3n-skx-xxv710

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.50       3.24 
 2.  2.54       3.29 
  
 3.   78  190  308        62  191  306  
 4.  127  202  301       154  252  338  
 5.  134  166  251       174  236  306  

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.68       8.85 
 2.  0.70       8.99 
  
 3.  145  266  377       139  252  363  
 4.  166  261  385       169  299  388  
 5.  317  413  476       304  379  458  

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.52       5.49 
 2.  1.55       5.60

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.29       4.74 
 2.  4.38       4.84 
  
 3.   77  160  264        82  184  271  
 4.   52   82  112        51   83  105  
 5.  117  138  165       119  143  181  

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  8.19       9.05 
 2.  8.44       9.32 
  
 3.   66  168  217        89  188  278  
 4.   50   68   81        52   73   91  
 5.  109  128  147       109  126  146  

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 13.08      14.44 
 2. 13.68      15.10 
  
 3.   24   32   39        23   30   36  
 4.   41   56   73        39   52   70  
 5.   79  164  258        78  164  253  

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.47      18.78 
 2.  1.48      18.88 
  
 3.   94  205  261        83  208  314  
 4.   72  107  178       100  184  256  
 5.  151  195 1701       155  193 1549  

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.73      34.77 
 2.  2.77      35.29 
  
 3.   77  189  311        57  176  281  
 4.   78  117  151        75  118  150  
 5.  135  160 1579       141  166 1604  

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.89       9.88 
 2.  3.03      10.39 

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.54      18.95 
 2.  5.79      19.83 

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  8.43      28.87 
 2.  8.69      29.75

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.32       4.77 
 2.  4.43       4.89 
  
 3.   77  180  270        91  202  300  
 4.   62   87  101        96  127  151  
 5.  131  168  199       132  174  199  

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.81       8.62 
 2.  7.89       8.71 
  
 3.   42  119  166       109  220  319  
 4.   48   62   74        55   75   92  
 5.  102  119  134        97  113  131  

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 12.52      13.83 
 2. 13.10      14.46 
  
 3.   22   31   40        20   33   40  
 4.   40   55   73        40   55   69  
 5.   76  144  220        75  142  217  

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.23      15.69 
 2.  1.25      15.93 
  
 3.   95  212  316        81  182  285  
 4.  154  258  342       142  211  322  
 5.  159  238 2087       163  232 2167  

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.31      29.45 
 2.  2.32      29.60 
  
 3.   88  203  317        71  176  290  
 4.   76   95  125        77  111  160  
 5.  146  173  330       145  172  355  

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.59       8.85 
 2.  2.67       9.12 

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.11      17.49 
 2.  5.32      18.20 

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.90      27.05 
 2.  8.27      28.30

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.59       3.35 
 2.  2.61       3.39 
  
 3.   76  190  310        50  173  279  
 4.  106  171  205       102  174  232  
 5.  200  252  297       160  199  237  

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.71       9.20 
 2.  0.71       9.20 
  
 3.  134  268  388       147  256  349  
 4.  235  367  435       205  313  433  
 5.  387  539  616       375  487  585  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.65       5.97 
 2.  1.67       6.03

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.76       5.26 
 2.  4.81       5.31 
  
 3.   76  185  256        82  210  306  
 4.   63   86  112        57   75  102  
 5.  115  136  164       117  139  163  

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  9.70      10.70 
 2.  9.79      10.81 
  
 3.   58  113  131        52  124  176  
 4.   42   55   67        42   56   69  
 5.  113  130  142       111  127  141  

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 17.68      19.51 
 2. 18.12      20.01 
  
 3.   24   34   43        21   32   39  
 4.   45   56   70        44   56   68  
 5.   81  158  210        79  156  209  

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.61      20.48 
 2.  1.62      20.58 
  
 3.   91  207  314       109  224  322  
 4.   90  145  162        95  134  152  
 5.  170  220  265       158  206  230  

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.17      40.36 
 2.  3.18      40.56 
  
 3.   71  191  304        80  181  286  
 4.   72  104  119        74   98  117  
 5.  173  199  222       168  194  214  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.38      11.58 
 2.  3.38      11.58 

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.78      23.22 
 2.  6.85      23.45 

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 11.52      39.42 
 2. 11.63      39.81

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.64       5.13 
 2.  4.69       5.18 
  
 3.  100  203  289        66  183  267  
 4.   98  114  132        52   63   72  
 5.  123  153  174       112  132  152  

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  9.38      10.36 
 2.  9.52      10.51 
  
 3.   52  134  167        44  123  150  
 4.   48   60   67        48   62   85  
 5.  115  133  147       114  131  145  

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 17.21      19.00 
 2. 17.65      19.48 
  
 3.   23   34   42        24   34   42  
 4.   45   56   67        44   54   66  
 5.   81  160  217        80  158  214  

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.32      16.84 
 2.  1.32      16.84 
  
 3.  102  202  292        98  215  314  
 4.  100  167  232       102  205  304  
 5.  155  207  248       159  200  238  

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.62      33.33 
 2.  2.63      33.50 
  
 3.   96  200  302        77  204  299  
 4.   89  139  170        74  113  146  
 5.  181  210  239       168  194  219  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.04      10.40 
 2.  3.06      10.46 

