3n-hsw-vic1227
10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.44 0.97
2. 1.46 0.98
3. 23 64 105 23 49 100
4. 97 259 305 98 260 314
5. 262 342 429 260 335 437
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.77 1.86
2. 2.81 1.89
3. 23 81 168 23 73 163
4. 157 276 295 159 275 291
5. 243 305 341 222 289 311
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 4.65 3.12
2. 5.29 3.56
3. 23 87 126 23 81 128
4. 60 105 129 48 105 124
5. 145 176 195 135 169 191
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.14
2. 0.34 4.16
3. 57 99 118 58 80 101
4. 220 448 502 220 452 516
5. 959 1248 1521 967 1226 1499
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 7.99
2. 0.65 8.04
3. 57 108 156 57 97 150
4. 330 651 745 330 636 728
5. 958 1261 1404 949 1246 1403
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.26 15.55
2. 1.28 15.78
3. 58 107 174 58 110 172
4. 172 327 397 172 323 387
5. 425 554 642 417 546 630
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.80 2.38
2. 0.81 2.42
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.60 4.79
2. 1.61 4.81
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.15 9.41
2. 3.19 9.55
|
10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.10 0.74
2. 1.19 0.80
3. 23 72 112 23 61 103
4. 92 399 469 97 367 462
5. 287 441 516 293 437 512
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.27 1.53
2. 2.30 1.54
3. 23 85 150 23 77 150
4. 162 318 350 154 331 383
5. 341 403 494 338 401 492
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.32 2.90
2. 4.38 2.94
3. 23 81 172 22 70 155
4. 82 158 182 71 161 187
5. 121 181 217 112 144 203
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.31
2. 0.27 3.31
3. 49 78 105 49 63 104
4. 168 456 500 163 453 499
5. 590 889 964 594 896 963
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.52 6.43
2. 0.52 6.46
3. 49 95 140 49 57 133
4. 260 607 755 256 602 748
5. 979 1288 1417 964 1277 1421
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.02 12.50
2. 1.03 12.69
3. 49 83 124 49 75 117
4. 191 428 527 190 424 518
5. 356 484 560 352 480 558
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.68 2.02
2. 0.68 2.04
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.36 4.05
2. 1.36 4.07
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.57 7.69
2. 2.68 8.01
|
10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.49 1.67
2. 2.52 1.69
3. 19 58 88 19 35 75
4. 40 146 161 38 144 160
5. 135 190 212 142 191 245
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.54 3.05
2. 4.61 3.10
3. 19 52 116 19 47 92
4. 62 121 150 56 118 148
5. 161 181 198 111 165 185
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 8.24 5.54
2. 8.70 5.85
3. 19 45 65 19 50 74
4. 43 60 72 44 60 73
5. 78 99 117 76 99 136
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.81 10.01
2. 0.82 10.06
3. 26 66 77 26 63 71
4. 84 319 349 83 304 338
5. 392 495 579 387 492 607
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.54 18.94
2. 1.56 19.23
3. 25 26 36 25 26 29
4. 57 96 103 49 94 105
5. 126 154 169 115 146 160
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.23 15.12
2. 1.56 19.23
3. 25 27 35 25 27 34
4. 26 42 50 25 41 46
5. 39 50 55 37 48 52
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.71 5.12
2. 1.73 5.17
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.24 9.70
2. 3.26 9.75
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.29 12.82
2. 5.79 17.30
|
10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.39 1.61
2. 2.40 1.62
3. 19 75 112 19 35 107
4. 54 179 204 55 179 201
5. 182 218 249 181 212 244
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.43 2.98
2. 4.54 3.05
3. 19 58 145 19 49 100
4. 73 149 177 68 141 167
5. 173 190 205 107 165 189
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 8.29 5.57
2. 8.46 5.69
3. 19 49 70 19 42 66
4. 59 72 83 60 75 86
5. 88 107 123 74 95 110
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.71 8.72
2. 0.71 8.77
3. 26 72 84 26 68 77
4. 70 324 370 58 314 355
5. 390 575 618 358 567 608
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.37 16.85
2. 1.40 17.19
3. 26 31 43 26 28 40
4. 77 166 182 71 159 180
5. 167 240 264 155 231 259
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.55 19.13
2. 1.56 19.23
3. 26 26 34 26 26 30
4. 26 44 53 26 42 50
5. 42 52 59 41 51 55
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.56 4.67
2. 1.56 4.67
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.99 8.95
2. 3.02 9.04
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.75 11.20
2. 5.79 17.30
|
10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.44 0.30
2. 0.44 0.30
3. 30 55 122 30 55 119
4. 158 465 663 122 452 629
5. 1571 2303 2957 1630 2345 2983
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.79 0.53
2. 0.79 0.53
3. 28 70 151 28 34 111
4. 297 836 1120 271 818 1174
5. 940 1427 1802 864 1295 1621
