3n-icx-xxv710

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.95       3.82 
2. 3.13 4.06

3. 69 181 291 49 158 258
4. 139 239 326 170 294 359
5. 186 294 366 173 249 320

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.91      11.81 
2. 0.91 11.81

3. 117 226 351 151 237 322
4. 200 335 432 195 310 442
5. 427 580 669 347 454 555

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.86       6.71 
2. 1.93 6.98

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.76       4.16 
2. 4.29 4.73

3. 61 158 260 44 148 245
4. 58 93 126 87 143 169
5. 100 140 187 94 140 181

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.74       8.55 
2. 8.18 9.03

3. 63 110 159 66 149 185
4. 42 56 70 44 74 92
5. 88 106 123 83 102 120

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 15.00      16.56 
2. 15.30 16.89

3. 18 28 34 18 28 35
4. 38 50 57 38 47 56
5. 86 100 114 86 103 116

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.05      26.15 
2. 2.14 27.22

3. 50 157 264 67 154 214
4. 79 160 201 68 164 232
5. 135 228 268 142 187 236

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 66 167 274 94 201 292
4. 66 92 106 76 119 136
5. 118 139 158 129 156 177

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.03      10.37 
2. 3.31 11.35

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.77      19.74 
2. 5.83 19.94

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.51      35.96 
2. 10.51 35.96

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.56       3.93 
2. 4.10 4.52

3. 78 200 304 49 158 256
4. 84 161 197 115 208 261
5. 133 204 277 133 194 298

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.77       7.47 
2. 7.32 8.09

3. 67 142 232 72 150 242
4. 45 62 78 49 71 82
5. 93 113 141 91 111 133

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 12.99      14.34 
2. 13.25 14.63

3. 18 24 33 18 23 31
4. 39 53 62 38 47 57
5. 119 144 167 117 141 164

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.93      24.61 
2. 1.98 25.23

3. 53 177 265 87 173 262
4. 68 150 170 83 173 209
5. 151 212 305 132 218 313

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.51      44.76 
2. 3.51 44.76

3. 79 158 217 64 163 264
4. 60 104 161 60 87 103
5. 106 124 142 107 125 140

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.73       9.34 
2. 3.00 10.27

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.14      17.58 
2. 5.19 17.75

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.49      32.50 
2. 9.49 32.50

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.21       4.16 
2. 3.22 4.18

3. 87 206 305 56 165 262
4. 85 188 212 104 198 242
5. 166 219 269 151 203 239

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.94      12.19 
2. 0.94 12.19

3. 106 207 312 104 219 313
4. 180 275 355 168 363 471
5. 344 441 538 384 557 646

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.05       7.41 
2. 2.05 7.41

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.17       5.71 
2. 5.20 5.74

3. 79 189 293 43 153 246
4. 77 119 168 90 171 222
5. 134 164 186 115 197 209

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.33      11.40 
2. 10.49 11.58

3. 69 158 223 48 117 168
4. 44 58 71 44 64 82
5. 101 120 137 93 105 117

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 19.44      21.46 
2. 20.26 22.36

3. 21 28 34 20 28 34
4. 39 48 55 39 48 57
5. 73 201 289 72 198 289

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.87      36.55 
2. 2.88 36.73

3. 66 181 272 90 169 250
4. 61 105 137 79 107 119
5. 117 150 167 126 151 171

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 54 158 240 69 165 250
4. 49 72 87 55 76 121
5. 70 85 93 73 91 105

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.46      15.27 
2. 4.51 15.43

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.12      31.20 
2. 9.25 31.67

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 14.32      49.00 
2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.86       5.37 
2. 4.91 5.42

3. 74 210 313 39 150 244
4. 101 143 174 70 116 173
5. 126 158 184 113 168 199

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.81      10.83 
2. 9.96 10.99

3. 51 122 202 49 152 216
4. 50 71 82 48 62 73
5. 98 112 126 96 113 126

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 18.06      19.94 
2. 18.71 20.65

3. 19 26 33 20 33 38
4. 39 45 51 42 50 60
5. 77 233 333 76 230 332

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.70      34.42 
2. 2.72 34.59

3. 91 194 274 104 198 287
4. 71 136 193 65 112 162
5. 139 177 209 127 176 198

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 53 147 178 50 152 238
4. 62 88 125 56 77 94
5. 70 94 110 75 109 117

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.24      14.52 
2. 4.26 14.59

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.65      29.61 
2. 8.83 30.21

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 14.32      49.00 
2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  4.26       5.52 
2. 4.30 5.57

3. 74 171 255 80 186 264
4. 54 94 126 80 136 155
5. 157 198 230 138 176 200

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.03      13.37 
2. 1.03 13.37

3. 138 199 279 128 195 268
4. 160 254 316 160 241 301
5. 329 421 496 335 438 493

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.26       8.18 
2. 2.28 8.22

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.87       8.69 
2. 7.91 8.73

3. 104 158 250 70 162 225
4. 48 75 89 50 92 112
5. 88 108 118 78 92 106

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.80       8.61 
2. 7.84 8.66

3. 51 140 230 44 114 172
4. 44 68 90 40 53 65
5. 80 95 106 71 86 94

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.84       8.66 
2. 7.92 8.74

3. 17 18 41 17 35 49
4. 33 49 59 33 57 70
5. 76 92 107 77 95 109

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 65 147 241 102 161 235
4. 66 90 122 72 113 149
5. 146 172 185 133 153 168

 1518b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 92 189 268 77 164 242
4. 51 92 102 68 113 123
5. 91 110 124 101 126 132

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.42      21.99 
2. 6.49 22.21

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.47      22.14 
2. 6.53 22.36