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.16      21.09 
 2.  6.22      21.30 

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 10.43      35.71 
 2. 10.59      36.25

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.82       0.91 
 2.  0.83       0.92 
  
 3.  109  204  304       121  223  322  
 4.  100  200  296       116  226  311  
 5.  261  377  487       279  389  503  

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.57       7.31 
 2.  0.57       7.31 
  
 3.  124  220  314       130  236  316  
 4.  161  320  415       191  331  434  
 5.  312  481  612       327  536  696  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.75       2.57 
 2.  0.75       2.57

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.11       4.02 
 2.  3.14       4.07 
  
 3.   97  180  268        97  173  257  
 4.   82  117  139       127  174  212  
 5.  171  218  257       145  172  197  

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.78      10.07 
 2.  0.78      10.07 
  
 3.  109  203  326       112  196  294  
 4.  157  232  259       191  292  338  
 5.  372  481  568       337  434  525  

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.91       6.90 
 2.  1.92       6.94

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.04       6.67 
 2.  6.78       7.48 
  
 3.   72  165  245       107  205  271  
 4.   61   88  106        53   73   85  
 5.   84   97  109        94  117  132  

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.09       6.72 
 2.  6.83       7.54 
  
 3.   61  124  152        70  158  242  
 4.   49   65   87        48   60   71  
 5.   81   93  103        87  101  113  

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.74       7.44 
 2.  6.81       7.52 
  
 3.   20   25   36        19   28   59  
 4.   33   57   69        42   60   68  
 5.   92  106  124        90  106  123  

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.90      24.14 
 2.  1.91      24.27 
  
 3.  108  209  289        99  199  279  
 4.   81  120  151        83  124  144  
 5.  157  195  220       140  167  209  

 1518b-4t2c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.04      26.00 
 2.  2.04      26.00 
  
 3.  129  223  300       107  189  248  
 4.   90  157  200       116  186  230  
 5.  146  187  207       153  205  224  

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.40      15.07 
 2.  4.47      15.29 

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.50      15.41 
 2.  4.59      15.72 

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.56      15.61 
 2.  4.58      15.69

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.03       6.66 
 2.  6.80       7.51 
  
 3.   63  130  182        91  168  257  
 4.   50   67   79        50   68   80  
 5.   90  109  127        85   98  109  

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.31       6.97 
 2.  6.94       7.66 
  
 3.   62  128  217        77  169  249  
 4.   48   64   77        56   71   82  
 5.   92  106  120        89  104  117  

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.79       7.49 
 2.  6.89       7.61 
  
 3.   20   30   42        19   29   58  
 4.   39   50   61        45   70   79  
 5.   89  103  114        91  108  120  

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.47      18.72 
 2.  1.48      18.81 
  
 3.  119  209  286       133  225  285  
 4.   76  110  139       118  176  243  
 5.  182  213  239       218  289  317  

 1518b-4t2c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.79      22.86 
 2.  1.81      23.09 
  
 3.  127  224  293       115  196  276  
 4.   84  119  145       107  190  209  
 5.  168  201  231       177  224  247  

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.93      13.45 
 2.  3.99      13.65 

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.23      14.48 
 2.  4.27      14.62 

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.21      14.43 
 2.  4.26      14.57

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  5.36       5.91 
 2.  5.69       6.28 
  
 3.   60  156  187        88  180  268  
 4.   75  107  136        66   84  103  
 5.   94  110  122       100  122  137  

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  1.47      18.75 
 2.  1.48      18.85 
  
 3.  100  206  290        91  181  275  
 4.   74  147  190        89  178  220  
 5.  231  302  333       168  237  299  

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.52      12.04 
 2.  3.55      12.16

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.04       5.23 
 2.  4.06       5.26 
  
 3.   76  192  308        72  182  304  
 4.   77  105  123        75  101  121  
 5.  120  148  179       116  141  169  

 64b-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.85       7.58 
 2.  6.06       7.85 
  
 3.  111  226  337        81  111  199  
 4.   81  110  128        80  102  135  
 5.  192  222  248       184  211  238  

 imix-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.04      18.23 
 2.  5.22      18.88

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.87       6.48 
 2.  6.49       7.17 
  
 3.   73  196  300        92  191  268  
 4.   63   80   94        77  109  137  
 5.  155  173  187       155  173  185  

 64b-2t4c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.55       6.13 
 2.  6.42       7.09 
  
 3.   97  191  224        69  142  184  
 4.   73   96  125        60   75   87  
 5.  157  179  196       152  170  185  

 imix-2t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  4.86      16.62 
 2.  4.90      16.79 

 imix-2t4c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.37      18.39 
 2.  5.59      19.15

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.61       6.20 
 2.  6.43       7.09 
  
 3.   79  166  223        91  181  259  
 4.   71   86   99        71   99  119  
 5.  158  179  199       148  172  187  

 64b-2t4c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.88       6.49 
 2.  6.43       7.10 
  
 3.   71  113  202        81  143  165  
 4.   65   84   97        68   86  100  
 5.  153  170  184       155  171  184  

 imix-2t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.83      16.52 
 2.  4.87      16.68 

 imix-2t4c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.42      18.56 
 2.  5.59      19.12

