3n-skx-xxv710

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.70       9.04 
 2.  0.70       9.08 
  
 3.   43   75   83        46   71   74  
 4.  124  306  431       161  274  359  
 5.  408  531  634       417  547  648  

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.35      17.48 
 2.  1.36      17.56 
  
 3.   47   72   88        44   69   81  
 4.  104  187  214       120  219  257  
 5.  380  464  543       357  437  515  

 1518b-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.99      25.67 
 2.  2.06      26.59 
  
 3.   45   62   86        53   77   97  
 4.  110  161  207       104  166  216  
 5.  196  529  814       197  532  810  

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.63       5.90 
 2.  1.64       5.93 

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.10      11.19 
 2.  3.13      11.30 

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.29      15.52 
 2.  4.47      16.15

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.27      16.18 
 2.  1.27      16.18 
  
 3.   24   37   57        24   36   51  
 4.   47  173  248        61  113  166  
 5.  191  287 1661       195  291 1746  

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.34      29.79 
 2.  2.35      29.94 
  
 3.   25   43   59        24   37   46  
 4.   36   69   83        48   82   99  
 5.  154  184  921       154  181  914  

 1518b-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.57      45.45 
 2.  3.57      45.45 
  
 3.   25   34   43        25   36   55  
 4.   48   83  102        51   78   97  
 5.  112  179  274       113  177  279  

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.74       9.37 
 2.  2.79       9.56 

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.28      18.06 
 2.  5.33      18.24 

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.04      27.53 
 2.  8.41      28.80

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.71       9.19 
 2.  0.71       9.19 
  
 3.   43   70   78        43   69   78  
 4.  139  312  402       119  330  407  
 5.  428  577  687       418  571  665  

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.42      18.31 
 2.  1.42      18.40 
  
 3.   44   92  105        43   84  115  
 4.  117  174  231       120  174  229  
 5.  399  538  626       408  533  621  

 1518b-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.18      28.18 
 2.  2.29      29.63 
  
 3.   47   75   83        47   74   85  
 4.   96  147  193       119  149  212  
 5.  216 1005 1557       218 1029 1559  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.69       6.11 
 2.  1.71       6.17 

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.35      12.12 
 2.  3.39      12.25 

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.88      17.64 
 2.  5.00      18.09

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.34      17.06 
 2.  1.34      17.06 
  
 3.   24   43   83        24   38   86  
 4.   60  115  146        61  153  182  
 5.  219  299  352       209  287  318  

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.61      33.20 
 2.  2.63      33.53 
  
 3.   24   35   47        24   36   53  
 4.   53   71   86        51   81   93  
 5.  198  223  244       177  212  235  

 1518b-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.83      48.76 
 2.  3.83      48.76 
  
 3.   24   32   45        24   35   49  
 4.   44   62   79        46   73   88  
 5.   90  121  156        86  114  148  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.09      10.57 
 2.  3.09      10.57 

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.19      21.18 
 2.  6.22      21.29 

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 10.38      35.53 
 2. 10.75      36.80

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-4t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  1.79      22.80 
 2.  1.81      23.03 
  
 3.   25   49   61        25   35   57  
 4.   38   68   87        47   87  100  
 5.  107  165  182        86  115  142  

 1518b-6t3c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  3.11      39.55 
 2.  3.29      41.91 
  
 3.   25   52   82        26   44   66  
 4.   65  107  128        72  109  140  
 5.  186  224  265       173  206  239  

 1518b-8t4c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  2.98      37.95 
 2.  3.75      47.74 
  
 3.   26   52   67        25   61   89  
 4.   78  128  145        77  110  124  
 5.  227  278  320       208  252  282  

 imix-4t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.77      16.31 
 2.  6.16      21.08 

 imix-6t3c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.45      15.22 
 2.  6.81      23.30 

 imix-8t4c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.85      16.59 
 2.  6.88      23.56

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.75       9.71 
 2.  0.75       9.71 
  
 3.   43   66   94        42   70   94  
 4.  118  321  433       134  321  426  
 5.  428  572  660       428  577  656  

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.88      11.35 
 2.  0.89      11.52 
  
 3.   43   59   76        43   46   59  
 4.   95  184  229        51  143  182  
 5.  251  345  396       131  248  278  

 1518b-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.81      10.42 
 2.  0.81      10.52 
  
 3.   43   46   88        42   61   89  
 4.   47  149  246        78  215  266  
 5.   85  344  402       313  403  475  

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.37       4.95 
 2.  1.39       5.01 

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.61       5.82 
 2.  1.63       5.88 

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.69       6.09 
 2.  1.71       6.18

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.49      19.01 
 2.  1.49      19.01 
  