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.56 1.05
2. 1.58 1.06
3. 28 81 198 28 74 188
4. 130 422 638 110 397 622
5. 444 673 868 440 687 863
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.22 2.72
2. 0.22 2.74
3. 64 88 113 64 83 111
4. 224 428 559 207 405 541
5. 1341 2077 2889 1404 2223 3173
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.42 5.21
2. 0.43 5.26
3. 62 114 181 63 102 177
4. 286 626 841 276 629 824
5. 1104 1559 1894 1066 1529 1844
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.84 10.29
2. 0.85 10.45
3. 63 110 193 62 87 168
4. 250 567 769 246 564 767
5. 706 998 1210 662 920 1116
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.36 1.07
2. 0.36 1.08
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 1.95
2. 0.66 1.97
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.28 3.84
2. 1.30 3.88
|
10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.41 0.28
2. 0.42 0.28
3. 29 49 98 29 48 96
4. 122 399 562 93 373 525
5. 1623 2465 3247 1665 2477 3229
|
64b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.75 0.50
2. 0.75 0.50
3. 27 78 189 27 73 181
4. 278 772 1056 261 754 1039
5. 932 1393 1754 812 1285 1615
|
64b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.45 0.97
2. 1.47 0.99
3. 28 61 121 27 32 107
4. 124 405 645 118 421 677
5. 405 655 843 371 601 806
|
1518b-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.19 2.34
2. 0.19 2.35
3. 54 60 84 54 59 72
4. 137 387 502 138 366 498
5. 1019 1658 2277 1082 1852 2427
|
1518b-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.37 4.52
2. 0.37 4.56
3. 53 87 143 54 71 104
4. 309 637 856 303 624 826
5. 1155 1665 1996 1132 1642 1958
|
1518b-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.73 8.93
2. 0.74 9.07
3. 54 97 178 54 77 160
4. 223 541 736 217 532 731
5. 784 1114 1360 798 1143 1390
|
imix-1t1c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.33 0.99
2. 0.33 1.00
|
imix-2t2c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.60 1.80
2. 0.61 1.82
|
imix-4t4c-ethip4ipsec1000tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.20 3.58
2. 1.21 3.63
|
10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-policy-aes128gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.51 0.34
2. 0.52 0.35
3. 25 48 128 25 38 87
4. 137 464 671 102 415 603
5. 1594 2273 2785 1492 2199 2707
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.90 0.60
2. 0.91 0.61
3. 24 80 209 23 35 150
4. 376 957 1306 328 923 1296
5. 776 1274 1683 715 1243 1645
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.69 1.14
2. 1.72 1.16
3. 24 82 213 23 76 200
4. 159 430 633 140 412 622
5. 386 646 828 365 621 811
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.36 4.40
2. 0.36 4.42
3. 31 45 92 31 45 90
4. 125 426 627 117 437 588
5. 1675 2485 3345 1697 2541 3395
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.66 8.07
2. 0.66 8.12
3. 30 44 97 30 44 88
4. 148 588 825 125 560 782
5. 956 1472 1770 892 1371 1660
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.29 15.84
2. 1.31 16.08
3. 31 42 99 27 34 115
4. 58 282 434 61 294 450
5. 283 444 565 317 466 590
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.45 1.36
2. 0.47 1.41
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.82 2.45
2. 0.83 2.49
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.57 4.69
2. 1.59 4.76
|
10ge2p1vic1227-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.50 0.34
2. 0.51 0.34
3. 25 50 129 25 40 91
4. 174 478 688 163 485 671
5. 1554 2273 2835 1660 2375 3001
|
64b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.87 0.58
2. 0.87 0.59
3. 23 58 184 23 61 178
4. 310 886 1199 237 773 1075
5. 675 1109 1495 658 1149 1510
|
64b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.73 1.16
2. 1.75 1.18
3. 24 46 95 24 41 92
4. 55 192 321 58 209 341
5. 220 410 551 249 453 600
|
1518b-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.34 4.16
2. 0.34 4.18
3. 32 49 97 32 43 77
4. 134 423 615 129 427 575
5. 1609 2443 3281 1729 2607 3561
|
1518b-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.61 7.54
2. 0.62 7.62
3. 31 44 85 30 34 77
4. 167 618 884 157 606 862
5. 1020 1563 1875 926 1416 1728
|
1518b-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.20 14.75
2. 1.21 14.90
3. 31 41 83 28 34 93
4. 73 318 507 75 324 517
5. 312 494 617 332 513 647
|
imix-1t1c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.43 1.29
2. 0.45 1.35
|
imix-2t2c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.79 2.35
2. 0.79 2.38
|
imix-4t4c-ethip4ipsec1000tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.54 4.60
2. 1.56 4.67
|
10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.78 1.20
2. 1.80 1.21
3. 23 99 112 23 92 110
4. 62 216 260 58 215 233
5. 305 395 477 301 386 467
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.44 2.31
2. 3.46 2.32
3. 23 86 170 23 76 136
4. 112 201 230 104 194 228
5. 183 236 258 175 226 253