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.99       5.17 
 2.  4.03       5.22 
  
 3.   78  210  338       125  258  382  
 4.  101  156  211        95  168  220  
 5.  156  193  227       124  175  210  

 64b-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.35       5.64 
 2.  4.40       5.70 
  
 3.   90  240  345        98  251  394  
 4.   87  137  179       107  167  207  
 5.  218  256  288       149  251  292  

 imix-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.89      14.06 
 2.  3.95      14.27

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  4.58       5.06 
 2.  4.61       5.08 
  
 3.   85  231  336       102  242  392  
 4.   71  110  132       109  153  164  
 5.  209  243  274       131  198  250  

 64b-2t4c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  4.51       4.98 
 2.  4.56       5.03 
  
 3.   73  243  320        96  202  280  
 4.   72  108  122       108  134  153  
 5.  225  261  286       124  193  224  

 imix-2t2c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  3.78      12.93 
 2.  3.83      13.12 

 imix-2t4c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  4.04      13.84 
 2.  4.10      14.05

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.58       5.06 
 2.  4.63       5.11 
  
 3.  101  255  372       113  248  417  
 4.   63   85   98        68  130  166  
 5.  237  273  299       134  209  248  

 64b-2t4c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.51       4.98 
 2.  4.56       5.03 
  
 3.   71  189  258        98  241  358  
 4.   65  120  149        70  101  114  
 5.  223  255  281       120  200  232  

 imix-2t2c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  3.79      12.98 
 2.  3.85      13.17 

 imix-2t4c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.03      13.81 
 2.  4.12      14.09

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.71       3.51 
 2.  2.75       3.57 
  
 3.   88  188  297        88  197  287  
 4.   86  126  155        93  151  208  
 5.  200  276  315       172  248  288  

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.71       9.23 
 2.  0.72       9.32 
  
 3.  119  221  329       104  214  330  
 4.  165  261  337       167  273  358  
 5.  349  474  557       327  454  553  

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.67       6.03 
 2.  1.68       6.09

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.54       6.11 
 2.  5.71       6.30 
  
 3.   62  153  187        76  176  245  
 4.   49   63   73        48   67   87  
 5.  127  166  185       112  152  175  

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 10.86      11.99 
 2. 10.97      12.11 
  
 3.   55  145  209        42   85  129  
 4.   47   63   76        45   61   73  
 5.  106  134  150        99  130  145  

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 19.51      21.54 
 2. 20.11      22.20 
  
 3.   24   35   43        25   34   41  
 4.   48   62   74        48   59   70  
 5.  100  186  230       102  179  222  

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.69      21.56 
 2.  1.71      21.77 
  
 3.  106  221  311        90  186  291  
 4.   84  141  204        85  167  219  
 5.  158  205  228       147  202  222  

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.20      40.81 
 2.  3.22      41.02 
  
 3.   95  199  308        85  192  307  
 4.   75  129  148        66   93  114  
 5.  156  202  230       136  180  207  

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.65      12.51 
 2.  3.71      12.70 

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.95      23.80 
 2.  6.99      23.92 

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 12.45      42.61 
 2. 12.70      43.48

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.50       6.07 
 2.  5.67       6.26 
  
 3.   86  186  278        93  207  309  
 4.   58   79  112        69  110  135  
 5.  129  168  186       115  150  176  

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 10.66      11.77 
 2. 10.77      11.89 
  
 3.   56  103  128        58  133  171  
 4.   46   58   69        45   57   66  
 5.  103  130  146        97  127  143  

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 19.56      21.59 
 2. 20.06      22.14 
  
 3.   24   34   42        24   33   40  
 4.   47   60   71        47   59   70  
 5.  101  185  226       101  180  222  

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.37      17.45 
 2.  1.38      17.63 
  
 3.  106  216  328       102  198  286  
 4.  101  169  224        91  160  190  
 5.  207  289  319       173  243  275  

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.58      32.89 
 2.  2.60      33.06 
  
 3.   64  166  277        40  166  268  
 4.   73  116  148        70  122  156  
 5.  138  169  193       122  157  179  

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.32      11.37 
 2.  3.39      11.60 

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.31      21.60 
 2.  6.34      21.71 

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 11.39      39.00 
 2. 11.51      39.39

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.14       2.77 
 2.  2.16       2.80 
  
 3.   99  182  280        47  187  310  
 4.  125  211  284       127  230  279  
 5.  175  240  296       137  218  331  

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.59       7.61 
 2.  0.59       7.64 
  
 3.  123  250  341       144  251  383  
 4.  168  363  413       162  346  450  
 5.  376  538  645       281  516  626  

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.30       4.71 
 2.  1.32       4.76

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.49       4.95 
 2.  4.58       5.05 
  
 3.   69  197  278        92  203  305  
 4.   49  116  134        59  107  125  
 5.  124  160  178        94  137  164  

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.28       5.83 
 2.  5.33       5.88 
  
 3.   75  191  285        73  208  311  
 4.   60  111  139        69  120  143  
 5.  105  130  160        61  119  143  

