3n-icx-xxv710

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.37 4.37 2. 3.61 4.68 3. 74 145 234 42 153 248 4. 67 111 134 97 167 211 5. 105 140 183 108 146 176
1518b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.09 14.04 2. 1.12 14.47 3. 84 188 300 50 192 306 4. 167 285 331 197 306 377 5. 268 367 597 267 358 577

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.61 5.09 2. 5.42 5.98 3. 75 164 246 53 145 228 4. 61 95 120 63 101 130 5. 72 89 184 84 108 150
64b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.71 9.62 2. 9.49 10.47 3. 43 131 178 48 132 172 4. 40 56 68 40 56 67 5. 73 87 102 71 85 100
64b-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 16.41 18.12 2. 17.09 18.86 3. 18 23 28 19 26 33 4. 35 43 48 34 41 47 5. 77 90 101 76 89 100
1518b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.32 29.48 2. 2.45 31.16 3. 57 151 257 27 118 209 4. 52 122 137 93 195 215 5. 76 113 144 73 125 159
1518b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 63 156 235 87 167 243 4. 53 76 91 56 104 135 5. 75 92 105 74 90 100
imix-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.21 10.98 2. 3.59 12.27
imix-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.17 21.12 2. 6.17 21.12
imix-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 11.13 38.09 2. 11.13 38.09

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.87 4.28 2. 4.81 5.31 3. 67 147 228 51 145 220 4. 62 123 143 106 136 152 5. 75 95 548 89 117 580
64b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.39 8.16 2. 8.01 8.84 3. 67 120 131 58 157 243 4. 42 57 75 50 78 100 5. 71 85 98 75 92 107
64b-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 13.83 15.27 2. 14.76 16.30 3. 20 29 32 19 24 28 4. 36 44 51 36 45 51 5. 93 114 136 93 114 135
1518b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.15 27.41 2. 2.26 28.82 3. 58 141 233 28 133 220 4. 82 162 178 105 205 226 5. 100 139 174 104 140 178
1518b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 65 147 216 91 156 222 4. 53 80 94 60 93 138 5. 94 112 125 93 111 124
imix-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.96 10.13 2. 3.39 11.60
imix-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.54 18.97 2. 5.60 19.16
imix-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.05 34.40 2. 10.05 34.40

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.66 4.74 2. 3.69 4.79 3. 71 132 202 48 161 255 4. 71 101 127 100 158 214 5. 128 162 187 134 175 208
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.15 14.91 2. 1.15 14.91 3. 86 180 261 104 205 301 4. 131 216 247 176 249 369 5. 248 320 381 246 327 378

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.05 6.68 2. 6.12 6.76 3. 79 161 241 63 152 236 4. 41 67 86 65 101 124 5. 81 99 114 82 104 128
64b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 12.05 13.30 2. 12.17 13.44 3. 42 82 91 40 126 138 4. 35 45 54 36 45 54 5. 80 92 100 79 90 99
64b-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 26.13 28.84 2. 26.66 29.43 3. 22 28 34 21 27 31 4. 37 42 47 37 42 47 5. 81 94 104 81 93 103
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.38 43.09 2. 3.40 43.31 3. 63 153 228 92 162 244 4. 57 86 141 62 87 100 5. 104 120 134 110 131 143
1518b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 56 137 210 71 149 200 4. 47 69 85 48 73 102 5. 54 70 79 57 74 85
imix-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.17 17.71 2. 5.23 17.89
imix-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 10.49 35.90 2. 10.75 36.81
imix-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.77 6.37 2. 5.81 6.41 3. 38 137 218 60 151 229 4. 51 78 97 65 111 146 5. 86 104 121 85 105 131
64b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 11.42 12.60 2. 11.53 12.73 3. 37 137 151 34 138 155 4. 35 47 60 39 54 66 5. 83 96 107 83 96 106
64b-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 24.53 27.08 2. 25.16 27.77 3. 21 28 34 21 27 33 4. 38 43 48 38 43 48 5. 138 277 402 138 276 387
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.18 40.53 2. 3.20 40.73 3. 63 151 242 38 150 246 4. 54 92 107 75 141 158 5. 105 130 141 110 137 153
1518b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 66 156 230 50 141 199 4. 60 113 139 50 83 102 5. 57 69 78 56 73 82
imix-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.92 16.82 2. 4.97 16.99
imix-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.09 34.55 2. 10.20 34.89
imix-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 1.42 1.57 2. 1.45 1.60 3. 24 121 214 25 164 271 4. 111 199 291 117 227 322 5. 346 496 587 381 526 606
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 1.19 15.11 2. 1.19 15.18 3. 61 163 245 74 158 232 4. 105 189 255 100 202 246 5. 205 416 520 223 359 417
imix-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 1.36 4.65 2. 1.37 4.67