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.49 2.35
2. 3.56 2.39
3. 23 104 206 19 84 118
4. 144 243 265 140 232 265
5. 198 253 282 196 252 289
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 4.31
2. 0.35 4.33
3. 57 103 139 57 80 117
4. 212 515 552 204 514 560
5. 1087 1436 1654 1062 1406 1648
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.67 8.23
2. 0.67 8.27
3. 57 107 151 57 98 148
4. 315 627 724 311 621 723
5. 907 1209 1355 902 1205 1352
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.17
2. 0.67 8.25
3. 57 107 151 57 96 147
4. 318 626 710 319 621 724
5. 941 1246 1378 914 1227 1350
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.90 2.70
2. 0.91 2.72
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.75 5.24
2. 1.77 5.29
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.75 5.23
2. 1.77 5.31
|
10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.40 0.94
2. 1.41 0.95
3. 22 79 116 22 43 114
4. 97 324 342 105 331 353
5. 238 332 432 238 320 431
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.70 1.82
2. 2.74 1.84
3. 22 100 195 22 88 194
4. 201 318 334 198 313 329
5. 256 329 395 254 323 371
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.75 1.85
2. 2.78 1.87
3. 22 122 190 22 114 192
4. 190 311 328 192 312 329
5. 259 332 364 252 322 345
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.28 3.41
2. 0.28 3.45
3. 49 95 102 48 90 101
4. 163 451 498 166 453 505
5. 593 877 960 582 893 965
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.54 6.61
2. 0.54 6.64
3. 48 103 138 48 67 132
4. 303 640 771 304 640 767
5. 962 1316 1444 935 1297 1430
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.56
2. 0.54 6.63
3. 48 93 137 48 67 133
4. 303 650 771 297 649 770
5. 962 1330 1467 939 1296 1464
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.75 2.24
2. 0.75 2.25
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.47 4.38
2. 1.48 4.43
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.46 4.36
2. 1.47 4.41
|
10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.61 2.43
2. 3.65 2.45
3. 19 95 111 19 91 110
4. 37 111 126 39 111 129
5. 150 193 235 151 197 238
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 6.83 4.59
2. 7.04 4.73
3. 19 47 70 19 51 70
4. 47 79 95 45 77 94
5. 97 124 145 96 123 142
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 7.08 4.76
2. 7.19 4.83
3. 19 61 82 19 61 85
4. 58 97 111 56 96 112
5. 109 134 152 108 130 151
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.91 11.14
2. 0.91 11.19
3. 25 58 89 25 51 85
4. 93 352 391 87 355 387
5. 355 425 459 356 426 496
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 25 29 40 25 27 41
4. 38 70 75 40 70 75
5. 64 77 83 62 77 81
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 25 30 39 25 29 38
4. 37 70 76 45 68 73
5. 63 78 84 61 76 81
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.18 6.53
2. 2.21 6.60
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.30 12.86
2. 4.32 12.92
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.35 13.00
2. 4.39 13.13
|
10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.44 2.31
2. 3.45 2.32
3. 19 93 106 19 80 104
4. 39 117 137 39 111 131
5. 183 238 272 187 243 270
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.63 4.46
2. 6.73 4.52
3. 19 61 105 19 38 62
4. 61 109 128 61 111 132
5. 118 147 170 113 143 164
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.47 4.35
2. 6.80 4.57
3. 19 61 123 19 24 46
4. 69 108 128 61 105 123
5. 118 143 163 115 140 158
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.77 9.51
2. 0.78 9.56
3. 26 50 88 26 54 86
4. 105 382 408 88 381 410
5. 457 614 676 466 611 666
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.50 18.46
2. 1.52 18.64
3. 26 38 48 26 36 48
4. 63 116 127 63 112 126
5. 113 135 144 96 121 128
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.54 18.94
2. 1.55 19.13
3. 25 39 50 25 38 54
4. 69 108 115 72 107 113
5. 115 136 145 115 133 141
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.98 5.93
2. 1.99 5.96
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.83 11.44
2. 3.88 11.61
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.90 11.65
2. 3.94 11.77
|
10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac256sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.68 1.13
2. 1.69 1.14
3. 23 91 123 23 50 114
4. 67 271 291 74 262 297
5. 254 355 415 248 320 395
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 3.27 2.20
2. 3.31 2.22
3. 23 115 180 23 111 182
4. 127 214 260 129 216 262
5. 208 266 300 205 267 302
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 3.22 2.16
2. 3.28 2.21
3. 23 137 165 23 129 172
4. 93 194 216 101 199 224
5. 188 231 259 190 240 267
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.35 4.26
2. 0.35 4.29
3. 58 100 136 58 100 136
4. 210 511 555 210 513 558
5. 1072 1442 1716 1106 1460 1660