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  8.78       9.69 
 2.  8.91       9.84 
  
 3.   21   32   46        20   30   39  
 4.   35   49   59        33   48   71  
 5.   81  121  140        39  136  162  

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.34      17.09 
 2.  1.35      17.18 
  
 3.   88  182  277        96  216  320  
 4.   88  178  257       108  226  331  
 5.  183  249  319       137  219  286  

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.60      20.33 
 2.  1.60      20.33 
  
 3.   76  159  256        25  155  267  
 4.  100  197  269       121  235  333  
 5.  158  222  285       118  213  286  

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.94      10.07 
 2.  2.97      10.17 

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.52      12.05 
 2.  3.54      12.11 

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.63      19.27 
 2.  5.74      19.66

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.49       4.95 
 2.  4.53       5.00 
  
 3.   91  186  286       103  199  292  
 4.   66  124  181        61   90  104  
 5.  127  159  181        96  140  166  

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.28       5.83 
 2.  5.36       5.91 
  
 3.   71  182  272        70  204  304  
 4.   57  104  139        74  114  139  
 5.  109  137  155        66  118  149  

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.87       9.79 
 2.  9.00       9.94 
  
 3.   21   31   44        20   30   41  
 4.   32   47   62        30   45   56  
 5.   83  121  140        40  136  162  

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.12      14.28 
 2.  1.13      14.35 
  
 3.   88  194  293        75  191  302  
 4.  102  196  273       140  237  338  
 5.  165  251  319       140  223  310  

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.36      17.33 
 2.  1.37      17.50 
  
 3.   71  167  265        25  171  294  
 4.  109  207  281       120  233  328  
 5.  168  264  328       133  225  292  

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.69       9.21 
 2.  2.73       9.33 

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.22      11.01 
 2.  3.27      11.18 

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.21      17.83 
 2.  5.26      18.01

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.00       5.18 
 2.  4.06       5.26 
  
 3.   71  230  359       125  259  373  
 4.   83  136  176        91  157  185  
 5.  161  204  237       131  185  223  

 64b-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.32       5.60 
 2.  4.37       5.66 
  
 3.   75  194  312       112  243  349  
 4.   85  134  178        77  150  205  
 5.  219  256  291       168  256  301  

 imix-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.93      14.22 
 2.  3.99      14.44

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  4.52       4.99 
 2.  4.57       5.04 
  
 3.   67  239  326       106  253  387  
 4.   65   98  114        71   89  105  
 5.  197  228  252       129  208  246  

 64b-2t4c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  4.46       4.93 
 2.  4.53       5.00 
  
 3.   86  208  308        76  242  384  
 4.   73   96  115       127  158  179  
 5.  242  276  300       121  211  243  

 imix-2t2c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  3.79      12.96 
 2.  3.84      13.15 

 imix-2t4c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  4.00      13.70 
 2.  4.04      13.84

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.52       4.99 
 2.  4.61       5.09 
  
 3.   85  230  344       101  247  392  
 4.   65  133  152        99  121  137  
 5.  234  271  295       120  208  253  

 64b-2t4c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.37       4.82 
 2.  4.53       5.00 
  
 3.   66  218  328       109  244  356  
 4.   70  127  158        92  158  181  
 5.  236  272  298       136  209  244  

 imix-2t2c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  3.78      12.95 
 2.  3.84      13.14 

 imix-2t4c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.00      13.70 
 2.  4.06      13.91

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.80       4.93 
 2.  3.88       5.03 
  
 3.   66  157  301        92  219  349  
 4.   73   95  119        74  118  149  
 5.  155  181  211       117  161  197  

 64b-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.24       5.49 
 2.  4.30       5.58 
  
 3.   74  211  336        68  163  314  
 4.   79  106  131        74   99  120  
 5.  200  223  243       113  226  250  

 imix-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.81      13.77 
 2.  3.85      13.91

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  4.49       4.96 
 2.  4.54       5.01 
  
 3.   74  214  354        77  186  290  
 4.   57   73   89        83   95  107  
 5.  226  262  290       130  209  254  

 64b-2t4c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  4.41       4.87 
 2.  4.48       4.94 
  
 3.   76  160  283        92  203  366  
 4.   57   74   91        85  113  141  
 5.  234  262  283       105  205  231  

 imix-2t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  3.74      12.80 
 2.  3.80      12.99 

 imix-2t4c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  3.91      13.37 
 2.  3.97      13.57

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.48       4.95 
 2.  4.53       5.00 
  
 3.   66  165  294        78  174  354  
 4.   81   93  102        64   91  116  
 5.  206  233  255       105  186  218  

 64b-2t4c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  4.38       4.84 
 2.  4.45       4.91 
  
 3.   68  168  208        80  192  300  
 4.   60   86  103        73   99  119  
 5.  204  233  257       117  194  236  

 imix-2t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  3.73      12.75 
 2.  3.78      12.94 

 imix-2t4c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  3.90      13.35 
 2.  3.98      13.62

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.37       3.08 
 2.  2.40       3.11 
  
 3.   23   54   70        23   49   66  
 4.   95  119  154        79  165  193  
 5.  179  228  886       183  244 1156  

 1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.67       8.64 
 2.  0.67       8.64 
  
