

3. 31 54 77 25 43 68
4. 46 56 64 43 57 66
5. 125 146 165 125 145 164

 1518b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.29      16.46 
2. 1.32 16.79

3. 25 63 93 25 48 69
4. 69 138 181 54 186 265
5. 210 295 368 196 269 325

 1518b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.40      30.61 
2. 2.40 30.61

3. 26 40 77 26 48 79
4. 55 73 90 49 78 91
5. 138 166 197 145 172 202

 imix-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.51       8.59 
2. 2.64 9.03

 imix-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.76      16.29 
2. 4.78 16.37

 imix-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.88      30.41 
2. 8.88 30.41

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.96       4.37 
2. 4.04 4.46

3. 20 50 84 20 33 42
4. 60 83 98 56 86 98
5. 131 165 201 131 168 199

 64b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.14       7.89 
2. 7.23 7.99

3. 26 57 84 27 56 82
4. 49 62 74 48 64 75
5. 118 137 162 119 139 164

 64b-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 13.06      14.42 
2. 13.13 14.49

3. 32 52 76 23 41 67
4. 46 57 68 47 59 68
5. 120 139 157 121 141 161

 1518b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.11      14.09 
2. 1.12 14.23

3. 26 44 71 25 54 92
4. 70 231 281 91 212 266
5. 183 261 336 163 258 295

 1518b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.08      26.49 
2. 2.08 26.49

3. 26 45 69 26 60 83
4. 60 92 114 60 94 110
5. 161 207 243 156 185 224

 imix-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.32       7.93 
2. 2.42 8.30

 imix-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.40      15.06 
2. 4.40 15.06

 imix-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.21      28.10 
2. 8.21 28.10

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.53       3.27 
2. 2.53 3.27

3. 23 52 81 23 65 77
4. 70 99 125 69 104 134
5. 189 226 252 204 233 270

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.72       9.32 
2. 0.72 9.32

3. 44 70 88 43 86 112
4. 148 243 327 99 341 462
5. 517 648 737 534 683 789

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.60       5.79 
2. 1.60 5.79

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.49       4.95 
2. 4.51 4.98

3. 20 39 67 19 29 42
4. 66 79 88 69 83 112
5. 130 160 182 126 153 177

 64b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.02       9.96 
2. 9.02 9.96

3. 33 62 79 30 51 79
4. 46 64 74 47 61 76
5. 124 146 165 121 143 160

 64b-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 18.29      20.19 
2. 18.47 20.39

3. 29 50 74 38 58 76
4. 46 54 62 47 55 62
5. 112 131 147 111 129 146

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.53      19.48 
2. 1.54 19.67

3. 25 35 60 25 37 46
4. 47 97 126 63 83 108
5. 255 312 359 239 290 334

 1518b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.85      36.25 
2. 2.85 36.25

3. 25 43 65 25 44 64
4. 65 94 109 67 113 141
5. 177 211 235 168 195 216

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.06      10.47 
2. 3.08 10.53

 imix-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.03      20.62 
2. 6.03 20.62

 imix-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.71      40.07 
2. 11.71 40.07

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.34       4.79 
2. 4.38 4.83

3. 20 45 63 20 40 67
4. 59 75 86 60 80 91
5. 124 155 180 122 154 179

 64b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.79       9.70 
2. 8.79 9.70

3. 20 52 80 29 47 77
4. 48 60 70 48 60 70
5. 124 146 163 121 142 160

 64b-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 17.97      19.84 
2. 17.97 19.84

3. 24 52 77 37 57 75
4. 47 57 65 47 55 63
5. 119 138 156 119 138 155

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.27      16.17 
2. 1.28 16.34

3. 25 51 68 25 48 84
4. 59 117 180 70 129 162
5. 238 306 351 250 316 361

 1518b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.43      30.99 
2. 2.43 30.99

3. 25 39 66 25 51 83
4. 70 101 115 52 74 89
5. 173 213 251 179 216 251

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.82       9.65 
2. 2.82 9.65

 imix-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.55      19.00 
2. 5.55 19.00

 imix-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.89      37.26 
2. 10.89 37.26

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.84       0.92 
2. 0.84 0.92

3. 25 64 87 25 53 123
4. 93 358 552 86 353 536
5. 419 666 857 437 803 1019

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.61       7.72 
2. 0.61 7.72

3. 31 76 115 30 38 56
4. 152 480 684 139 441 645
5. 566 815 1058 592 870 1142

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.76       2.62 
2. 0.76 2.62

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.99       3.88 
2. 3.01 3.90

3. 26 67 82 23 49 77
4. 60 105 118 68 121 148
5. 156 186 233 159 190 211

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.76       9.83 
2. 0.76 9.83