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.51      22.27 
2. 6.57 22.49

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.64       8.44 
2. 7.72 8.52

3. 77 161 254 101 175 234
4. 72 112 130 79 119 141
5. 121 140 152 99 129 140

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.64       8.43 
2. 7.71 8.51

3. 31 74 139 47 132 150
4. 37 50 66 48 66 78
5. 79 95 115 77 92 102

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.69       8.49 
2. 7.77 8.58

3. 17 34 42 17 18 20
4. 36 68 86 39 75 93
5. 82 102 113 84 103 116

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.60      45.81 
2. 3.67 46.74

3. 104 192 257 91 158 233
4. 73 101 109 54 96 117
5. 150 170 191 139 157 171

 1518b-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 94 155 225 67 157 205
4. 64 85 104 78 100 138
5. 111 131 141 103 115 135

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.14      21.03 
2. 6.21 21.24

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.25      21.38 
2. 6.34 21.71

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.30      21.56 
2. 6.36 21.78

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.56       7.20 
2. 5.90 7.65

3. 111 217 311 100 204 261
4. 78 121 135 100 149 221
5. 119 147 170 142 181 206

 64b-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  6.19       8.03 
2. 6.68 8.65

3. 70 170 251 67 147 245
4. 70 94 106 63 92 110
5. 105 126 145 101 116 129

 1518b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.43       5.55 
2. 0.44 5.75

3. 151 228 318 123 206 268
4. 128 220 310 82 184 269
5. 161 283 403 138 419 466

 imix-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.56       5.65 
2. 1.56 5.65

 imix-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.94      21.46 
2. 6.63 23.96

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  4.46       4.92 
2. 7.29 8.05

3. 115 204 284 111 188 252
4. 96 133 168 95 131 182
5. 102 118 125 112 133 160

 64b-2t4c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  6.09       6.72 
2. 6.56 7.25

3. 83 214 314 47 141 211
4. 77 107 122 64 89 104
5. 90 105 116 102 121 143

 1518b-2t2c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 82 194 284 71 147 210
4. 66 97 115 57 96 127
5. 84 103 110 91 120 130

 imix-2t2c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.88      20.13 
2. 6.63 22.70

 imix-2t4c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.66      19.36 
2. 5.89 20.16

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  4.83       5.33 
2. 6.62 7.31

3. 65 202 292 105 160 238
4. 67 95 107 68 102 127
5. 103 122 137 105 132 146

 64b-2t4c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.81       6.42 
2. 6.52 7.20

3. 43 143 261 85 159 206
4. 55 74 93 64 85 126
5. 85 104 113 103 124 142

 1518b-2t2c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 77 181 265 94 149 238
4. 56 87 102 67 100 118
5. 85 112 123 98 123 134

 imix-2t2c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.69      19.46 
2. 6.64 22.73

 imix-2t4c-avf-ethip4ipsec1tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.44      18.61 
2. 5.75 19.67

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.61       7.27 
2. 5.72 7.42

3. 80 203 323 94 212 299
4. 110 172 248 95 150 205
5. 198 239 263 153 217 262

 64b-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.49       7.11 
2. 5.49 7.11

3. 93 212 318 76 204 324
4. 88 131 174 73 119 180
5. 156 206 234 83 159 194

 1518b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.51       6.54 
2. 0.51 6.58

3. 152 267 375 132 237 309
4. 118 249 342 135 235 330
5. 145 284 423 181 293 413

 imix-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.30       4.71 
2. 1.30 4.71

 imix-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.38      19.44 
2. 5.54 20.04

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.42       5.99 
2. 5.62 6.20

3. 72 194 313 105 208 308
4. 84 123 156 74 124 155
5. 157 198 217 99 150 197

 64b-2t4c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.33       5.88 
2. 5.35 5.91

3. 84 216 310 69 204 272
4. 82 129 159 74 149 188
5. 130 157 202 92 136 154

 1518b-2t2c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 114 225 342 87 214 302
4. 85 127 186 68 111 149
5. 137 157 168 108 154 171

 imix-2t2c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.68      19.45 
2. 5.74 19.64

 imix-2t4c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.24      17.93 
2. 5.37 18.39

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.56       6.14 
2. 5.59 6.17

3. 87 205 328 87 200 320
4. 82 136 193 87 147 211
5. 145 183 228 100 152 182

 64b-2t4c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.36       5.91 
2. 5.41 5.97

3. 105 234 347 96 204 304
4. 68 101 156 68 106 140
5. 132 164 196 93 144 165

 1518b-2t2c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 105 213 308 96 216 280
4. 73 143 177 69 111 184
5. 142 169 183 117 149 163

 imix-2t2c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.61      19.19 
2. 5.74 19.65

 imix-2t4c-avf-ethip4ipsec2tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.23      17.90 
2. 5.31 18.17

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.26       2.93 
2. 2.36 3.06

3. 65 165 268 59 170 279
4. 137 223 273 164 277 366
5. 180 236 319 202 318 373

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.83      10.73 
2. 0.83 10.73

3. 104 229 343 109 216 326
4. 174 288 384 175 282 373
5. 462 669 773 457 604 758

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.54       5.58 
2. 1.57 5.67

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.82       3.12 
2. 2.82 3.12

3. 89 208 321 53 171 270
4. 111 216 281 118 237 327
5. 175 269 334 177 250 303

 64b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.18       5.72 
2. 5.20 5.75

3. 90 166 281 95 200 281
4. 56 79 100 76 128 151
5. 109 147 174 127 150 164

 64b-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.34       9.20 
2. 8.68 9.58