 3.   45   88  118        46  106  130  
 4.  157  235  278       141  236  303  
 5.  383  477  594       386  469  571  

 imix-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.44       5.19 
 2.  1.46       5.27

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.91       4.32 
 2.  3.99       4.40 
  
 3.   20   38   55        20   34   51  
 4.   53   88  114        56   88  101  
 5.  118  147  192       118  148  190  

 64b-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.40       8.17 
 2.  7.48       8.26 
  
 3.   24   48   74        24   50   78  
 4.   47   63   77        49   66   77  
 5.  112  132  158       114  135  160  

 64b-8t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 13.51      14.91 
 2. 13.58      14.99 
  
 3.   29   53   73        31   53   79  
 4.   44   56   69        43   54   65  
 5.  116  134  150       115  133  148  

 1518b-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.29      16.41 
 2.  1.32      16.83 
  
 3.   25   51   79        25   67   87  
 4.   51  115  135        50  103  123  
 5.  208  294  715       179  245  655  

 1518b-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.37      30.23 
 2.  2.37      30.23 
  
 3.   25   44   84        25   50   80  
 4.   60   85   94        54   79   90  
 5.  135  169  205       140  171  202  

 imix-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.47       8.45 
 2.  2.58       8.83 

 imix-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.72      16.16 
 2.  4.72      16.16 

 imix-8t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  8.58      29.36 
 2.  8.62      29.50

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.88       4.28 
 2.  3.93       4.34 
  
 3.   20   32   69        19   28   42  
 4.   48   94  118        66   94  121  
 5.  121  158  192       115  154  180  

 64b-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.79       7.50 
 2.  6.93       7.65 
  
 3.   26   51   79        27   52   65  
 4.   48   64   76        49   65   77  
 5.  115  136  160       112  133  156  

 64b-8t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 12.93      14.27 
 2. 13.19      14.56 
  
 3.   32   55   74        24   49   76  
 4.   44   59   70        46   61   72  
 5.  115  134  157       114  133  153  

 1518b-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.10      14.06 
 2.  1.12      14.20 
  
 3.   26   41   67        25   53   86  
 4.   56  127  151        47  175  210  
 5.  206  295  355       213  307  349  

 1518b-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.07      26.32 
 2.  2.07      26.32 
  
 3.   26   62   84        26   54   80  
 4.   63   85  106        59   86  105  
 5.  163  212  244       153  187  222  

 imix-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.34       8.00 
 2.  2.41       8.24 

 imix-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.32      14.79 
 2.  4.32      14.79 

 imix-8t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.11      27.75 
 2.  8.11      27.75

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.53       3.28 
 2.  2.53       3.28 
  
 3.   23   33   65        23   46   65  
 4.   60   99  130        71   90  109  
 5.  183  223  253       206  236  257  

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.70       9.05 
 2.  0.70       9.05 
  
 3.   44  109  144        43   84  134  
 4.  154  387  486       168  304  396  
 5.  459  604  689       466  612  725  

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.59       5.75 
 2.  1.59       5.75

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.42       4.88 
 2.  4.42       4.88 
  
 3.   19   42   73        19   34   60  
 4.   59   76   88        59   74   85  
 5.  118  149  178       114  147  172  

 64b-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  8.97       9.90 
 2.  8.97       9.90 
  
 3.   28   51   79        26   55   77  
 4.   41   54   66        46   55   62  
 5.  119  140  158       119  139  157  

 64b-8t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 18.14      20.02 
 2. 18.14      20.02 
  
 3.   36   56   71        27   51   79  
 4.   45   54   62        47   58   67  
 5.  124  143  159       120  138  154  

 1518b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.51      19.25 
 2.  1.53      19.45 
  
 3.   25   44   58        25   74   92  
 4.   42  120  139        52   84  113  
 5.  206  275  303       193  243  272  

 1518b-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.82      35.92 
 2.  2.82      35.92 
  
 3.   25   44   68        25   51   82  
 4.   61   99  118        60   78   96  
 5.  178  206  227       156  180  201  

 imix-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.05      10.45 
 2.  3.05      10.45 

 imix-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.94      20.34 
 2.  5.94      20.34 

 imix-8t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 11.62      39.79 
 2. 11.62      39.79

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.33       4.78 
 2.  4.33       4.78 
  
 3.   20   48   60        19   40   70  
 4.   54   73   87        59   83  101  
 5.  120  149  175       116  146  168  

 64b-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.63       9.53 
 2.  8.67       9.58 
  
 3.   28   53   76        29   52   76  
 4.   46   62   74        51   66   78  
 5.  116  135  152       114  134  152  

 64b-8t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 17.68      19.52 
 2. 17.68      19.52 
  
 3.   36   59   78        38   56   73  
 4.   45   54   62        46   55   62  
 5.  120  138  154       120  138  154  

 1518b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.27      16.12 
 2.  1.27      16.12 
  
 3.   25   52   66        25   60   84  
 4.   77  145  187        82  138  158  
 5.  221  268  303       222  277  312  

 1518b-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.43      30.99 
 2.  2.43      30.99 
  