3. 45 83 101 45 59 72
4. 211 493 593 142 249 281
5. 503 635 751 354 449 533

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.83       6.62 
2. 1.84 6.65

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.19       6.83 
2. 6.25 6.90

3. 20 53 76 27 51 73
4. 47 67 75 47 65 76
5. 89 105 120 93 111 128

 64b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.54       7.22 
2. 6.57 7.26

3. 27 53 77 28 50 77
4. 40 53 63 42 60 74
5. 87 102 116 87 104 120

 64b-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.53       7.20 
2. 6.56 7.24

3. 20 53 80 29 50 68
4. 49 69 80 40 54 64
5. 77 91 101 87 104 120

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.80      22.92 
2. 1.81 23.04

3. 24 52 76 24 46 62
4. 68 143 175 74 142 169
5. 164 206 232 144 178 208

 1518b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.04      26.03 
2. 2.05 26.16

3. 24 63 79 24 54 82
4. 72 110 130 80 133 157
5. 165 222 259 168 217 236

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.97      13.60 
2. 3.99 13.67

 imix-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.20      14.38 
2. 4.20 14.38

 imix-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.20      14.38 
2. 4.22 14.45

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.17       6.81 
2. 6.23 6.88

3. 30 56 66 20 50 72
4. 49 71 82 54 74 85
5. 97 120 138 97 120 136

 64b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.63       7.32 
2. 6.67 7.36

3. 19 27 69 21 53 79
4. 44 60 68 47 66 76
5. 88 104 119 94 111 129

 64b-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.59       7.28 
2. 6.66 7.35

3. 27 44 68 25 55 74
4. 49 65 77 45 66 77
5. 95 111 125 93 109 123

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.40      17.84 
2. 1.40 17.84

3. 25 46 56 25 43 57
4. 60 144 171 74 166 196
5. 172 249 279 177 231 257

 1518b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.68      21.33 
2. 1.68 21.33

3. 24 56 77 24 56 85
4. 57 84 92 74 138 150
5. 167 203 225 192 243 273

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.60      12.33 
2. 3.62 12.39

 imix-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.80      13.00 
2. 3.82 13.07

 imix-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.78      12.92 
2. 3.79 12.99

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  5.22       5.76 
2. 5.30 5.85

3. 20 46 73 25 57 78
4. 48 88 101 50 65 79
5. 103 126 146 95 111 125

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.40      17.78 
2. 1.40 17.87

3. 25 51 78 25 58 73
4. 76 143 164 75 175 191
5. 184 244 277 177 214 238

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.14      10.75 
2. 3.16 10.80

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.62       3.39 
2. 3.47 4.49

3. 25 43 63 25 36 111
4. 70 103 121 61 119 130
5. 102 131 153 104 135 154

 64b-8t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  6.72       8.71 
2. 6.79 8.80

3. 30 54 68 34 56 71
4. 71 99 122 82 112 128
5. 181 206 229 189 219 246

 imix-8t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.47      19.78 
2. 5.55 20.08

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.88       8.69 
2. 7.92 8.74

3. 21 45 75 30 60 84
4. 50 67 80 55 75 89
5. 168 188 205 165 184 200

 64b-8t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.41       8.18 
2. 7.44 8.22

3. 28 52 73 23 52 71
4. 58 81 94 55 72 86
5. 134 153 168 135 154 170

 1518b-4t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.13      27.17 
2. 2.19 27.86

3. 26 39 50 26 43 61
4. 55 91 106 35 101 112
5. 91 128 140 108 138 164

 imix-4t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.48      22.19 
2. 6.55 22.42

 imix-8t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.03      20.64 
2. 6.09 20.85

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.83       8.65 
2. 7.91 8.74

3. 27 50 77 33 54 64
4. 52 67 79 57 79 89
5. 170 189 206 170 191 208

 64b-8t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.38       8.14 
2. 7.41 8.18

3. 29 52 62 21 47 69
4. 56 77 89 61 83 93
5. 133 152 169 139 159 177

 1518b-4t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.77      22.50 
2. 1.81 23.05

3. 27 54 64 27 43 73
4. 51 88 101 58 87 102
5. 88 109 131 91 144 172

 imix-4t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.71      19.54 
2. 5.79 19.83

 imix-8t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.02      20.60 
2. 6.11 20.92

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.54       4.59 
2. 3.70 4.80

3. 25 50 66 26 54 68
4. 61 101 128 63 88 113
5. 112 140 167 109 139 157

 64b-8t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  6.70       8.68 
2. 6.77 8.77