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.75 6.16 2. 4.82 6.24 3. 95 173 237 100 182 238 4. 46 88 97 103 121 147 5. 114 135 155 116 140 165
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.29 16.70 2. 1.30 16.87 3. 122 194 265 127 194 267 4. 149 249 296 133 201 235 5. 327 401 476 256 302 331

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.36 10.33 2. 9.41 10.39 3. 59 110 147 86 142 209 4. 43 53 62 34 45 58 5. 62 73 83 65 76 87
64b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.16 10.11 2. 9.25 10.21 3. 48 113 186 59 118 177 4. 26 46 57 61 69 76 5. 58 68 75 58 70 79
64b-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.22 10.18 2. 9.26 10.23 3. 18 19 23 17 29 32 4. 34 43 48 21 35 47 5. 58 68 76 55 65 72
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 74 135 189 77 156 207 4. 42 67 101 47 71 101 5. 55 66 81 64 79 90
1518b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 66 138 186 87 143 200 4. 40 64 79 46 73 98 5. 48 64 69 56 65 75
imix-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.68 26.27 2. 7.71 26.40
imix-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.67 26.25 2. 7.71 26.38
imix-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.66 26.23 2. 7.70 26.36

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.25 10.21 2. 9.29 10.26 3. 43 130 195 79 149 213 4. 39 48 58 36 48 57 5. 63 74 84 63 74 85
64b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.07 10.02 2. 9.12 10.07 3. 51 111 178 72 138 199 4. 40 52 60 33 43 53 5. 54 63 70 61 72 83
64b-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.10 10.05 2. 9.15 10.10 3. 18 37 41 18 27 35 4. 19 26 37 41 49 54 5. 55 64 72 56 66 73
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 58 124 183 76 135 196 4. 48 75 85 43 57 71 5. 67 89 95 63 75 83
1518b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 73 143 199 71 135 196 4. 45 76 96 46 93 107 5. 59 80 89 61 79 92
imix-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.40 25.34 2. 7.44 25.47
imix-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.42 25.41 2. 7.46 25.54
imix-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.42 25.40 2. 7.46 25.52

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 8.11 8.95 2. 8.19 9.04 3. 90 142 213 82 165 223 4. 46 59 70 53 74 89 5. 73 85 96 72 85 96
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 66 146 216 91 158 224 4. 56 88 113 67 95 109 5. 92 107 125 90 107 113
imix-2t1c-avf-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 6.84 23.42 2. 6.88 23.54

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.70 7.39 2. 5.76 7.46 3. 71 170 263 118 215 289 4. 54 78 92 73 104 120 5. 81 101 114 80 99 112
64b-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 8.30 10.75 2. 8.34 10.80 3. 82 175 228 101 197 278 4. 60 76 89 70 89 102 5. 104 122 134 108 127 138
1518b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.63 8.09 2. 0.63 8.17 3. 144 215 289 147 244 308 4. 173 262 302 182 334 386 5. 199 361 405 244 393 449

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 7.60 8.39 2. 7.87 8.69 3. 48 139 156 121 201 272 4. 52 68 73 76 102 119 5. 74 87 94 68 79 90
64b-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 7.40 8.17 2. 7.62 8.42 3. 58 109 125 94 154 211 4. 47 61 76 62 80 103 5. 65 73 80 67 79 86
1518b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 72 160 229 91 188 280 4. 54 79 88 51 85 107 5. 69 82 92 75 88 96
imix-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 7.59 25.97 2. 8.47 29.00
imix-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.92 23.67 2. 7.16 24.52