 3.   25   52   75        25   48   67  
 4.   59   79   94        60   84  105  
 5.  186  216  242       172  208  237  

 imix-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.79       9.54 
 2.  2.80       9.59 

 imix-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.55      18.99 
 2.  5.55      18.99 

 imix-8t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 10.88      37.23 
 2. 10.88      37.23

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.84       0.93 
 2.  0.84       0.93 
  
 3.   25   62   92        24   54  137  
 4.   96  290  450        88  363  604  
 5.  433  729 1023       453  698  911  

 1518b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.60       7.62 
 2.  0.60       7.69 
  
 3.   30   61   93        31   60   78  
 4.   95  250  391        73  295  440  
 5.  453  869 1072       458  825  993  

 imix-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.76       2.62 
 2.  0.76       2.62

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.99       3.88 
 2.  3.01       3.90 
  
 3.   23   50   59        23   89  128  
 4.   57  118  132        76  138  158  
 5.  168  202  235       152  199  234  

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.76       9.85 
 2.  0.77       9.90 
  
 3.   45   67   83        48   92  115  
 4.  130  336  395       138  283  326  
 5.  377  482  548       439  565  632  

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.82       6.58 
 2.  1.83       6.62

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.12       6.75 
 2.  6.15       6.79 
  
 3.   20   59   75        19   48   75  
 4.   41   60   72        50   68   78  
 5.   95  113  130        92  111  130  

 64b-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.46       7.14 
 2.  6.50       7.17 
  
 3.   19   50   70        19   54   69  
 4.   48   70   81        41   56   69  
 5.   91  111  129        90  106  122  

 64b-8t4c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.35       7.01 
 2.  6.41       7.08 
  
 3.   29   57   78        27   49   68  
 4.   47   67   78        42   56   68  
 5.   87  103  118        86  100  111  

 1518b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.79      22.76 
 2.  1.80      22.87 
  
 3.   24   47   66        24   41   64  
 4.   70  103  120        80  125  146  
 5.  159  205  230       158  196  216  

 1518b-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.00      25.45 
 2.  2.00      25.45 
  
 3.   24   66   81        24   64   76  
 4.   78  141  162        60   88  107  
 5.  115  149  169       124  152  174  

 imix-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.93      13.45 
 2.  3.95      13.52 

 imix-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.22      14.45 
 2.  4.24      14.52 

 imix-8t4c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.20      14.38 
 2.  4.22      14.46

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.13       6.77 
 2.  6.16       6.80 
  
 3.   29   59   77        33   60   77  
 4.   58   82   90        48   69   78  
 5.   99  121  142        88  105  121  

 64b-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.51       7.19 
 2.  6.58       7.26 
  
 3.   34   53   80        35   57   79  
 4.   47   64   74        48   64   74  
 5.   93  109  123        96  114  131  

 64b-8t4c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.50       7.18 
 2.  6.54       7.22 
  
 3.   19   42   66        33   60   73  
 4.   49   70   81        50   67   78  
 5.   87  101  111        95  112  129  

 1518b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.41      17.91 
 2.  1.41      17.91 
  
 3.   24   50   78        24   25   50  
 4.   58  119  159        64  116  150  
 5.  140  178  204       163  244  272  

 1518b-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.72      21.87 
 2.  1.72      21.87 
  
 3.   24   48   83        24   60   70  
 4.   66  158  185        58  141  178  
 5.  162  199  217       152  195  213  

 imix-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.56      12.19 
 2.  3.58      12.25 

 imix-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.88      13.28 
 2.  3.88      13.28 

 imix-8t4c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.88      13.29 
 2.  3.90      13.36

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  5.22       5.76 
 2.  5.27       5.82 
  
 3.   20   48   64        20   49   68  
 4.   43   63   73        46   79   91  
 5.   99  116  134        95  114  134  

 1518b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  1.40      17.89 
 2.  1.41      17.98 
  
 3.   25   57   84        25   81  108  
 4.   51   99  112       132  236  269  
 5.  185  258  305       186  219  252  

 imix-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.18      10.88 
 2.  3.20      10.94

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.95       5.11 
 2.  3.99       5.17 
  
 3.   26   50   57        25   84  129  
 4.   70  126  148        81  126  148  
 5.  137  169  199       137  169  199  

 64b-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.34       6.92 
 2.  5.40       6.99 
  
 3.   27   57   72        25   86  150  
 4.   88  129  153        75  108  128  
 5.  203  239  271       180  208  236  

 imix-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.14       0.50 
 2.  0.19       0.70 

 imix-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.64      16.77 
 2.  4.69      16.94

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.72       6.31 
 2.  5.80       6.41 
  
 3.   39   55   69        25   53   67  
 4.   60   82   99        63   85   96  
 5.  160  181  201       155  175  196  

 64b-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.72       6.31 
 2.  5.78       6.38 
  
 3.   23   68   88        44   61   72  
 4.   70   96  108        63   85   99  
 5.  171  196  218       161  184  201  

 1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.77      22.54 
 2.  1.82      23.23 
  
 3.   27   45   70        27   58   70  
 4.   69   92  106        65  128  152  
 5.  165  208  240       154  221  252  

 imix-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.33      14.81 
 2.  4.35      14.89 

 imix-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.74      16.24 
 2.  4.79      16.40