3. 25 67 92 25 55 68
4. 97 124 142 98 129 143
5. 205 237 267 196 226 253

 imix-8t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.45      19.72 
2. 5.54 20.01

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.77       8.58 
2. 7.85 8.66

3. 21 45 75 33 62 74
4. 56 75 81 61 82 101
5. 178 199 218 173 196 216

 64b-8t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.37       8.14 
2. 7.41 8.18

3. 26 55 69 21 66 81
4. 54 73 88 61 79 91
5. 141 166 185 144 167 186

 1518b-4t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.14      27.22 
2. 2.20 28.05

3. 27 60 70 26 79 101
4. 60 88 103 62 101 118
5. 94 122 143 107 139 159

 imix-4t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.35      21.73 
2. 6.48 22.17

 imix-8t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.92      20.25 
2. 6.01 20.55

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.76       8.57 
2. 7.88 8.69

3. 27 43 55 21 41 51
4. 60 77 85 67 84 91
5. 185 207 225 186 208 228

 64b-8t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.25       8.01 
2. 7.36 8.13

3. 27 61 76 23 57 72
4. 62 81 92 63 89 105
5. 152 175 196 138 159 177

 imix-4t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.66      19.38 
2. 5.69 19.48

 imix-8t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.94      20.34 
2. 6.03 20.65

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.58       3.35 
2. 2.61 3.38

3. 23 57 87 23 55 70
4. 83 133 169 76 136 171
5. 217 300 338 156 235 294

 1518b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.68       8.85 
2. 0.68 8.85

3. 54 111 142 54 85 108
4. 136 225 287 117 203 246
5. 388 509 607 354 488 581

 imix-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.57       5.67 
2. 1.58 5.70

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.13       5.67 
2. 5.18 5.72

3. 20 44 67 19 44 63
4. 52 72 85 51 74 93
5. 134 185 201 125 173 189

 64b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.05      11.09 
2. 10.18 11.24

3. 24 49 75 26 51 74
4. 50 65 80 48 62 71
5. 109 141 159 103 142 161

 64b-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 18.79      20.75 
2. 19.08 21.06

3. 34 54 76 27 53 77
4. 47 59 70 48 60 70
5. 96 150 192 96 147 190

 1518b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.56      19.84 
2. 1.57 19.94

3. 25 56 76 24 65 76
4. 57 92 128 59 119 134
5. 157 208 236 152 202 239

 1518b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.92      37.17 
2. 2.98 37.92

3. 25 57 76 26 60 85
4. 62 88 102 63 90 113
5. 151 190 215 143 179 202

 imix-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.19      10.92 
2. 3.19 10.92

 imix-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.22      21.27 
2. 6.22 21.27

 imix-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 11.19      38.29 
2. 11.19 38.29

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.03       5.55 
2. 5.08 5.60

3. 20 52 75 20 44 68
4. 54 72 87 54 78 94
5. 117 162 178 111 148 178

 64b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.01      11.05 
2. 10.16 11.22

3. 26 55 80 34 55 81
4. 47 59 69 48 59 69
5. 111 143 164 104 142 164

 64b-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 18.66      20.60 
2. 18.95 20.92

3. 37 55 73 36 53 69
4. 46 58 69 45 57 67
5. 97 150 190 97 146 186

 1518b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.28      16.30 
2. 1.29 16.38

3. 26 58 81 25 69 92
4. 56 134 156 71 159 203
5. 174 234 269 171 240 283

 1518b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.47      31.41 
2. 2.48 31.56

3. 25 51 71 25 46 75
4. 59 87 110 60 78 93
5. 142 180 206 150 182 212

 imix-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.95      10.10 
2. 2.98 10.21

 imix-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.74      19.66 
2. 5.74 19.66

 imix-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.27      35.14 
2. 10.27 35.14

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.08       2.69 
2. 2.10 2.72

3. 23 47 77 23 45 65
4. 60 122 157 49 104 144
5. 184 244 308 120 233 294

 1518b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.60       7.72 
2. 0.60 7.76

3. 43 82 136 44 72 102
4. 142 465 551 129 324 461
5. 505 694 805 364 576 789

 imix-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.28       4.61 
2. 1.28 4.61

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.20       4.64 
2. 4.22 4.66

3. 20 45 60 19 44 78
4. 45 76 92 46 72 88
5. 116 146 169 81 145 181

 64b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.95       5.47 
2. 5.00 5.52

3. 20 38 62 19 29 79
4. 41 59 78 39 63 82
5. 104 124 155 51 111 140

 64b-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.07       8.91 
2. 8.15 9.00

3. 20 47 71 19 50 82
4. 42 61 77 41 62 83
5. 79 119 142 46 119 147

 1518b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.27      16.19 
2. 1.27 16.19

