3n-tsh-x520

10ge2p1x520-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.10       1.33 
 2.  0.10       1.34 
  
 3.   56   57   58        56   58   62  
 4.  177  401  525       179  359  450  
 5.  789 1125 1412       862 1186 1323  

 1518b-4t4c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.39       5.01 
 2.  0.39       5.01 
  
 3.   57   65   86        57   76  113  
 4.  141  375  485       153  381  484  
 5.  531  826  953       532  741  935  

 imix-1t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.21       0.74 
 2.  0.21       0.75 

 imix-2t2c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.39       1.41 
 2.  0.39       1.41 

 imix-4t4c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.76       2.74 
 2.  0.76       2.74

10ge2p1x520-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.39       5.02 
 2.  0.40       5.04 
  
 3.   41   73   81        40   47   66  
 4.  173  389  460       192  468  545  
 5.  825 1136 1256       778 1111 1327  

 1518b-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.71       9.11 
 2.  0.71       9.11 
  
 3.   41   91  108        41   62   76  
 4.  121  326  374       176  388  460  
 5.  402  488  539       398  518  567  

 1518b-4t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.97      12.34 
 2.  0.97      12.34 
  
 3.   42   72   96        42   50   66  
 4.   82  151  236       123  188  274  
 5.  208  284  327       246  338  408  

 imix-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.73       2.51 
 2.  0.74       2.53 

 imix-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.23       4.21 
 2.  1.24       4.25 

 imix-4t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.28       7.82 
 2.  2.28       7.82

10ge2p1x520-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.35       4.52 
 2.  0.36       4.54 
  
 3.   41   46   51        40   42   59  
 4.  206  525  644       205  451  544  
 5.  850 1211 1317       834 1199 1411  

 1518b-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.66       8.42 
 2.  0.66       8.42 
  
 3.   42   75   86        42   64   76  
 4.  126  278  326       109  240  309  
 5.  414  518  573       429  526  605  

 1518b-4t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.97      12.38 
 2.  0.97      12.38 
  
 3.   41   52   62        42   53   75  
 4.   90  196  236        97  151  196  
 5.  248  352  417       248  331  389  

 imix-1t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.69       2.36 
 2.  0.70       2.38 

 imix-2t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.19       4.08 
 2.  1.20       4.10 

 imix-4t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.20       7.54 
 2.  2.20       7.54

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.11       1.44 
 2.  0.11       1.44 
  
 3.   54   55   55        54   55   59  
 4.   98  434  469       168  302  325  
 5.  486  792  890       487  767  821  

 1518b-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.21       2.70 
 2.  0.21       2.70 
  
 3.   55   57   70        55   57   69  
 4.  105  299  350       127  248  294  
 5.  448  770  866       449  614  752  

 1518b-4t4c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.41       5.27 
 2.  0.41       5.27 
  
 3.   56   72   99        56   73   93  
 4.  124  280  368       113  286  363  
 5.  530  716  854       540  754  894  

 imix-1t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.23       0.85 
 2.  0.24       0.85 

 imix-2t2c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.44       1.60 
 2.  0.44       1.60 

 imix-4t4c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.85       3.08 
 2.  0.85       3.08

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.46       5.91 
 2.  0.47       5.94 
  
 3.   38   55   66        39   61   69  
 4.   92  495  541       100  373  441  
 5.  544  718  856       518  716  857  

 1518b-4t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.97      12.34 
 2.  0.97      12.34 
  
 3.   40   53   62        41   69   99  
 4.   80  161  199        91  201  265  
 5.  240  319  377       218  321  361  

 imix-4t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.83       9.69 
 2.  2.96      10.14

10ge2p1x520-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.41       5.23 
 2.  0.41       5.23 
  
 3.   39   59   64        39   85   92  
 4.  133  462  518       124  438  465  
 5.  493  776  872       487  781  880  

 1518b-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.72       9.20 
 2.  0.73       9.24 
  
 3.   40  102  125        40   85  102  
 4.  163  436  504       176  366  414  
 5.  365  496  568       353  475  538  

 1518b-4t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.97      12.33 
 2.  0.97      12.39 
  
 3.   41   63   76        40   60   73  
 4.   70  232  262        69  245  282  
 5.  222  307  334       198  287  318  

 imix-1t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.97       3.33 
 2.  0.98       3.35 

 imix-2t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.52       5.21 
 2.  1.53       5.22 

 imix-4t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.82       9.64 
 2.  2.83       9.69

10ge2p1x520-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-1t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  1.97       2.17 
 2.  1.98       2.18 
  
 3.   28   58   72        28   53   64  
 4.   92  154  206       100  150  224  
 5.  241  284  323       256  306  362  

 64b-2t2c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.34       3.68 
 2.  3.35       3.70 
  
 3.   27   79   97        27   52   73  
 4.   84  139  157        64  122  138  
 5.  140  180  203       128  156  176  

 64b-4t4c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.88       4.29 
 2.  3.92       4.33 
  
 3.   27   51   66        28   50   71  
 4.   77  127  148        68  115  138  
 5.  137  168  192       139  169  189

10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.12       1.51 
 2.  0.12       1.51 
  
 3.   53   54   55        54   54   55  
 4.   81  371  389        81  345  363  
 5.  500  800  889       494  798  898  

 1518b-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.22       2.88 
 2.  0.22       2.88 
  
 3.   54   57   66        54   63   88  
 4.  166  284  383       123  259  382  
 5.  755 1123 1341       774 1161 1430  

 1518b-4t4c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.29       3.79 
 2.  0.29       3.81 
  
 3.   54   56   73        54   56   69  
 4.  102  381  546        69  310  494  
 5.  531  886 1045       363  687  964  

 imix-1t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.25       0.90 
 2.  0.25       0.90 

 imix-2t2c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.48       1.74 
 2.  0.48       1.74 

 imix-4t4c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.63       2.29 
 2.  0.64       2.31

10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.53       6.79 
 2.  0.54       6.82 
  
 3.   38   74   81        38   74   80  
 4.  177  527  599       158  356  468  
 5.  538  677  727       493  660  760  

 1518b-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.95      12.16 
 2.  0.95      12.16 
  
 3.   40   66   95        39   66   78  
 4.  138  272  322       134  213  267  
 5.  443  547  621       429  506  582  

 1518b-4t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  0.98      12.53 
 2.  0.99      12.59 
  
 3.   39   95  126        40   53   68  
 4.   97  242  295        82  192  247  
 5.  257  346  409       199  300  414  

 imix-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.29       4.41 
 2.  1.29       4.43 

 imix-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.14       7.33 
 2.  2.15       7.36 

 imix-4t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.90       9.94 
 2.  2.93      10.04

10ge2p1x520-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 1518b-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.47       5.94 
 2.  0.47       5.97 
  
 3.   38   63  118        38   90   97  
 4.  169  491  510       141  452  498  
 5.  542  714  793       539  725  810  

 1518b-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.85      10.82 
 2.  0.85      10.87 
  
 3.   39   60   82        39   63  107  
 4.  154  335  439       164  347  488  
 5.  457  561  653       458  575  659  

 1518b-4t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  0.98      12.51 
 2.  0.99      12.58 
  
 3.   39   88  160        40   60   86  
 4.  102  263  330        76  190  281  
 5.  281  396  473       208  347  418  

 imix-1t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.18       4.05 
 2.  1.19       4.07 

 imix-2t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.01       6.89 
 2.  2.02       6.92 

 imix-4t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.74       9.36 
 2.  2.76       9.46