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.74       6.34 
 2.  5.80       6.41 
  
 3.   22   61   90        39   85   92  
 4.   59   86  101        68   94  106  
 5.  155  177  198       148  169  188  

 64b-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.71       6.30 
 2.  5.77       6.37 
  
 3.   22   64   89        43   58   83  
 4.   66  103  113        62   80   90  
 5.  169  196  218       162  188  207  

 1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.49      18.93 
 2.  1.51      19.22 
  
 3.   27   44   63        27   45   60  
 4.   45  117  135        62  122  139  
 5.  160  231  267       158  216  256  

 imix-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.34      14.85 
 2.  4.38      15.00 

 imix-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.70      16.07 
 2.  4.74      16.24

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.91       5.07 
 2.  3.95       5.12 
  
 3.   28   49   77        26   54   65  
 4.   70  102  130        58   91  124  
 5.  217  251  282       128  249  288  

 imix-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.36      12.13 
 2.  3.37      12.19

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.13       4.56 
 2.  4.15       4.58 
  
 3.   22   47   62        22   31   69  
 4.   66  105  121        54  101  124  
 5.  219  253  284       107  204  250  

 64b-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.04       4.46 
 2.  4.08       4.51 
  
 3.   22   46   69        22   54   78  
 4.   64   92  106        48   80   93  
 5.  235  273  308       104  217  257  

 imix-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.28      11.22 
 2.  3.31      11.32 

 imix-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.39      11.60 
 2.  3.41      11.66

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.10       4.53 
 2.  4.14       4.57 
  
 3.   22   57   67        22   52   91  
 4.   58   97  112        46   81   96  
 5.  206  241  269       108  201  248  

 64b-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.03       4.45 
 2.  4.05       4.47 
  
 3.   25   50   79        24   49   62  
 4.   67   91  111        51   89  113  
 5.  215  252  285       106  205  257  

 imix-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.27      11.20 
 2.  3.32      11.36 

 imix-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.38      11.56 
 2.  3.41      11.68

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.58       3.34 
 2.  2.60       3.37 
  
 3.   23   54   83        23   50   77  
 4.   68   94  120        57  110  133  
 5.  195  268  306       184  258  313  

 1518b-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.69       8.87 
 2.  0.69       8.87 
  
 3.   47   71   95        52   72   84  
 4.  132  198  232       130  211  245  
 5.  368  517  595       361  496  590  

 imix-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.57       5.67 
 2.  1.58       5.70

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.01       5.53 
 2.  5.06       5.59 
  
 3.   20   53   82        19   29   40  
 4.   53   72   83        49   66   79  
 5.  116  145  172       113  166  183  

 64b-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  9.87      10.89 
 2. 10.02      11.06 
  
 3.   40   56   78        30   55   82  
 4.   46   57   67        47   60   72  
 5.  110  144  166       103  143  167  

 64b-8t4c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 18.64      20.58 
 2. 18.92      20.89 
  
 3.   30   50   73        33   54   77  
 4.   47   57   65        46   56   64  
 5.  109  164  206       109  162  205  

 1518b-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.55      19.70 
 2.  1.56      19.89 
  
 3.   24   44   79        24   52   69  
 4.   36  137  153        40   88  118  
 5.  153  202  247       145  201  240  

 1518b-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.93      37.35 
 2.  2.95      37.54 
  
 3.   25   56   80        24   45   66  
 4.   59   79   99        59   82  100  
 5.  140  175  197       135  176  206  

 imix-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.19      10.93 
 2.  3.21      10.99 

 imix-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.21      21.27 
 2.  6.25      21.38 

 imix-8t4c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 11.07      37.89 
 2. 11.07      37.89

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.02       5.54 
 2.  5.07       5.60 
  
 3.   23   47   72        25   47   75  
 4.   49   64   82        53   71   84  
 5.  123  155  186       112  155  184  

 64b-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  9.79      10.81 
 2.  9.94      10.97 
  
 3.   24   44   72        22   39   67  
 4.   45   58   69        43   56   67  
 5.  109  143  164       101  137  159  

 64b-8t4c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 18.53      20.46 
 2. 18.72      20.66 
  
 3.   32   53   71        29   52   78  
 4.   48   59   68        45   54   62  
 5.  107  156  195       106  155  196  

 1518b-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.28      16.31 
 2.  1.29      16.47 
  
 3.   25   53   72        25   54   81  
 4.   52  132  163        66  108  166  
 5.  178  237  264       132  202  223  

 1518b-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.46      31.27 
 2.  2.47      31.43 
  
 3.   25   34   60        25   49   72  
 4.   65  102  129        53   71   88  
 5.  134  174  205       135  170  203  

 imix-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.97      10.18 
 2.  2.99      10.23 

 imix-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.67      19.42 
 2.  5.73      19.61 

 imix-8t4c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 10.28      35.18 
 2. 10.28      35.18

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.06       2.67 
 2.  2.08       2.69 
  
 3.   23   41   65        23   48   79  
 4.   53   76   92        45   80  113  
 5.  189  245  283       118  236  284  

 1518b-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.58       7.44 
 2.  0.58       7.44 
  