3. 25 45 70 24 37 80
4. 71 99 115 39 115 145
5. 164 206 247 109 201 234

 1518b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.49      18.96 
2. 1.49 18.96

3. 25 44 67 24 39 78
4. 48 93 112 31 89 129
5. 127 191 210 62 140 221

 imix-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.59       8.86 
2. 2.59 8.86

 imix-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.14      10.76 
2. 3.14 10.76

 imix-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.94      16.92 
2. 4.97 17.01

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.19       4.63 
2. 4.23 4.67

3. 20 45 71 19 47 82
4. 42 75 89 39 64 83
5. 121 155 179 83 142 172

 64b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.95       5.47 
2. 4.98 5.50

3. 20 49 68 19 44 71
4. 39 57 75 36 63 83
5. 99 123 147 49 114 148

 64b-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.01       8.85 
2. 8.09 8.94

3. 20 47 77 19 45 78
4. 43 61 78 40 59 78
5. 77 118 140 44 120 149

 1518b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.04      13.22 
2. 1.04 13.22

3. 25 40 51 25 60 87
4. 55 224 250 55 112 173
5. 218 323 404 155 262 346

 1518b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.25      15.91 
2. 1.25 15.91

3. 25 54 80 25 36 71
4. 48 155 214 35 89 190
5. 169 246 285 54 164 265

 imix-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.39       8.19 
2. 2.40 8.22

 imix-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.83       9.70 
2. 2.88 9.84

 imix-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.58      15.66 
2. 4.58 15.66

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.48       4.52 
2. 3.64 4.72

3. 28 54 71 25 55 64
4. 58 93 119 65 104 124
5. 102 130 154 103 138 165

 64b-8t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  6.66       8.63 
2. 6.76 8.76

3. 33 58 72 27 62 72
4. 91 117 139 75 97 123
5. 197 227 254 192 219 243

 imix-8t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.44      19.66 
2. 5.52 19.95

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.78       8.59 
2. 7.86 8.68

3. 38 60 72 21 58 69
4. 53 67 81 63 84 92
5. 176 197 215 172 193 211

 64b-8t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.27       8.02 
2. 7.38 8.14

3. 22 58 78 21 58 78
4. 54 71 82 62 81 91
5. 142 165 184 144 167 185

 1518b-4t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.14      27.28 
2. 2.20 27.98

3. 26 45 58 26 53 64
4. 40 104 133 62 131 151
5. 88 116 128 92 113 128

 imix-4t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.40      21.92 
2. 6.47 22.14

 imix-8t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.96      20.39 
2. 6.05 20.69

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.71       8.51 
2. 7.79 8.60

3. 27 47 63 21 26 49
4. 59 80 91 58 76 87
5. 177 198 216 174 196 214

 64b-8t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.27       8.02 
2. 7.34 8.11

3. 25 51 61 29 46 57
4. 55 74 85 50 68 82
5. 151 174 195 140 161 178

 imix-4t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.61      19.21 
2. 5.67 19.40

 imix-8t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.91      20.21 
2. 5.97 20.42

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.56       4.62 
2. 3.80 4.93

3. 25 52 67 25 58 69
4. 59 78 105 64 110 136
5. 106 135 160 113 144 169

 64b-8t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.99       7.76 
2. 6.08 7.88

3. 34 56 71 25 94 111
4. 97 132 143 86 111 128
5. 216 250 282 176 200 229

 imix-8t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.05      18.26 
2. 5.13 18.54

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.72       7.42 
2. 6.86 7.57

3. 28 51 62 21 46 75
4. 54 79 91 62 87 97
5. 169 194 218 143 166 184

 64b-8t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.45       7.12 
2. 6.54 7.22

3. 21 48 88 22 57 71
4. 69 91 101 55 73 85
5. 147 174 193 119 138 158

 1518b-4t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.17      27.62 
2. 2.23 28.46

3. 26 40 53 26 69 85
4. 73 95 107 55 115 126
5. 91 110 129 109 138 157

 imix-4t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.80      19.86 
2. 5.92 20.26

 imix-8t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.36      18.34 
2. 5.44 18.61

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-4t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.76       7.46 
2. 6.83 7.54

3. 21 39 85 21 62 93
4. 67 90 96 63 83 95
5. 157 181 201 149 177 197

 64b-8t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.48       7.16 
2. 6.55 7.23

3. 22 44 59 35 50 64
4. 54 70 86 55 69 83
5. 139 163 181 128 147 165

 imix-4t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.65      19.33 
2. 5.76 19.72

 imix-8t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.42      18.56 
2. 5.51 18.84