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.15
2. 0.67 8.19
3. 57 107 152 57 95 146
4. 327 641 734 331 641 732
5. 927 1225 1386 923 1224 1380
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.12
2. 0.66 8.16
3. 57 144 174 57 138 169
4. 300 596 724 298 592 718
5. 853 1112 1214 849 1115 1215
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 0.88 2.63
2. 0.88 2.64
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.71 5.12
2. 1.73 5.17
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac256sha-ndrpdr
|
1. 1.71 5.11
2. 1.73 5.16
|
10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-policy-aes128cbc-hmac512sha-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.34 0.90
2. 1.35 0.91
3. 23 97 116 23 66 115
4. 109 291 365 107 283 365
5. 245 353 461 250 359 472
|
64b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 2.63 1.77
2. 2.66 1.79
3. 23 89 151 23 82 160
4. 150 236 324 127 237 268
5. 257 333 381 270 346 395
|
64b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 2.66 1.78
2. 2.70 1.81
3. 23 118 171 23 104 173
4. 174 293 319 102 205 272
5. 243 333 372 243 329 363
|
1518b-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.28 3.39
2. 0.28 3.41
3. 49 92 105 49 64 92
4. 168 470 504 171 466 502
5. 620 895 972 613 903 977
|
1518b-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.56
2. 0.54 6.59
3. 49 98 152 49 57 147
4. 213 577 704 210 576 703
5. 842 1188 1288 849 1187 1285
|
1518b-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.53
2. 0.53 6.56
3. 49 110 152 49 95 151
4. 282 630 760 282 626 756
5. 974 1308 1412 959 1296 1390
|
imix-1t1c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 0.73 2.18
2. 0.74 2.20
|
imix-2t2c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.44 4.29
2. 1.45 4.34
|
imix-4t4c-ethip4ipsec1tnlsw-ip4base-
policy-aes128cbc-hmac512sha-ndrpdr
|
1. 1.42 4.25
2. 1.44 4.32
|
10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-policy-aes128gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 3.29 2.21
2. 3.32 2.23
3. 19 85 105 19 37 103
4. 50 121 144 42 112 145
5. 122 157 194 124 162 208
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 6.15 4.13
2. 6.50 4.37
3. 19 53 74 19 52 73
4. 71 124 141 70 121 138
5. 114 143 168 114 142 164
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 6.31 4.24
2. 6.54 4.39
3. 19 37 55 19 37 52
4. 56 107 123 60 108 124
5. 97 122 140 100 124 146
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 0.88 10.81
2. 0.89 10.92
3. 26 43 65 26 31 57
4. 66 334 352 51 330 354
5. 336 422 455 337 424 458
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 25 44 51 25 43 51
4. 46 83 88 45 83 88
5. 69 78 85 70 80 90
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 25 39 48 25 39 49
4. 34 77 82 36 79 84
5. 69 81 90 71 87 95
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 2.05 6.13
2. 2.07 6.19
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 4.08 12.19
2. 4.14 12.37
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes128gcm-ndrpdr
|
1. 3.92 11.73
2. 3.96 11.85
|
10ge2p1vic1227-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr
IPv4 IPsec tunnel mode performance test suite.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.12 2.10
2. 3.17 2.13
3. 19 53 95 19 25 68
4. 43 125 142 39 129 147
5. 164 208 247 167 212 251
|
64b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 5.99 4.02
2. 6.11 4.10
3. 19 44 60 19 41 53
4. 50 93 121 52 90 104
5. 96 120 138 94 116 133
|
64b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 6.01 4.04
2. 6.07 4.08
3. 19 84 120 19 94 129
4. 77 117 138 67 106 128
5. 121 155 180 115 147 171
|
1518b-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 0.76 9.34
2. 0.76 9.39
3. 26 47 72 26 34 68
4. 119 349 383 104 346 375
5. 449 604 658 447 600 657
|
1518b-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.51 18.57
2. 1.52 18.67
3. 26 33 41 26 34 44
4. 64 116 124 60 116 124
5. 132 153 168 121 142 152
|
1518b-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.51 18.54
2. 1.52 18.72
3. 26 43 52 26 42 54
4. 73 120 131 74 122 138
5. 125 144 151 125 145 153
|
imix-1t1c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 1.86 5.56
2. 1.88 5.62
|
imix-2t2c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.68 10.99
2. 3.71 11.10
|
imix-4t4c-ethip4ipsec1tnlsw-
ip4base-policy-aes256gcm-ndrpdr
|
1. 3.67 10.96
2. 3.70 11.07
|
10ge2p1vic1227-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.47 0.99
2. 1.50 1.00
3. 23 67 99 23 46 88
4. 72 235 282 65 234 285
5. 281 376 417 298 363 430
|
64b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.86 1.92
2. 2.90 1.95
3. 23 67 145 23 59 128
4. 142 262 304 137 258 301
5. 232 305 367 222 296 335
|
64b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 5.47 3.67
2. 5.66 3.81
3. 23 34 48 23 43 60
4. 58 105 124 58 106 125
5. 178 222 267 136 170 192
|