3. 20 29 35 20 28 34
4. 40 57 72 38 50 59
5. 74 138 198 72 136 194

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.76      22.42 
2. 1.77 22.53

3. 93 193 267 79 166 248
4. 89 152 219 78 130 170
5. 165 255 284 156 204 233

 1518b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.34      42.48 
2. 3.34 42.48

3. 77 165 252 107 176 267
4. 75 121 151 79 112 149
5. 126 162 178 135 176 202

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.35       8.03 
2. 2.37 8.11

 imix-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.47      15.31 
2. 4.54 15.55

 imix-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.13      24.40 
2. 7.41 25.36

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.66       2.93 
2. 2.66 2.93

3. 54 159 256 45 182 292
4. 115 178 269 124 202 298
5. 148 250 287 142 239 273

 64b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.93       5.44 
2. 4.93 5.44

3. 65 155 255 63 180 269
4. 50 81 107 54 75 93
5. 104 128 141 88 106 122

 64b-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.80       8.62 
2. 8.04 8.88

3. 20 23 30 20 29 37
4. 37 48 59 38 54 66
5. 71 145 226 70 145 224

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.65      21.05 
2. 1.66 21.16

3. 77 188 289 110 200 291
4. 75 148 223 93 150 214
5. 116 150 173 137 165 190

 1518b-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.16      40.22 
2. 3.16 40.22

3. 61 156 253 74 170 230
4. 62 79 92 62 82 142
5. 134 167 186 129 168 194

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.29       7.83 
2. 2.31 7.91

 imix-4t2c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.29      14.67 
2. 4.35 14.89

 imix-8t4c-avf-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.78      23.22 
2. 7.10 24.29

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.66       4.74 
2. 3.68 4.77

3. 65 174 282 48 149 251
4. 110 181 248 105 167 204
5. 159 221 270 152 213 253

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.95      12.34 
2. 0.96 12.46

3. 130 235 345 141 238 320
4. 196 324 403 183 316 417
5. 373 536 651 357 490 588

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.11       7.61 
2. 2.14 7.72

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.54       7.22 
2. 6.61 7.29

3. 39 134 231 74 167 260
4. 62 96 126 58 108 143
5. 104 137 170 92 127 149

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.62      13.93 
2. 12.88 14.22

3. 56 120 146 43 104 165
4. 43 58 70 40 53 65
5. 88 112 126 82 109 123

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 26.04      28.75 
2. 26.43 29.18

3. 23 30 36 20 28 35
4. 42 51 58 41 49 57
5. 96 144 183 94 142 179

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.37      42.98 
2. 3.41 43.41

3. 67 163 268 76 155 249
4. 65 102 121 65 99 126
5. 150 198 217 137 182 206

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 74 172 246 92 170 234
4. 51 85 134 55 88 112
5. 78 113 126 75 99 114

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.41      18.52 
2. 5.46 18.70

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.06      34.43 
2. 10.06 34.43

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 14.32      49.00 
2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.42       7.09 
2. 6.52 7.20

3. 55 147 236 56 158 256
4. 88 160 201 56 83 101
5. 113 159 199 90 131 153

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 12.46      13.75 
2. 12.84 14.17

3. 59 131 201 64 141 200
4. 46 70 88 44 58 77
5. 91 115 130 84 112 126

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 25.48      28.14 
2. 25.87 28.56

3. 21 30 35 22 30 37
4. 42 51 58 42 51 58
5. 94 140 177 93 138 174

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.17      40.34 
2. 3.20 40.75

3. 83 180 261 56 164 256
4. 75 115 139 99 154 170
5. 152 197 224 136 191 213

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 85 179 261 94 179 266
4. 54 104 125 58 96 117
5. 85 112 130 75 96 105

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.24      17.92 
2. 5.29 18.10

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.65      33.04 
2. 9.75 33.37

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 14.32      49.00 
2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.02       3.92 
2. 3.10 4.02

3. 67 195 303 49 167 268
4. 100 158 235 128 221 295
5. 163 209 243 147 202 263

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.84      10.84 
2. 0.84 10.90

3. 148 254 361 122 232 331
4. 142 267 397 124 250 361
5. 365 569 702 296 541 629

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.76       6.36 
2. 1.78 6.42

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.27       5.82 
2. 5.32 5.87

3. 92 164 265 38 144 235
4. 74 114 151 70 132 179
5. 84 110 136 108 157 183

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.23       6.87 
2. 6.26 6.91

3. 60 140 202 63 165 265
4. 63 118 157 62 122 177
5. 82 116 154 59 108 141

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.52      11.61 
2. 10.68 11.79

3. 17 26 40 17 26 37
4. 34 55 68 24 47 61
5. 60 110 134 37 92 113

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.69      34.25 
2. 2.72 34.59

3. 69 174 273 89 191 283
4. 70 131 195 77 157 221
5. 140 170 193 100 151 184

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.26      41.50 
2. 3.29 41.91

3. 52 137 232 23 162 268
4. 82 171 233 66 169 273
5. 153 201 248 77 135 187

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.31      14.77 
2. 4.35 14.89

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.10      17.46 
2. 5.15 17.64

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.63      29.55 
2. 8.72 29.84

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.15       5.69 
2. 5.21 5.75

3. 79 181 288 51 156 260
4. 64 100 157 87 131 174
5. 132 150 234 60 162 170

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.08       6.71 
2. 6.14 6.78

3. 66 142 241 79 167 257
4. 47 102 155 66 119 177
5. 86 114 139 58 95 123

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 10.30      11.37 
2. 10.45 11.54

3. 18 27 37 17 25 37
4. 28 47 57 25 43 53
5. 65 112 133 37 94 118

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.56      32.57 
2. 2.58 32.90