 3.   24   35   52        24   57   92  
 4.   68  169  217        85  165  226  
 5.  204  276  306       199  264  314  

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.34      17.02 
 2.  1.34      17.11 
  
 3.   24   26   39        24   44   55  
 4.   28   68  115        48   84  108  
 5.   57  128  153       128  169  206  

 1518b-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.46      31.28 
 2.  2.48      31.60 
  
 3.   24   56   87        24   37   58  
 4.   35   72   87        35   63  121  
 5.   45  180  235       138  196  233  

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      13.16 
 2.  3.85      13.16 

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.23      14.49 
 2.  4.28      14.64 

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.89      26.99 
 2.  8.01      27.40

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-4t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  1.79      22.81 
 2.  1.83      23.27 
  
 3.   25   39   66        25   50   81  
 4.   38  119  143        50   90  119  
 5.  109  165  211       102  163  186  

 1518b-6t3c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  3.03      38.65 
 2.  3.32      42.31 
  
 3.   26   63   72        25   35   57  
 4.   65   86  103        65   85  100  
 5.  206  251  295       180  217  254  

 1518b-8t4c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  3.14      39.97 
 2.  3.74      47.63 
  
 3.   27   45   58        26   43   59  
 4.   78  106  125        81  127  145  
 5.  245  289  330       234  270  295  

 imix-4t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.59      15.72 
 2.  5.67      19.42 

 imix-6t3c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.35      14.89 
 2.  6.06      20.73 

 imix-8t4c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.69      16.06 
 2.  6.09      20.85

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.13      14.45 
 2.  1.13      14.45 
  
 3.   25   44   86        25   51   67  
 4.   44  119  148        49   86  113  
 5.  205  262  343       196  254  344  

 1518b-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.09      26.67 
 2.  2.09      26.67 
  
 3.   25   62   91        25   50   80  
 4.   63   96  118        61  129  150  
 5.  153  188  228       156  200  245  

 1518b-8t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.83      48.76 
 2.  3.83      48.76 
  
 3.   29   59   84        33   65   84  
 4.   62   86  103        62   82  102  
 5.  132  153  174       134  157  178  

 imix-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.40       8.21 
 2.  2.45       8.38 

 imix-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.52      15.46 
 2.  4.52      15.46 

 imix-8t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.37      28.66 
 2.  8.37      28.66

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-4t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.75      22.34 
 2.  1.79      22.79 
  
 3.   25   41   59        25   66   91  
 4.   43   93  113        47   86  120  
 5.  117  181  201        83  110  145  

 1518b-6t3c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.26      41.48 
 2.  3.58      45.63 
  
 3.   39   65   81        25   59   86  
 4.   70   86   99        92  127  141  
 5.  356  418  464       345  406  451  

 1518b-8t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.75      47.70 
 2.  3.80      48.38 
  
 3.   29   62   88        26   60   75  
 4.   76  100  120        80  100  114  
 5.  270  307  339       266  303  336  

 imix-4t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.74      19.65 
 2.  5.77      19.75 

 imix-6t3c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.99      20.50 
 2.  6.05      20.70 

 imix-8t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.97      20.43 
 2.  6.00      20.53

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.03      13.15 
 2.  1.03      13.15 
  
 3.   24   48   73        23   33   57  
 4.   61  155  187        37  163  197  
 5.  176  270  338       146  277  342  

 1518b-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.28      16.27 
 2.  1.28      16.27 
  
 3.   24   40   69        24   41   82  
 4.   50  171  197        42   95  204  
 5.  150  201  229        84  188  252  

 1518b-8t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.93      24.63 
 2.  1.95      24.88 
  
 3.   24   63   88        24   38   51  
 4.   53  110  149        48   89  134  
 5.  108  169  204        75  165  232  

 imix-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.40       8.22 
 2.  2.41       8.26 

 imix-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.90       9.91 
 2.  2.90       9.91 

 imix-8t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.63      15.83 
 2.  4.65      15.91

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-4t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.78      22.70 
 2.  1.81      23.04 
  
 3.   25   70   86        25   44   83  
 4.   39   98  113        49  103  131  
 5.  117  175  196        91  125  152  

 1518b-6t3c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.35      42.71 
 2.  3.63      46.28 
  
 3.   26   54   70        25   58   78  
 4.   71   88  100        74   97  112  
 5.  353  415  468       349  409  461  

 1518b-8t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.74      47.60 
 2.  3.78      48.08 
  
 3.   30   54   75        28   64   83  
 4.   74   97  112        78  106  124  
 5.  276  312  343       280  317  348  

 imix-4t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.67      19.41 
 2.  5.76      19.70 

 imix-6t3c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.37      18.39 
 2.  5.43      18.58 

 imix-8t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.33      18.26 
 2.  5.39      18.44