1518b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.14
2. 0.34 4.18
3. 58 100 118 58 87 100
4. 216 483 537 207 463 514
5. 1026 1324 1593 1032 1332 1607
|
1518b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 8.04
2. 0.66 8.08
3. 57 110 168 57 101 154
4. 312 600 699 313 597 694
5. 912 1187 1302 898 1171 1308
|
1518b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.26 15.46
2. 1.27 15.63
3. 58 94 115 58 94 115
4. 118 191 224 117 191 226
5. 381 508 583 376 501 576
|
imix-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.81 2.43
2. 0.82 2.46
|
imix-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.60 4.77
2. 1.62 4.84
|
imix-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.13 9.38
2. 3.18 9.52
|
10ge2p1vic1227-ethip4ipsec400tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.21 0.81
2. 1.22 0.82
3. 23 69 103 23 48 92
4. 82 328 417 88 330 420
5. 254 394 466 274 391 484
|
64b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.32 1.56
2. 2.35 1.58
3. 22 67 164 22 59 153
4. 157 292 318 150 289 315
5. 318 383 450 307 381 436
|
64b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.54 3.05
2. 4.66 3.13
3. 23 91 138 23 87 147
4. 64 139 159 63 146 171
5. 196 219 250 178 202 220
|
1518b-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.32
2. 0.27 3.33
3. 49 69 99 49 69 98
4. 166 460 499 164 453 499
5. 587 888 949 582 887 950
|
1518b-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.52 6.44
2. 0.53 6.50
3. 49 130 150 49 116 148
4. 210 580 685 206 578 684
5. 846 1171 1333 843 1162 1331
|
1518b-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.01 12.40
2. 1.02 12.54
3. 49 76 167 49 77 170
4. 142 377 454 138 376 447
5. 337 471 545 339 470 547
|
imix-1t1c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.68 2.05
2. 0.69 2.06
|
imix-2t2c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.37 4.08
2. 1.38 4.12
|
imix-4t4c-ethip4ipsec400tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.65 7.91
2. 2.68 8.02
|
10ge2p1vic1227-ethip4ipsec400tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.63 1.77
2. 2.63 1.77
3. 19 71 111 19 37 105
4. 73 131 179 41 117 169
5. 138 197 219 148 204 236
|
64b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.78 3.21
2. 4.90 3.30
3. 19 65 93 19 71 92
4. 86 129 160 78 123 140
5. 149 177 198 138 169 186
|
64b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 8.90 5.98
2. 9.60 6.45
3. 19 23 33 19 28 40
4. 42 66 79 43 67 80
5. 85 104 119 78 99 116
|
1518b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.82 10.12
2. 0.83 10.22
3. 26 45 83 26 42 74
4. 100 384 414 79 365 399
5. 446 584 661 438 565 653
|
1518b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 25 38 50 25 37 52
4. 64 99 109 65 97 106
5. 94 121 129 88 115 122
|
1518b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.52 18.66
2. 1.56 19.23
3. 25 30 41 25 30 40
4. 27 42 49 28 41 47
5. 37 45 50 36 46 51
|
imix-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.76 5.26
2. 1.78 5.34
|
imix-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.33 9.96
2. 3.40 10.16
|
imix-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.67 10.98
2. 5.79 17.30
|
10ge2p1vic1227-ethip4ipsec400tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.52 1.69
2. 2.53 1.70
3. 19 80 102 19 73 96
4. 38 146 169 37 138 152
5. 180 226 274 180 217 251
|
64b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.63 3.11
2. 4.71 3.17
3. 19 88 120 19 90 129
4. 71 138 155 73 138 155
5. 161 183 203 144 171 195
|
64b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 9.01 6.06
2. 9.20 6.18
3. 19 45 72 19 41 75
4. 44 80 91 42 76 96
5. 95 111 125 79 104 122
|
1518b-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.72 8.80
2. 0.72 8.85
3. 26 48 77 26 42 69
4. 88 394 421 65 388 414
5. 471 658 705 466 647 703
|
1518b-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.40 17.24
2. 1.42 17.42
3. 26 31 48 26 30 45
4. 58 135 156 56 134 153
5. 152 208 222 146 199 213
|
1518b-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.50 18.47
2. 1.56 19.23
3. 26 31 42 26 30 42
4. 26 47 53 26 46 51
5. 43 50 57 41 49 54
|
imix-1t1c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.63 4.86
2. 1.64 4.91
|
imix-2t2c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.13 9.35
2. 3.14 9.40
|
imix-4t4c-ethip4ipsec400tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.02 12.01
2. 5.79 17.30
|
10ge2p1vic1227-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.61 1.08
2. 1.63 1.10
3. 23 86 129 23 48 119
4. 108 254 319 102 220 302
5. 257 336 424 269 337 428
|
64b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.13 2.10
2. 3.18 2.14
3. 23 118 199 23 88 193
4. 142 231 282 132 227 297
5. 229 301 339 222 289 328
|
64b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 4.25 2.85
2. 4.30 2.89
3. 23 35 131 23 38 128
4. 55 94 117 50 94 115
5. 126 160 184 142 173 200
|