3. 95 170 248 89 193 277
4. 64 119 194 82 174 237
5. 174 204 237 150 204 230

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.06      38.99 
2. 3.09 39.38

3. 41 144 244 27 179 277
4. 48 141 174 84 180 228
5. 120 174 220 89 161 206

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.14      14.18 
2. 4.19 14.33

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.92      16.84 
2. 5.00 17.10

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.37      28.66 
2. 8.46 28.95

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.49       7.12 
2. 5.58 7.23

3. 87 209 341 98 209 338
4. 99 157 215 101 177 238
5. 197 229 257 145 205 236

 64b-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.43       7.04 
2. 5.46 7.07

3. 104 212 298 98 213 316
4. 78 114 163 64 125 188
5. 153 193 224 103 148 173

 1518b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.49       6.33 
2. 0.50 6.49

3. 147 259 368 146 250 346
4. 130 234 348 154 272 363
5. 161 278 357 203 361 462

 imix-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.33       4.82 
2. 1.33 4.82

 imix-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.34      19.31 
2. 5.48 19.80

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.43       5.99 
2. 5.51 6.08

3. 101 224 342 101 216 295
4. 93 169 268 97 208 263
5. 135 171 231 112 173 196

 64b-2t4c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.35       5.90 
2. 5.35 5.90

3. 111 238 361 94 201 278
4. 74 115 144 64 101 146
5. 147 195 233 91 150 172

 1518b-2t2c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  3.83      48.76 
2. 3.85 49.00

3. 61 173 284 110 226 334
4. 79 126 200 79 124 168
5. 144 174 208 107 145 171

 imix-2t2c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.54      18.97 
2. 5.60 19.16

 imix-2t4c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.13      17.57 
2. 5.29 18.10

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.37       5.93 
2. 5.42 5.99

3. 99 248 379 105 221 337
4. 83 129 190 77 126 169
5. 145 188 207 127 169 211

 64b-2t4c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.31       5.87 
2. 5.34 5.90

3. 103 217 335 87 217 331
4. 85 127 177 84 169 210
5. 158 207 238 106 164 180

 1518b-2t2c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 95 201 322 62 182 286
4. 81 131 168 68 106 193
5. 154 190 218 115 142 158

 imix-2t2c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.65      19.33 
2. 5.71 19.53

 imix-2t4c-avf-ethip4ipsec4tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.17      17.71 
2. 5.33 18.25

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.55       7.20 
2. 5.58 7.23

3. 79 207 341 75 203 303
4. 85 127 176 96 178 233
5. 171 207 240 133 202 246

 64b-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.38       6.97 
2. 5.43 7.04

3. 95 225 353 115 221 351
4. 81 123 170 75 114 152
5. 144 174 198 112 167 203

 1518b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.47       6.04 
2. 0.47 6.04

3. 150 258 344 153 248 350
4. 148 257 360 133 242 329
5. 150 271 334 159 283 378

 imix-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.36       4.93 
2. 1.39 5.01

 imix-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.30      19.17 
2. 5.41 19.56

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.39       5.96 
2. 5.42 5.99

3. 97 207 324 86 203 270
4. 82 127 174 94 163 209
5. 138 176 215 115 155 224

 64b-2t4c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.29       5.84 
2. 5.31 5.86

3. 94 209 333 96 219 329
4. 97 147 218 83 141 176
5. 135 153 183 95 150 169

 1518b-2t2c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 79 215 286 68 196 297
4. 84 119 157 73 110 149
5. 132 155 177 112 155 168

 imix-2t2c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.61      19.21 
2. 5.67 19.40

 imix-2t4c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes128gcm-ndrpdr

 1.  5.18      17.73 
2. 5.31 18.18

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.40       5.96 
2. 5.53 6.11

3. 91 221 346 88 212 299
4. 108 185 240 87 145 218
5. 141 179 211 104 146 199

 64b-2t4c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.32       5.87 
2. 5.32 5.87

3. 108 229 345 111 218 328
4. 70 121 162 80 162 214
5. 154 185 212 104 134 164

 1518b-2t2c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 99 201 289 65 199 311
4. 73 113 141 78 138 191
5. 139 169 201 116 157 171

 imix-2t2c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.58      19.11 
2. 5.67 19.40

 imix-2t4c-avf-ethip4ipsec8tnlswasync- 
scheduler-ip4base-int-aes256gcm-ndrpdr

 1.  5.19      17.76 
2. 5.27 18.03

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.93       3.80 
2. 2.99 3.87

3. 20 60 76 20 37 46
4. 63 110 143 64 163 205
5. 151 219 276 145 217 262

 1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.86      11.15 
2. 0.86 11.15

3. 48 83 109 44 94 119
4. 149 351 439 167 342 406
5. 411 589 721 429 575 687

 imix-2t1c-ethip4ipsec10000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.81       6.53 
2. 1.82 6.59

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.86       4.26 
2. 4.16 4.59

3. 17 39 69 17 29 39
4. 48 81 107 49 90 116
5. 99 137 357 101 130 316

 64b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.07       7.80 
2. 7.35 8.12

3. 24 53 78 18 45 70
4. 46 64 81 46 66 83
5. 92 113 137 92 112 135

 64b-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.81      14.14 
2. 13.13 14.50

3. 22 51 70 32 59 78
4. 41 54 64 41 53 65
5. 147 177 211 147 177 213

 1518b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.84      23.45 
2. 1.84 23.45

3. 22 42 58 23 53 83
4. 43 88 128 52 72 87
5. 149 192 227 155 220 258

 1518b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.22      41.05 
2. 3.22 41.05