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 7.50 8.28 2. 7.77 8.58 3. 83 176 220 99 193 279 4. 51 63 73 69 94 113 5. 71 86 95 68 80 94
64b-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 7.48 8.26 2. 7.75 8.55 3. 81 168 238 105 179 257 4. 53 75 89 64 80 95 5. 63 76 83 67 75 88
1518b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 80 174 249 97 188 279 4. 62 100 126 59 93 146 5. 73 97 102 70 91 102
imix-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 7.43 25.43 2. 8.42 28.83
imix-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.86 23.47 2. 7.21 24.68

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.58 7.23 2. 5.61 7.27 3. 79 204 306 117 214 320 4. 71 103 144 81 127 151 5. 101 127 150 99 133 157
64b-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 6.60 8.55 2. 6.63 8.59 3. 79 180 247 114 217 298 4. 75 104 124 83 126 154 5. 122 146 164 103 133 158
1518b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.62 8.06 2. 0.63 8.18 3. 97 202 312 96 206 312 4. 131 231 331 133 260 346 5. 124 211 301 180 321 377

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.42 7.08 2. 6.65 7.34 3. 94 198 275 102 202 298 4. 64 95 127 76 113 133 5. 114 136 152 82 119 140
64b-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.32 6.98 2. 6.35 7.02 3. 88 178 251 99 203 297 4. 65 98 124 68 107 131 5. 106 128 142 86 117 137
1518b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 82 183 298 97 221 306 4. 61 109 150 69 121 157 5. 96 118 134 84 100 127
imix-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.77 23.18 2. 6.84 23.42
imix-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.11 20.92 2. 6.24 21.35

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.51 7.18 2. 6.67 7.37 3. 78 172 244 84 185 281 4. 62 90 119 76 111 133 5. 118 137 155 84 123 145
64b-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.40 7.07 2. 6.40 7.07 3. 89 194 284 91 184 270 4. 59 90 123 57 88 114 5. 103 126 145 77 115 131
1518b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 74 181 271 100 190 277 4. 72 104 137 64 96 134 5. 103 119 132 75 101 111
imix-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.74 23.08 2. 6.86 23.49
imix-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.12 20.93 2. 6.27 21.46

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.02 5.20 2. 4.04 5.23 3. 56 148 245 65 169 258 4. 72 118 156 99 156 203 5. 129 176 211 132 178 201
1518b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.17 15.19 2. 1.19 15.34 3. 88 211 305 50 173 277 4. 148 261 320 167 265 377 5. 294 423 518 293 430 552

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.98 8.81 2. 8.10 8.94 3. 85 161 222 81 179 252 4. 43 57 69 49 76 94 5. 88 111 121 77 105 121
64b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 15.53 17.14 2. 16.08 17.75 3. 52 91 109 48 81 102 4. 36 44 51 37 47 58 5. 88 109 122 80 107 120
64b-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 31.20 34.45 2. 31.84 35.15 3. 21 29 34 19 28 33 4. 39 45 50 39 45 50 5. 84 124 156 84 125 158
1518b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 63 145 223 55 140 230 4. 44 64 74 62 95 122 5. 87 102 112 86 102 114
1518b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 79 150 221 67 148 210 4. 47 84 103 48 84 113 5. 52 67 78 55 69 81
imix-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.58 22.51 2. 6.64 22.74
imix-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 12.14 41.54 2. 12.26 41.96
imix-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.89 8.71 2. 8.01 8.84 3. 56 116 126 94 184 245 4. 42 64 82 52 81 115 5. 86 111 126 81 109 127
64b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 15.43 17.03 2. 15.82 17.46 3. 40 84 100 68 140 155 4. 37 46 55 37 47 56 5. 88 111 123 80 107 122
64b-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 30.69 33.88 2. 31.31 34.57 3. 22 29 34 22 29 33 4. 39 46 51 39 46 52 5. 83 124 158 83 124 156
1518b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 59 118 214 72 158 226 4. 52 68 79 51 76 90 5. 113 136 149 104 126 139
1518b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 63 143 221 89 152 220 4. 45 69 92 48 72 85 5. 52 73 84 55 68 77
imix-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.39 21.87 2. 6.45 22.09
imix-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 11.87 40.64 2. 11.87 40.64
imix-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.22 4.17 2. 3.26 4.22 3. 66 144 208 35 143 235 4. 84 139 187 73 135 177 5. 122 156 199 118 164 191
1518b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.02 13.21 2. 1.03 13.27 3. 78 173 239 60 164 243 4. 122 209 291 137 260 330 5. 255 332 386 259 342 405