1518b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.22
2. 0.34 4.24
3. 58 115 134 58 115 133
4. 203 504 540 208 507 545
5. 1076 1432 1711 1096 1463 1706
|
1518b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.16
2. 0.67 8.20
3. 57 128 172 57 115 166
4. 344 643 726 343 639 732
5. 951 1244 1394 938 1235 1390
|
1518b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.83 10.18
2. 0.83 10.27
3. 57 84 141 57 86 136
4. 108 403 471 110 401 470
5. 427 593 658 409 571 638
|
imix-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.85 2.54
2. 0.85 2.55
|
imix-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.69 5.05
2. 1.72 5.16
|
imix-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.11 6.31
2. 2.15 6.44
|
10ge2p1vic1227-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.29 0.86
2. 1.31 0.88
3. 23 102 117 23 91 115
4. 58 291 370 50 297 379
5. 270 387 516 275 395 524
|
64b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.50 1.68
2. 2.54 1.71
3. 22 91 157 22 83 154
4. 150 270 302 139 262 299
5. 274 357 415 266 344 381
|
64b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 3.40 2.28
2. 3.42 2.30
3. 22 62 135 22 59 133
4. 63 164 196 59 161 202
5. 149 215 245 143 206 242
|
1518b-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.36
2. 0.27 3.38
3. 49 71 88 49 71 88
4. 169 466 503 169 467 509
5. 632 913 980 634 912 975
|
1518b-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.52
2. 0.54 6.59
3. 48 92 137 48 81 136
4. 312 664 793 312 661 785
5. 1008 1328 1522 1000 1325 1558
|
1518b-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.66 8.14
2. 0.67 8.23
3. 48 70 113 48 66 113
4. 121 473 547 117 475 544
5. 543 900 1034 551 899 1046
|
imix-1t1c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.71 2.13
2. 0.72 2.14
|
imix-2t2c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.42 4.25
2. 1.43 4.29
|
imix-4t4c-ethip4ipsec40tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.75 5.24
2. 1.79 5.34
|
10ge2p1vic1227-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.04 2.04
2. 3.11 2.09
3. 19 83 118 19 36 103
4. 23 153 193 25 151 190
5. 156 228 302 161 224 298
|
64b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.48 3.68
2. 5.59 3.76
3. 19 58 80 19 57 76
4. 76 138 151 76 138 149
5. 127 167 190 119 160 186
|
64b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 7.98 5.36
2. 8.32 5.59
3. 19 52 86 19 25 71
4. 76 88 95 53 88 97
5. 68 93 107 76 98 117
|
1518b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.86 10.52
2. 0.86 10.63
3. 26 43 71 26 33 63
4. 105 374 411 83 370 395
5. 420 535 636 420 536 642
|
1518b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 25 36 51 25 31 50
4. 55 90 101 54 87 94
5. 83 108 115 77 98 105
|
1518b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 25 26 31 25 26 29
4. 26 42 49 25 39 44
5. 40 49 54 38 49 53
|
imix-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.93 5.77
2. 1.96 5.86
|
imix-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.66 10.95
2. 3.72 11.11
|
imix-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.98 11.89
2. 5.24 15.66
|
10ge2p1vic1227-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.90 1.95
2. 2.93 1.97
3. 19 74 113 19 35 89
4. 41 154 165 45 154 177
5. 158 208 262 149 210 262
|
64b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.49 3.69
2. 5.60 3.77
3. 19 50 82 19 66 88
4. 80 143 156 86 142 160
5. 139 172 192 130 165 185
|
64b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 7.58 5.09
2. 7.84 5.27
3. 19 24 69 19 20 37
4. 19 39 59 19 29 42
5. 75 100 113 81 109 130
|
1518b-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.74 9.09
2. 0.74 9.13
3. 26 43 61 26 28 37
4. 153 394 426 149 389 418
5. 498 650 705 473 637 705
|
1518b-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.46 17.91
2. 1.46 18.00
3. 26 44 53 26 43 52
4. 57 131 146 54 127 144
5. 146 192 210 130 176 196
|
1518b-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 26 31 47 26 30 46
4. 26 52 59 26 52 59
5. 46 60 66 46 58 64
|
imix-1t1c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.77 5.29
2. 1.79 5.35
|
imix-2t2c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.39 10.15
2. 3.45 10.31
|
imix-4t4c-ethip4ipsec40tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.21 12.58
2. 4.69 14.03
|
10ge2p1vic1227-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.66 1.12
2. 1.68 1.13
3. 23 83 111 23 67 109
4. 38 245 263 43 243 263
5. 239 307 384 235 301 346
|
64b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.18 2.13
2. 3.24 2.18
3. 23 95 125 22 91 123
4. 78 167 204 82 160 201
5. 162 217 252 157 208 250
|
64b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.10 2.08
2. 3.12 2.10
3. 23 58 101 23 64 148
4. 43 159 191 101 221 272
5. 131 187 201 218 269 290
|
1518b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.23
2. 0.35 4.27
3. 57 95 119 57 95 116
4. 212 465 512 220 471 515