3. 23 54 82 33 64 81
4. 47 67 83 45 61 75
5. 119 145 169 117 157 187

 imix-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.72       9.30 
2. 2.82 9.66

 imix-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.77      16.34 
2. 4.77 16.34

 imix-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.93      30.55 
2. 8.93 30.55

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.37       3.72 
2. 3.73 4.12

3. 18 44 74 17 41 60
4. 57 109 151 59 103 141
5. 133 183 765 136 187 901

 64b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.14       6.78 
2. 6.49 7.17

3. 25 55 83 18 41 50
4. 43 61 73 43 58 81
5. 111 139 185 110 140 182

 64b-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 11.11      12.26 
2. 11.16 12.32

3. 35 60 80 27 51 78
4. 41 54 66 41 54 66
5. 108 129 151 108 129 149

 1518b-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.71      21.81 
2. 1.73 22.03

3. 22 42 58 40 68 83
4. 44 88 109 44 86 104
5. 133 220 253 144 180 223

 1518b-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.07      39.04 
2. 3.07 39.04

3. 30 55 77 34 62 78
4. 53 72 89 62 83 95
5. 129 159 184 124 158 182

 imix-2t1c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.46       8.41 
2. 2.46 8.41

 imix-4t2c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.47      15.28 
2. 4.47 15.28

 imix-8t4c-ethip4ipsec10000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.35      28.58 
2. 8.35 28.58

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  3.29       4.26 
2. 3.29 4.26

3. 21 57 84 21 51 62
4. 78 147 164 72 167 193
5. 168 224 270 175 231 264

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.97      12.49 
2. 0.97 12.49

3. 55 79 102 48 101 121
4. 138 198 254 120 197 252
5. 445 574 671 440 557 661

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.00       7.23 
2. 2.00 7.23

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.07       5.60 
2. 5.07 5.60

3. 19 50 69 19 48 77
4. 50 69 85 44 64 81
5. 93 113 139 86 120 159

 64b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 10.00      11.04 
2. 10.05 11.10

3. 26 53 75 21 47 75
4. 46 65 80 45 65 83
5. 86 101 119 83 103 123

 64b-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 21.54      23.78 
2. 21.65 23.90

3. 31 51 76 21 42 62
4. 40 47 54 41 49 56
5. 102 120 136 104 123 138

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.69      34.28 
2. 2.69 34.28

3. 23 52 80 28 50 76
4. 47 76 96 55 88 113
5. 121 146 164 135 163 181

 1518b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 23 50 81 26 53 73
4. 45 87 105 45 59 78
5. 90 105 113 78 98 107

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.11      14.08 
2. 4.11 14.08

 imix-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  8.15      27.90 
2. 8.15 27.90

 imix-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 14.32      49.00 
2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.78       5.27 
2. 4.78 5.27

3. 18 19 41 18 20 31
4. 58 106 129 55 68 78
5. 100 125 143 84 113 137

 64b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.51      10.50 
2. 9.56 10.56

3. 22 40 54 26 46 72
4. 49 62 77 35 45 54
5. 91 106 119 93 111 132

 64b-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 20.56      22.69 
2. 20.56 22.69

3. 35 53 71 31 53 73
4. 43 55 63 41 51 58
5. 131 172 211 131 172 211

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.63      33.49 
2. 2.63 33.49

3. 23 45 74 28 58 76
4. 55 103 139 56 102 146
5. 141 169 194 164 200 222

 1518b-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 23 45 66 23 55 77
4. 52 80 92 50 74 86
5. 86 106 118 88 108 116

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.92      13.42 
2. 3.92 13.42

 imix-4t2c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.70      26.37 
2. 7.74 26.50

 imix-8t4c-ethip4ipsec1000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 14.32      49.00 
2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.07       1.18 
2. 1.07 1.18

3. 22 63 92 22 55 124
4. 164 540 721 162 471 664
5. 588 898 1194 626 968 1294

 1518b-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  0.92      11.72 
2. 0.92 11.72

3. 27 65 89 27 68 85
4. 85 338 425 81 263 390
5. 432 645 803 429 630 789

 imix-2t1c-ethip4ipsec1000tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  1.02       3.49 
2. 1.02 3.49

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  4.14       5.36 
2. 4.22 5.47

3. 20 64 85 19 82 105
4. 70 159 185 119 200 241
5. 127 156 181 199 262 298

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.01      13.10 
2. 1.01 13.10

3. 44 88 100 47 98 110
4. 106 325 350 92 280 342
5. 370 489 567 388 474 555

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.16       7.81 
2. 2.17 7.85

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.46       8.23 
2. 7.53 8.32

3. 17 37 68 17 55 73
4. 41 70 86 54 75 87
5. 104 128 146 83 108 133

 64b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.62       8.42 
2. 7.66 8.46

3. 27 61 75 31 58 72
4. 41 65 79 43 64 91
5. 88 106 117 82 105 127

 64b-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.64       8.44 
2. 7.68 8.48

3. 36 63 72 24 42 56
4. 39 55 68 40 63 79
5. 76 94 107 76 92 106

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.59      45.71 
2. 3.61 45.94

3. 27 53 80 23 63 82
4. 55 88 104 50 91 102
5. 147 168 180 149 172 192

 1518b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 21 46 72 21 46 76
4. 45 72 85 49 67 96
5. 103 117 126 131 146 155

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.62      19.23 
2. 5.65 19.32

 imix-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.67      19.42 
2. 5.73 19.62

 imix-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.68      19.43 
2. 5.73 19.63

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.36       8.13 
2. 7.40 8.17

3. 17 42 67 17 50 77
4. 42 83 98 58 108 127
5. 87 108 120 106 134 149

 64b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.51       8.29 
2. 7.55 8.34