 3.   45   71  107        46   82  114  
 4.  114  285  326        80  303  426  
 5.  330  460  528       239  446  550  

 imix-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.25       4.53 
 2.  1.27       4.59

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.14       4.57 
 2.  4.16       4.59 
  
 3.   19   44   67        19   29   54  
 4.   47   74   88        43   66   80  
 5.  115  142  165        77  144  182  

 64b-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.87       5.37 
 2.  4.92       5.43 
  
 3.   20   39   67        19   37   65  
 4.   39   59   73        33   64   84  
 5.   99  123  144        50  108  145  

 64b-8t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.99       8.82 
 2.  8.07       8.91 
  
 3.   27   51   80        20   50   74  
 4.   45   64   78        44   67   85  
 5.   81  123  146        50  124  157  

 1518b-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.27      16.22 
 2.  1.27      16.22 
  
 3.   24   42   62        24   47   76  
 4.   50   95  149        44  111  125  
 5.  153  213  261       120  216  263  

 1518b-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.50      19.13 
 2.  1.50      19.13 
  
 3.   24   44   61        24   28   42  
 4.   49   68   81        30   73  109  
 5.  114  156  184        66  126  175  

 imix-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.61       8.93 
 2.  2.62       8.97 

 imix-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.11      10.64 
 2.  3.12      10.69 

 imix-8t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.94      16.90 
 2.  4.96      16.98

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.11       4.54 
 2.  4.13       4.56 
  
 3.   24   52   84        19   42   79  
 4.   47   68   83        41   69   89  
 5.  117  145  169        85  140  174  

 64b-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.91       5.42 
 2.  4.93       5.44 
  
 3.   19   49   72        19   45   76  
 4.   38   61   82        31   63   85  
 5.  100  122  138        50  108  152  

 64b-8t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.05       8.88 
 2.  8.13       8.97 
  
 3.   20   49   80        19   44   77  
 4.   44   63   77        43   64   81  
 5.   81  124  146        48  124  153  

 1518b-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.04      13.28 
 2.  1.04      13.28 
  
 3.   25   42   84        25   41   87  
 4.   49  150  190        38   94  156  
 5.  187  272  306       134  244  305  

 1518b-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.27      16.23 
 2.  1.28      16.31 
  
 3.   25   29   82        24   26   47  
 4.   48   98  135        28   87  116  
 5.  153  192  228        72  150  221  

 imix-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.41       8.24 
 2.  2.41       8.24 

 imix-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.90       9.93 
 2.  2.90       9.93 

 imix-8t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.58      15.69 
 2.  4.61      15.77

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.88       5.03 
 2.  3.94       5.11 
  
 3.   26   49   62        26   60   87  
 4.   62   92  119        57   86  102  
 5.  219  252  284       136  247  285  

 imix-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.33      12.03 
 2.  3.36      12.15

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.10       4.52 
 2.  4.14       4.57 
  
 3.   22   45   80        23   53   63  
 4.   65   99  116        53   88  108  
 5.  224  259  289       111  204  245  

 64b-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.02       4.44 
 2.  4.06       4.48 
  
 3.   22   42   52        22   56   73  
 4.   58   80   96        47   78   97  
 5.  220  256  287       107  206  260  

 imix-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.26      11.14 
 2.  3.29      11.25 

 imix-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.37      11.53 
 2.  3.40      11.64

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.09       4.52 
 2.  4.13       4.56 
  
 3.   22   62   73        22   46   64  
 4.   58   93  108        47   78   89  
 5.  214  248  279       109  209  254  

 64b-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.99       4.40 
 2.  4.05       4.47 
  
 3.   25   45   64        23   52   67  
 4.   61   86  100        48   78   96  
 5.  220  255  283       108  212  257  

 imix-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.27      11.19 
 2.  3.30      11.30 

 imix-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.36      11.50 
 2.  3.39      11.62

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.84       4.98 
 2.  3.88       5.03 
  
 3.   28   45   61        28   61   85  
 4.   75  100  120        66   92  112  
 5.  228  262  299       113  251  288  

 imix-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.30      11.93 
 2.  3.33      12.05

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.06       4.48 
 2.  4.10       4.53 
  
 3.   28   57   73        23   49   64  
 4.   68   99  115        51   93  119  
 5.  231  268  301       110  214  254  

 64b-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.96       4.38 
 2.  4.00       4.42 
  
 3.   30   42   52        22   54   73  
 4.   64   87  104        46   77   91  
 5.  220  252  281       105  209  251  

 imix-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.21      11.00 
 2.  3.25      11.11 

 imix-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.29      11.24 
 2.  3.34      11.41

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library. Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) field is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.04       4.47 
 2.  4.09       4.51 
  
 3.   27   55   73        31   54   72  
 4.   65   82   98        58   78   96  
 5.  217  248  279       109  193  234  

 64b-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.93       4.34 
 2.  3.99       4.41 
  
 3.   22   41   57        22   31   49  
 4.   67   93  106        49   82   96  
 5.  219  253  281       104  209  254  

 imix-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.23      11.06 
 2.  3.26      11.17 

 imix-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.29      11.28 
 2.  3.34      11.45