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.40 7.06 2. 6.46 7.13 3. 63 147 227 76 160 246 4. 48 78 103 56 91 113 5. 82 106 119 67 99 117
64b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.40 8.17 2. 7.48 8.26 3. 67 143 207 58 160 223 4. 47 82 107 56 87 104 5. 72 91 103 51 82 103
64b-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 12.75 14.07 2. 12.94 14.28 3. 18 24 33 18 26 34 4. 30 41 52 26 36 47 5. 52 94 108 31 83 101
1518b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.32 42.29 2. 3.35 42.71 3. 60 140 212 45 132 212 4. 59 113 159 68 133 169 5. 117 137 150 85 140 164
1518b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 47 134 214 29 148 231 4. 60 122 153 71 129 152 5. 103 126 151 76 109 130
imix-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.19 17.76 2. 5.24 17.94
imix-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.09 20.83 2. 6.18 21.14
imix-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 10.36 35.47 2. 10.52 36.00

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.28 6.93 2. 6.34 7.00 3. 67 154 238 68 157 222 4. 51 85 117 57 96 117 5. 82 104 120 69 95 115
64b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.25 8.01 2. 7.33 8.09 3. 61 143 201 69 172 217 4. 48 85 106 54 87 102 5. 72 94 110 47 78 101
1518b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.13 39.81 2. 3.16 40.19 3. 72 143 210 39 132 211 4. 62 103 124 67 129 181 5. 121 144 160 87 147 166
1518b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.70 47.07 2. 3.77 48.03 3. 56 133 199 24 150 232 4. 60 125 157 79 142 172 5. 142 170 194 79 146 173
imix-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.05 17.27 2. 5.10 17.44
imix-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.87 20.08 2. 5.93 20.28
imix-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.98 34.17 2. 10.19 34.86

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.45 7.06 2. 5.56 7.21 3. 87 189 301 105 204 310 4. 95 139 168 93 143 173 5. 100 127 157 105 139 161
64b-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 6.47 8.39 2. 6.53 8.46 3. 87 182 218 94 190 288 4. 70 107 134 73 106 122 5. 121 140 158 108 135 159
1518b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.63 8.15 2. 0.64 8.23 3. 92 195 284 86 191 297 4. 111 210 305 115 221 289 5. 145 231 306 146 247 331

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.37 7.03 2. 6.63 7.32 3. 84 179 250 111 214 310 4. 63 94 128 81 119 135 5. 120 143 161 83 124 145
64b-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.29 6.94 2. 6.32 6.98 3. 89 170 247 94 177 264 4. 62 96 130 63 84 111 5. 109 129 144 75 98 116
1518b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 96 177 261 104 202 278 4. 64 114 150 71 117 133 5. 98 117 139 84 109 123
imix-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.70 22.93 2. 6.80 23.28
imix-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.07 20.76 2. 6.25 21.39

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.43 7.10 2. 6.59 7.28 3. 87 188 266 109 211 317 4. 72 109 131 74 109 135 5. 122 145 163 85 126 145
64b-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.39 7.05 2. 6.39 7.05 3. 82 169 241 87 188 285 4. 60 87 115 65 102 125 5. 110 130 150 79 104 126
1518b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 71 202 302 71 191 279 4. 69 102 136 69 112 155 5. 110 127 145 81 100 116
imix-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.70 22.94 2. 6.80 23.28
imix-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.09 20.84 2. 6.24 21.37

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.27 6.83 2. 5.32 6.90 3. 68 180 272 85 212 307 4. 66 103 134 91 137 168 5. 86 104 121 85 109 135
64b-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 6.45 8.36 2. 6.51 8.44 3. 68 159 262 97 183 221 4. 62 86 113 63 91 117 5. 131 149 164 114 135 153
1518b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.62 8.03 2. 0.62 8.03 3. 116 218 307 103 201 299 4. 136 250 330 125 218 308 5. 179 264 319 183 300 372