3. 17 43 66 17 46 78
4. 43 61 74 39 55 66
5. 80 98 112 81 103 116

 64b-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.51       8.29 
2. 7.59 8.38

3. 22 50 69 18 43 66
4. 39 53 63 43 64 78
5. 76 91 105 89 109 124

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.37      42.88 
2. 3.40 43.32

3. 31 66 78 21 53 82
4. 50 77 92 54 104 125
5. 138 154 165 140 165 179

 1518b-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.74      47.60 
2. 3.77 48.08

3. 21 61 82 21 38 71
4. 45 76 89 63 77 90
5. 135 152 164 149 168 178

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.41      18.51 
2. 5.46 18.69

 imix-4t2c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.51      18.87 
2. 5.57 19.06

 imix-8t4c-ethip4ipsec1tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.54      18.96 
2. 5.57 19.06

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  6.06       6.69 
2. 6.15 6.79

3. 17 74 90 17 38 59
4. 57 118 130 56 116 125
5. 118 150 172 123 157 181

 1518b-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  3.11      39.61 
2. 3.14 40.01

3. 22 59 79 22 56 79
4. 61 75 86 79 96 106
5. 148 174 191 125 144 157

 imix-2t1c-ethip4ipsec1tnlsw- 
ip4base-policy-aes256gcm-ndrpdr

 1.  4.76      16.28 
2. 4.81 16.45

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.65       7.32 
2. 5.65 7.32

3. 25 71 89 23 82 108
4. 69 115 129 64 108 127
5. 125 148 168 121 147 174

 64b-2t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  6.16       7.98 
2. 6.19 8.02

3. 29 59 75 28 50 72
4. 59 76 90 61 82 100
5. 110 136 164 99 123 140

 1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.44       5.64 
2. 0.44 5.75

3. 45 73 112 42 61 68
4. 65 138 173 55 181 212
5. 154 282 385 226 430 517

 imix-2t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.32       4.78 
2. 1.33 4.80

 imix-2t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.26      19.02 
2. 5.45 19.70

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.09       6.72 
2. 6.34 6.99

3. 21 56 87 20 40 52
4. 77 117 127 54 89 98
5. 105 123 136 105 130 138

 64b-2t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.88       6.49 
2. 5.97 6.59

3. 22 57 79 29 61 78
4. 51 88 96 54 90 103
5. 85 105 117 89 119 135

 1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 25 42 52 24 44 57
4. 63 90 103 60 80 92
5. 108 153 167 94 116 125

 imix-2t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.39      18.45 
2. 5.75 19.70

 imix-2t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.98      17.05 
2. 5.08 17.40

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.30       6.96 
2. 6.46 7.13

3. 21 50 66 21 64 93
4. 52 82 90 59 89 103
5. 98 125 145 114 138 149

 64b-2t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.88       6.49 
2. 6.21 6.86

3. 21 57 75 28 60 80
4. 53 62 72 51 75 82
5. 107 123 132 94 112 126

 1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 27 72 103 25 42 54
4. 52 88 104 63 84 107
5. 85 111 126 87 111 119

 imix-2t2c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.52      18.88 
2. 5.71 19.56

 imix-2t4c-ethip4ipsec1tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.10      17.45 
2. 5.25 17.99

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.23       6.78 
2. 5.34 6.91

3. 24 50 80 23 54 64
4. 72 92 107 55 89 112
5. 218 245 261 142 193 231

 64b-2t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.08       6.58 
2. 5.13 6.65

3. 24 56 82 24 55 89
4. 66 90 108 50 88 104
5. 165 208 234 79 140 173

 1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.39       5.02 
2. 0.40 5.12

3. 41 68 83 41 45 64
4. 58 105 180 50 98 161
5. 174 298 406 321 724 1326

 imix-2t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.27       4.60 
2. 1.29 4.67

 imix-2t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  4.48      16.21 
2. 4.58 16.54

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.15       5.69 
2. 5.23 5.78

3. 21 80 97 20 28 57
4. 55 83 99 43 79 105
5. 165 197 215 103 161 179

 64b-2t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.06       5.59 
2. 5.06 5.59

3. 26 54 76 21 57 76
4. 59 80 102 47 89 110
5. 154 178 198 94 162 175

 1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 25 48 63 24 39 66
4. 70 106 120 67 95 116
5. 161 178 192 134 192 209

 imix-2t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.71      16.10 
2. 4.75 16.27

 imix-2t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.38      15.00 
2. 4.45 15.22

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.15       5.68 
2. 5.22 5.77

3. 21 40 73 21 44 61
4. 55 93 110 38 97 112
5. 168 214 232 71 155 178

 64b-2t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.97       5.49 
2. 4.97 5.49

3. 21 37 53 21 42 52
4. 60 100 112 52 73 102
5. 134 161 182 81 128 173

 1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 25 54 86 25 53 75
4. 78 108 123 66 94 107
5. 170 197 219 134 195 214

 imix-2t2c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.71      16.13 
2. 4.73 16.21

 imix-2t4c-ethip4ipsec2tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.40      15.08 
2. 4.52 15.46

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.25       2.91 
2. 2.28 2.95

3. 22 51 83 22 46 55
4. 81 153 218 80 186 230
5. 181 242 319 148 229 259

 1518b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.83      10.67 
2. 0.83 10.67

3. 56 95 117 48 72 101
4. 152 283 344 124 262 331
5. 463 630 727 431 560 697

 imix-2t1c-ethip4ipsec40000tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.51       5.44 
2. 1.51 5.44

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.81       3.10 
2. 2.81 3.10