5. 970 1219 1469 997 1238 1479
|
1518b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.67 8.21
2. 0.67 8.25
3. 57 100 147 57 95 145
4. 244 560 653 242 560 637
5. 829 1075 1210 822 1077 1220
|
1518b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.66 8.14
2. 0.67 8.23
3. 57 106 144 57 111 152
4. 208 504 563 311 623 709
5. 630 905 988 926 1226 1353
|
imix-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.86 2.59
2. 0.87 2.60
|
imix-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.73 5.17
2. 1.74 5.22
|
imix-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.72 5.15
2. 1.74 5.20
|
10ge2p1vic1227-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.32 0.89
2. 1.34 0.90
3. 22 71 114 22 36 92
4. 109 279 357 81 279 361
5. 245 359 469 246 359 462
|
64b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.56 1.72
2. 2.59 1.74
3. 22 91 192 22 88 191
4. 124 241 280 115 246 277
5. 272 352 389 262 339 374
|
64b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.60 1.75
2. 2.64 1.77
3. 22 51 148 22 86 186
4. 64 173 226 114 243 272
5. 166 243 264 263 337 385
|
1518b-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.38
2. 0.28 3.40
3. 49 79 105 49 62 79
4. 163 452 492 160 451 497
5. 606 887 951 612 894 962
|
1518b-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.54 6.58
2. 0.54 6.62
3. 48 94 139 48 68 134
4. 308 659 782 300 657 777
5. 968 1300 1428 959 1291 1414
|
1518b-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.53 6.54
2. 0.54 6.61
3. 48 86 120 48 68 134
4. 174 507 588 298 636 745
5. 639 947 1077 957 1323 1466
|
imix-1t1c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.73 2.17
2. 0.73 2.18
|
imix-2t2c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.44 4.32
2. 1.46 4.36
|
imix-4t4c-ethip4ipsec4tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.43 4.29
2. 1.45 4.35
|
10ge2p1vic1227-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.23 2.17
2. 3.26 2.19
3. 19 83 114 19 69 112
4. 52 120 159 21 121 130
5. 117 162 191 121 157 198
|
64b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.87 3.95
2. 5.99 4.03
3. 18 95 115 19 80 125
4. 54 103 118 50 110 126
5. 119 151 174 114 148 175
|
64b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 5.50 3.70
2. 5.61 3.77
3. 19 23 33 19 62 83
4. 39 97 110 84 141 156
5. 77 105 115 117 157 174
|
1518b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.87 10.70
2. 0.88 10.80
3. 25 47 83 25 29 71
4. 102 360 388 80 358 383
5. 383 453 537 378 457 557
|
1518b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.56 19.23
2. 1.56 19.23
3. 25 32 42 25 31 44
4. 46 82 89 56 79 86
5. 73 91 97 70 88 93
|
1518b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.55 19.13
2. 1.56 19.23
3. 25 27 36 25 29 43
4. 26 51 56 45 80 86
5. 46 58 64 69 87 93
|
imix-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.01 6.02
2. 2.04 6.11
|
imix-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.89 11.63
2. 3.95 11.81
|
imix-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.04 12.07
2. 4.10 12.25
|
10ge2p1vic1227-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.07 2.06
2. 3.10 2.08
3. 19 73 110 19 34 103
4. 23 147 185 26 145 190
5. 149 188 231 161 207 266
|
64b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 5.70 3.83
2. 5.79 3.89
3. 19 34 66 19 27 44
4. 64 110 134 61 109 137
5. 122 149 168 113 143 161
|
64b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 6.03 4.05
2. 6.13 4.12
3. 19 71 97 19 103 137
4. 61 103 116 70 118 146
5. 88 114 131 127 157 177
|
1518b-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.75 9.25
2. 0.76 9.29
3. 26 48 81 26 33 73
4. 96 387 411 76 394 419
5. 492 668 720 472 646 707
|
1518b-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.49 18.39
2. 1.51 18.53
3. 26 51 58 26 51 57
4. 58 119 129 65 120 142
5. 128 149 158 116 139 148
|
1518b-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.49 18.35
2. 1.51 18.53
3. 26 29 39 26 39 56
4. 42 92 99 65 119 135
5. 75 105 111 120 143 155
|
imix-1t1c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.85 5.53
2. 1.86 5.55
|
imix-2t2c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.58 10.72
2. 3.64 10.88
|
imix-4t4c-ethip4ipsec4tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 3.60 10.78
2. 3.66 10.94
|
10ge2p1vic1227-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac256sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.39 0.94
2. 1.42 0.95
3. 23 59 83 23 42 76
4. 65 232 295 71 263 297
5. 268 343 424 271 354 439
|
64b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 2.68 1.80
2. 2.72 1.83
3. 23 66 145 23 58 158
4. 152 209 297 145 228 253
5. 218 290 329 209 273 321
|
64b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 4.94 3.32
2. 5.11 3.43
3. 23 42 86 20 37 60
4. 63 119 148 60 119 147
5. 146 183 203 134 173 193
|
1518b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.34 4.13
2. 0.34 4.15