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.33 6.99 2. 6.49 7.17 3. 70 188 283 106 212 306 4. 58 77 87 70 108 130 5. 120 140 158 79 124 144
64b-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.21 6.86 2. 6.24 6.89 3. 86 128 216 65 152 240 4. 55 69 81 59 88 111 5. 112 125 137 76 110 129
1518b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 56 164 263 98 148 257 4. 59 86 108 53 79 107 5. 108 126 138 88 114 125
imix-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.56 22.45 2. 6.75 23.10
imix-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.01 20.56 2. 6.22 21.29

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.32 6.98 2. 6.45 7.12 3. 69 165 224 111 215 312 4. 60 80 104 75 111 129 5. 118 136 154 80 119 139
64b-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.26 6.91 2. 6.29 6.94 3. 76 162 254 83 177 274 4. 56 71 85 53 67 81 5. 118 136 155 77 111 131
1518b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 76 179 293 86 175 291 4. 64 89 117 55 74 88 5. 106 118 125 79 102 111
imix-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.57 22.48 2. 6.73 23.05
imix-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.02 20.60 2. 6.17 21.12

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec10000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 2.96 3.83 2. 3.43 4.45 3. 25 56 87 31 56 83 4. 62 97 122 67 91 114 5. 125 156 203 119 145 169
1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.09 14.04 2. 1.09 14.04 3. 44 85 97 38 97 136 4. 155 220 266 117 178 210 5. 302 357 426 312 380 438

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.95 4.36 2. 4.78 5.27 3. 18 32 43 18 43 76 4. 51 68 80 24 73 90 5. 75 99 123 84 108 135
64b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.19 7.93 2. 8.31 9.17 3. 29 47 72 18 47 68 4. 42 56 67 47 63 76 5. 85 103 121 88 107 126
64b-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 12.89 14.23 2. 14.86 16.41 3. 34 55 69 27 48 71 4. 36 45 56 38 49 58 5. 132 174 225 132 175 226
1518b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.04 26.01 2. 2.05 26.14 3. 22 42 80 22 50 80 4. 49 89 107 46 96 118 5. 89 115 132 89 110 132
1518b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.56 45.34 2. 3.56 45.34 3. 24 56 81 23 45 70 4. 46 67 85 54 77 99 5. 112 131 146 108 130 146
imix-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.94 10.07 2. 3.03 10.38
imix-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.36 18.35 2. 5.36 18.35
imix-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.53 32.63 2. 9.58 32.79

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.36 3.70 2. 3.86 4.26 3. 18 40 68 18 35 49 4. 48 70 85 43 80 102 5. 100 134 179 97 132 181
64b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.39 7.05 2. 7.44 8.22 3. 18 36 53 18 49 79 4. 47 68 90 49 70 91 5. 149 190 233 148 188 232
64b-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 11.24 12.41 2. 12.43 13.72 3. 38 64 72 25 53 77 4. 36 46 57 38 47 56 5. 126 150 172 127 152 174
1518b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.94 24.65 2. 1.94 24.65 3. 22 42 72 22 51 74 4. 55 77 94 50 69 88 5. 108 145 167 115 155 178
1518b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.37 42.95 2. 3.37 42.95 3. 23 50 79 29 59 84 4. 54 75 89 53 72 88 5. 110 139 154 115 134 149
imix-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.67 9.15 2. 2.71 9.29
imix-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.01 17.16 2. 5.01 17.16
imix-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.93 30.58 2. 8.93 30.58

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 3.48 4.51 2. 3.55 4.60 3. 20 64 90 20 51 76 4. 76 123 145 78 115 128 5. 127 156 191 125 163 203
1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.17 15.09 2. 1.17 15.09 3. 35 84 117 35 82 97 4. 115 178 256 125 210 253 5. 328 397 465 323 431 527