3. 19 29 44 19 25 36
4. 69 141 191 64 134 210
5. 159 222 279 162 220 277

 64b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.08       5.61 
2. 5.08 5.61

3. 20 49 81 20 46 74
4. 48 65 82 47 65 81
5. 118 128 142 89 119 142

 64b-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.35      10.32 
2. 9.35 10.32

3. 20 51 70 22 48 65
4. 45 62 75 42 52 61
5. 97 115 131 96 114 130

 1518b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  1.71      21.81 
2. 1.71 21.81

3. 24 52 74 24 45 76
4. 53 104 131 62 91 105
5. 193 221 259 171 225 255

 1518b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.11      39.64 
2. 3.11 39.64

3. 25 56 81 24 41 58
4. 48 74 90 58 72 83
5. 146 172 199 151 197 225

 imix-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.26       7.74 
2. 2.28 7.81

 imix-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.24      14.51 
2. 4.24 14.51

 imix-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.76      26.55 
2. 7.76 26.55

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.65       2.93 
2. 2.65 2.93

3. 19 69 103 19 66 101
4. 45 153 185 31 175 196
5. 174 207 276 168 198 274

 64b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.89       5.39 
2. 4.89 5.39

3. 19 41 77 19 45 73
4. 50 96 137 54 84 100
5. 108 136 168 115 141 158

 64b-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.83       9.75 
2. 8.92 9.85

3. 31 54 75 30 59 81
4. 48 57 66 50 61 79
5. 102 122 143 99 118 135

 1518b-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  1.60      20.36 
2. 1.60 20.36

3. 25 68 84 26 54 85
4. 54 113 144 49 95 120
5. 148 220 256 153 204 248

 1518b-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.91      37.12 
2. 2.91 37.12

3. 24 49 76 24 48 69
4. 46 80 113 55 80 97
5. 132 161 184 129 169 185

 imix-2t1c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.14       7.32 
2. 2.16 7.39

 imix-4t2c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.01      13.71 
2. 4.01 13.71

 imix-8t4c-ethip4ipsec40000tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.30      24.99 
2. 7.34 25.12

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  3.50       4.54 
2. 3.55 4.61

3. 20 38 72 20 63 80
4. 64 126 159 59 104 161
5. 157 213 255 143 199 258

 1518b-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.93      12.03 
2. 0.94 12.09

3. 64 95 115 49 106 163
4. 100 215 290 123 245 359
5. 410 549 633 392 570 713

 imix-2t1c-ethip4ipsec40tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.00       7.22 
2. 2.02 7.29

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  6.14       6.77 
2. 6.19 6.84

3. 17 50 70 20 46 65
4. 45 87 107 40 83 95
5. 102 138 160 96 134 169

 64b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 12.25      13.53 
2. 12.50 13.80

3. 28 49 69 27 52 75
4. 44 55 66 44 57 67
5. 90 117 133 84 114 133

 64b-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 24.24      26.76 
2. 24.98 27.58

3. 32 54 71 28 49 69
4. 40 51 60 41 51 60
5. 85 132 170 85 131 167

 1518b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.06      39.03 
2. 3.10 39.42

3. 21 47 79 22 48 75
4. 54 99 112 42 56 68
5. 146 180 200 139 182 215

 1518b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 21 66 96 23 47 67
4. 44 59 80 42 63 79
5. 78 94 104 70 92 106

 imix-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.68      16.01 
2. 4.72 16.17

 imix-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.09      31.12 
2. 9.09 31.12

 imix-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1. 14.32      49.00 
2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  6.01       6.63 
2. 6.07 6.70

3. 17 45 70 17 48 63
4. 46 80 94 34 74 93
5. 103 140 173 98 143 183

 64b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 12.01      13.26 
2. 12.24 13.51

3. 39 60 76 31 54 77
4. 41 54 65 46 66 76
5. 90 116 133 83 112 128

 64b-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 23.80      26.28 
2. 24.41 26.95

3. 31 54 74 36 56 74
4. 41 51 59 40 50 59
5. 85 128 164 85 129 164

 1518b-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.90      36.97 
2. 2.93 37.34

3. 21 33 52 23 50 80
4. 43 123 140 53 106 120
5. 155 213 243 149 191 210

 1518b-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 28 57 81 25 56 79
4. 47 73 89 48 62 76
5. 67 82 93 76 93 102

 imix-2t1c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.55      15.58 
2. 4.60 15.74

 imix-4t2c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  8.82      30.19 
2. 8.90 30.45

 imix-8t4c-ethip4ipsec40tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1. 14.32      49.00 
2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  2.90       3.76 
2. 2.93 3.80

3. 20 53 76 20 52 72
4. 49 95 115 29 116 145
5. 134 181 226 102 185 219

 1518b-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  0.79      10.22 
2. 0.79 10.27

3. 44 97 135 42 78 98
4. 95 203 275 74 161 221
5. 435 596 713 292 570 718

 imix-2t1c-ethip4ipsec4tnlsw-ip4base- 
int-aes128cbc-hmac512sha-ndrpdr

 1.  1.63       5.89 
2. 1.63 5.89

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.04       5.57 
2. 5.09 5.62

3. 17 22 36 17 36 56
4. 45 77 98 42 69 87
5. 69 146 158 57 92 160

 64b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.92       6.53 
2. 5.95 6.56

3. 20 42 65 17 47 76
4. 35 53 78 33 59 79
5. 85 104 118 43 93 117

 64b-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  9.91      10.94 
2. 10.06 11.10

3. 19 48 76 17 47 77
4. 42 62 74 36 60 77
5. 61 103 117 38 101 118

 1518b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.47      31.43 
2. 2.48 31.53