3. 58 100 115 58 80 101
4. 212 502 548 208 507 553
5. 1030 1381 1673 1038 1368 1641
|
1518b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.65 8.02
2. 0.65 8.06
3. 57 108 155 57 76 150
4. 335 641 735 339 637 739
5. 969 1259 1435 972 1270 1434
|
1518b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.29 15.87
2. 1.30 16.03
3. 58 91 128 57 88 121
4. 200 371 435 198 368 425
5. 463 580 658 453 567 649
|
imix-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 0.80 2.38
2. 0.80 2.39
|
imix-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 1.57 4.69
2. 1.60 4.78
|
imix-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac256sha-ndrpdr
|
1. 3.07 9.19
2. 3.17 9.47
|
10ge2p1vic1227-ethip4ipsec5000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.16 0.78
2. 1.17 0.79
3. 23 41 54 23 35 49
4. 53 298 376 58 311 376
5. 248 379 460 254 384 469
|
64b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.17 1.46
2. 2.23 1.50
3. 23 51 75 23 31 58
4. 116 227 290 113 227 266
5. 253 355 407 243 315 392
|
64b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 4.21 2.83
2. 4.27 2.87
3. 23 99 151 23 60 148
4. 88 137 154 92 141 159
5. 127 175 208 123 153 197
|
1518b-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.27 3.31
2. 0.27 3.32
3. 49 73 93 49 73 91
4. 173 434 491 172 427 486
5. 625 902 989 605 889 977
|
1518b-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.52 6.43
2. 0.52 6.46
3. 49 107 155 49 87 141
4. 317 650 743 307 647 740
5. 1028 1335 1547 1021 1340 1536
|
1518b-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.02 12.54
2. 1.05 12.86
3. 49 77 130 49 61 129
4. 196 430 519 193 427 513
5. 325 428 510 326 427 511
|
imix-1t1c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 0.67 2.00
2. 0.68 2.02
|
imix-2t2c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 1.35 4.02
2. 1.36 4.06
|
imix-4t4c-ethip4ipsec5000tnlsw-ip4base-
int-aes128cbc-hmac512sha-ndrpdr
|
1. 2.60 7.79
2. 2.66 7.95
|
10ge2p1vic1227-ethip4ipsec5000tnlsw-ip4base-int-aes128gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 2.37 1.59
2. 2.42 1.62
3. 19 77 104 19 70 99
4. 37 130 150 40 128 150
5. 150 189 235 157 194 248
|
64b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.32 2.90
2. 4.52 3.04
3. 19 67 153 19 43 106
4. 73 149 175 68 138 161
5. 171 188 204 160 178 190
|
64b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 7.98 5.36
2. 8.23 5.53
3. 19 45 69 19 36 52
4. 51 67 77 42 59 73
5. 77 99 112 64 83 103
|
1518b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 0.81 9.94
2. 0.82 10.04
3. 26 51 84 26 50 76
4. 125 391 421 120 371 413
5. 454 591 671 447 586 658
|
1518b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.55 19.03
2. 1.55 19.13
3. 25 28 41 25 27 39
4. 59 108 118 68 103 112
5. 115 143 156 101 129 143
|
1518b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.46 17.92
2. 1.56 19.23
3. 25 27 31 25 27 31
4. 29 42 51 26 41 48
5. 39 49 55 38 48 53
|
imix-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 1.65 4.92
2. 1.66 4.97
|
imix-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 3.11 9.29
2. 3.15 9.43
|
imix-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes128gcm-ndrpdr
|
1. 4.20 12.56
2. 5.79 17.30
|
10ge2p1vic1227-ethip4ipsec5000tnlsw-ip4base-int-aes256gcm-ndrpdr
RFC2544: Pkt throughput IPv4 IPsec tunnel mode.
[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.
[Ref] Applicable standard specifications: RFC4303 and RFC2544.
|
Throughput:
1. Mpps Gbps (NDR)
2. Mpps Gbps (PDR)
One-Way Latency Percentiles in uSec at %PDR load,
one set per each direction:
3. P50 P90 P99 P50 P90 P99 (10% PDR)
4. P50 P90 P99 P50 P90 P99 (50% PDR)
5. P50 P90 P99 P50 P90 P99 (90% PDR)
|
|---|
64b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.30 1.54
2. 2.31 1.55
3. 19 52 93 19 31 72
4. 48 143 164 42 139 156
5. 168 218 257 138 199 254
|
64b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.18 2.81
2. 4.18 2.81
3. 19 58 149 19 43 142
4. 85 159 172 63 159 171
5. 113 182 214 109 170 210
|
64b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 7.93 5.33
2. 8.05 5.41
3. 19 59 78 19 41 66
4. 54 71 84 39 52 65
5. 85 106 119 77 99 118
|
1518b-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 0.69 8.55
2. 0.71 8.71
3. 26 67 77 26 66 76
4. 73 336 366 73 337 357
5. 431 621 676 422 611 661
|
1518b-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.37 16.91
2. 1.39 17.08
3. 26 47 60 26 43 56
4. 83 169 186 78 165 182
5. 168 240 265 156 230 261
|
1518b-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.34 16.46
2. 1.56 19.23
3. 26 27 34 26 27 32
4. 30 47 55 28 46 53
5. 42 51 59 41 50 57
|
imix-1t1c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 1.55 4.62
2. 1.55 4.65
|
imix-2t2c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 2.82 8.43
2. 2.89 8.64
|
imix-4t4c-ethip4ipsec5000tnlsw-
ip4base-int-aes256gcm-ndrpdr
|
1. 4.24 12.68
2. 5.61 16.78
|