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.69 6.28 2. 5.77 6.37 3. 18 49 74 18 45 69 4. 43 60 76 46 67 80 5. 77 98 116 77 99 123
64b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 11.22 12.38 2. 11.48 12.68 3. 25 42 54 23 55 79 4. 36 47 56 41 55 65 5. 75 88 98 77 90 100
64b-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 22.12 24.42 2. 23.44 25.88 3. 27 41 53 41 55 71 4. 33 40 46 35 41 48 5. 73 85 97 73 86 97
1518b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.19 40.61 2. 3.19 40.61 3. 22 53 87 28 55 78 4. 54 87 100 48 74 88 5. 105 121 135 105 121 134
1518b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 22 65 77 36 60 82 4. 43 59 77 42 58 74 5. 61 72 81 59 71 84
imix-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.73 16.17 2. 4.73 16.17
imix-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.56 32.73 2. 9.56 32.73
imix-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.35 5.91 2. 5.43 5.99 3. 18 42 71 18 41 70 4. 46 62 75 48 70 81 5. 80 99 114 83 103 122
64b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.56 11.66 2. 10.81 11.93 3. 22 51 71 27 54 75 4. 36 48 59 40 53 67 5. 76 90 101 76 89 100
64b-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 20.07 22.16 2. 20.68 22.84 3. 29 50 74 29 51 68 4. 33 41 48 32 40 47 5. 67 79 91 65 78 88
1518b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.02 38.46 2. 3.02 38.46 3. 22 44 58 32 61 85 4. 47 84 100 51 71 84 5. 107 123 136 105 119 132
1518b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 22 60 75 23 49 75 4. 47 65 83 46 72 92 5. 63 81 91 62 77 87
imix-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.46 15.26 2. 4.48 15.34
imix-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.08 31.07 2. 9.12 31.22
imix-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 1.34 1.48 2. 1.39 1.54 3. 20 47 131 20 34 50 4. 79 205 261 78 173 265 5. 222 416 615 242 382 500
1518b-2t1c-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 1.19 15.12 2. 1.19 15.19 3. 24 39 53 24 37 74 4. 60 144 211 56 180 309 5. 222 426 506 229 458 538
imix-2t1c-ethip4ipsec1000tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 1.32 4.52 2. 1.33 4.56

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 4.02 5.21 2. 4.17 5.40 3. 21 65 69 21 52 77 4. 52 82 95 52 89 95 5. 99 117 132 97 121 140
1518b-2t1c-ethip4ipsec1tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.27 16.36 2. 1.28 16.53 3. 35 103 121 35 105 144 4. 146 258 313 148 273 306 5. 273 397 453 269 353 428

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.83 8.65 2. 7.95 8.78 3. 19 62 72 17 45 68 4. 37 52 59 40 53 59 5. 55 66 76 52 62 70
64b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.92 8.75 2. 8.04 8.88 3. 19 62 77 17 43 60 4. 34 48 53 34 49 56 5. 54 65 76 51 63 70
64b-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.92 8.75 2. 8.03 8.86 3. 36 67 80 31 58 73 4. 32 45 56 32 45 57 5. 57 67 76 50 65 76
1518b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 23 43 67 21 43 75 4. 38 61 75 48 70 80 5. 68 81 92 84 100 106
1518b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 21 41 57 22 49 79 4. 41 59 82 43 61 80 5. 54 67 76 58 74 80
imix-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.75 23.09 2. 6.78 23.21
imix-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.86 23.47 2. 6.93 23.70
imix-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.84 23.40 2. 6.91 23.64

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.77 8.57 2. 7.87 8.68 3. 17 25 67 17 22 51 4. 34 50 55 37 49 57 5. 57 66 75 44 53 61
64b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.88 8.70 2. 8.00 8.84 3. 20 62 77 18 47 80 4. 33 44 52 42 59 70 5. 48 59 68 52 64 73
64b-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.87 8.69 2. 7.98 8.81 3. 19 51 75 17 42 56 4. 39 54 69 43 61 73 5. 51 61 75 54 69 77
1518b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 21 50 80 21 49 74 4. 41 54 73 55 92 102 5. 83 95 105 89 112 123
1518b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 21 49 72 21 41 71 4. 41 58 71 43 68 84 5. 63 76 85 63 88 95
imix-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.53 22.34 2. 6.59 22.57
imix-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.72 22.99 2. 6.75 23.11
imix-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.69 22.89 2. 6.72 23.01