3. 21 46 77 21 47 82
4. 59 97 109 47 93 116
5. 152 185 211 108 165 194

 1518b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  2.96      37.75 
2. 2.99 38.13

3. 22 41 59 21 38 78
4. 41 68 86 33 62 82
5. 132 164 185 64 133 177

 imix-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.71      12.70 
2. 3.73 12.77

 imix-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.40      15.04 
2. 4.44 15.20

 imix-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes128gcm-ndrpdr

 1.  7.43      25.45 
2. 7.55 25.83

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.94       5.46 
2. 4.97 5.48

3. 17 39 67 17 28 39
4. 43 89 110 39 60 77
5. 75 128 140 86 111 172

 64b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.81       6.41 
2. 5.86 6.47

3. 17 56 78 17 35 73
4. 34 55 76 27 55 76
5. 81 102 121 39 85 123

 64b-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  9.82      10.84 
2. 9.96 11.00

3. 17 40 62 17 47 79
4. 43 59 76 38 60 78
5. 57 110 128 46 105 130

 1518b-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.32      29.49 
2. 2.33 29.74

3. 21 37 52 21 31 48
4. 34 81 112 40 89 109
5. 161 231 257 115 171 206

 1518b-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  2.81      35.81 
2. 2.84 36.17

3. 21 39 61 21 37 77
4. 40 74 105 38 74 100
5. 146 180 203 68 140 196

 imix-2t1c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.60      12.33 
2. 3.63 12.42

 imix-4t2c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.28      14.66 
2. 4.33 14.81

 imix-8t4c-ethip4ipsec4tnlsw- 
ip4base-int-aes256gcm-ndrpdr

 1.  7.25      24.81 
2. 7.36 25.19

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.16       6.68 
2. 5.29 6.85

3. 24 41 55 23 30 84
4. 71 100 118 49 105 125
5. 215 237 252 113 178 208

 64b-2t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.11       6.62 
2. 5.13 6.64

3. 28 53 68 25 50 64
4. 63 99 116 53 82 98
5. 170 209 232 74 158 184

 1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.41       5.30 
2. 0.41 5.30

3. 42 67 101 41 54 101
4. 50 84 122 67 106 168
5. 162 297 384 140 215 388

 imix-2t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.23       4.45 
2. 1.24 4.47

 imix-2t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  4.50      16.27 
2. 4.57 16.51

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.09       5.62 
2. 5.17 5.71

3. 21 76 94 20 29 51
4. 45 122 135 44 96 125
5. 143 165 178 90 116 129

 64b-2t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.98       5.49 
2. 5.02 5.54

3. 21 59 80 23 51 86
4. 61 81 93 43 79 108
5. 155 179 196 81 152 173

 1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 25 51 70 25 36 45
4. 78 123 141 70 103 120
5. 172 191 210 137 208 231

 imix-2t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.68      16.01 
2. 4.71 16.13

 imix-2t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.39      15.03 
2. 4.48 15.33

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.03       5.55 
2. 5.15 5.69

3. 21 65 81 20 54 70
4. 57 112 129 39 98 130
5. 159 178 211 78 102 157

 64b-2t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.00       5.52 
2. 5.02 5.54

3. 21 43 70 21 37 51
4. 60 94 108 56 89 103
5. 141 167 190 96 150 176

 1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 36 57 85 26 53 86
4. 73 93 107 64 98 120
5. 176 201 221 155 191 207

 imix-2t2c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.67      16.00 
2. 4.70 16.08

 imix-2t4c-ethip4ipsec4tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.37      14.96 
2. 4.48 15.34

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.17       6.70 
2. 5.27 6.84

3. 23 43 54 23 32 49
4. 66 116 136 59 98 119
5. 213 239 264 154 212 257

 64b-2t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  5.06       6.55 
2. 5.11 6.62

3. 24 31 38 24 38 61
4. 59 89 100 55 79 94
5. 164 188 208 103 159 177

 1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.39       5.07 
2. 0.40 5.23

3. 41 60 86 41 54 65
4. 60 101 139 55 91 128
5. 148 283 384 218 388 514

 imix-2t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.23       4.46 
2. 1.26 4.57

 imix-2t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  4.46      16.12 
2. 4.55 16.45

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  5.09       5.62 
2. 5.20 5.74

3. 21 35 74 21 38 71
4. 59 81 105 47 75 105
5. 160 176 214 70 94 147

 64b-2t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.91       5.42 
2. 4.97 5.49

3. 22 59 90 21 30 42
4. 65 99 112 42 74 94
5. 127 169 192 97 162 184

 1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 26 52 69 25 43 64
4. 81 115 141 69 99 114
5. 184 218 235 134 203 238

 imix-2t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.65      15.92 
2. 4.71 16.11

 imix-2t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes128gcm-ndrpdr

 1.  4.37      14.95 
2. 4.46 15.25

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)

One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)

 64b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  5.05       5.57 
2. 5.18 5.71

3. 21 37 109 20 57 70
4. 54 113 133 49 85 106
5. 182 222 242 75 168 188

 64b-2t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.96       5.48 
2. 4.99 5.51

3. 22 41 57 21 50 61
4. 48 80 100 50 75 99
5. 129 154 173 81 117 174

 1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  3.85      49.00 
2. 3.85 49.00

3. 33 60 81 28 54 83
4. 76 109 129 60 96 115
5. 178 201 219 144 176 191

 imix-2t2c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.68      16.03 
2. 4.71 16.14

 imix-2t4c-ethip4ipsec8tnlswasync-scheduler- 
ip4base-int-aes256gcm-ndrpdr

 1.  4.39      15.01 
2. 4.45 15.24