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 6.88 7.59 2. 7.05 7.79 3. 18 47 70 18 55 69 4. 35 51 60 44 65 76 5. 61 73 84 58 71 82
1518b-2t1c-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 22 48 70 22 51 65 4. 44 68 84 47 82 109 5. 94 105 115 96 106 113
imix-2t1c-ethip4ipsec1tnlsw- ip4base-policy-aes256gcm-ndrpdr	1. 6.10 20.89 2. 6.13 21.00

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.59 7.24 2. 5.73 7.42 3. 22 56 85 22 64 82 4. 50 67 77 61 84 96 5. 87 107 122 90 110 124
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 7.02 9.10 2. 7.27 9.43 3. 22 58 72 23 56 75 4. 57 75 85 58 69 79 5. 105 123 138 106 124 141
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.53 6.79 2. 0.54 7.00 3. 36 42 82 36 49 66 4. 45 97 111 45 126 153 5. 166 271 417 118 197 225

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 6.88 7.60 2. 6.99 7.72 3. 20 46 54 19 57 67 4. 49 59 69 50 61 72 5. 69 80 94 69 83 96
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 6.62 7.31 2. 7.00 7.73 3. 20 47 64 20 43 57 4. 57 68 74 50 61 72 5. 71 84 96 68 80 94
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 23 50 79 23 44 74 4. 46 57 69 58 92 106 5. 83 98 108 72 106 113
imix-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 6.53 22.36 2. 6.97 23.87
imix-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.81 19.89 2. 5.99 20.50

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 6.85 7.56 2. 7.05 7.79 3. 32 47 68 19 51 63 4. 45 59 76 42 62 73 5. 71 82 93 61 79 92
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 6.82 7.53 2. 6.92 7.64 3. 36 52 68 20 48 55 4. 38 55 67 54 71 79 5. 66 78 88 70 82 96
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 23 45 74 24 56 76 4. 48 61 72 52 76 87 5. 69 82 93 74 87 95
imix-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 6.63 22.69 2. 7.08 24.22
imix-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.89 20.16 2. 6.13 20.98

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.22 6.77 2. 5.38 6.97 3. 22 48 75 22 43 64 4. 66 87 99 52 84 102 5. 106 127 145 94 122 145
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.61 7.28 2. 5.73 7.42 3. 23 52 77 22 28 49 4. 54 72 85 50 71 89 5. 107 126 143 93 119 141
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.53 6.90 2. 0.54 7.00 3. 36 52 67 36 71 107 4. 44 125 154 46 177 290 5. 126 185 237 123 282 338

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.50 6.07 2. 5.61 6.19 3. 20 40 51 19 49 59 4. 51 70 84 46 70 90 5. 85 104 120 63 89 115
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.39 5.95 2. 5.45 6.01 3. 20 52 65 20 37 54 4. 53 70 81 41 61 77 5. 88 105 121 68 94 117
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 23 44 77 26 59 78 4. 63 87 99 65 86 104 5. 117 135 146 102 127 141
imix-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.75 19.69 2. 5.86 20.07
imix-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.26 18.00 2. 5.42 18.55

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.44 6.01 2. 5.55 6.13 3. 22 45 51 19 39 47 4. 52 70 90 43 65 82 5. 90 109 122 66 93 115
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.35 5.91 2. 5.43 6.00 3. 21 47 60 20 36 54 4. 51 71 83 47 66 80 5. 84 104 119 66 92 116
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 26 47 81 24 47 76 4. 59 78 95 58 86 104 5. 114 134 147 87 120 133
imix-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.75 19.69 2. 5.85 20.01
imix-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.26 18.01 2. 5.42 18.56

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 3.49 4.53 2. 3.55 4.59 3. 24 62 86 20 33 56 4. 55 83 101 53 79 97 5. 95 125 143 99 142 180
1518b-2t1c-ethip4ipsec40tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.14 14.71 2. 1.15 14.85 3. 35 83 102 35 84 118 4. 115 183 246 81 235 296 5. 309 412 486 326 439 545

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.63 7.32 2. 6.80 7.51 3. 18 48 77 19 52 77 4. 38 53 65 39 53 71 5. 61 76 87 62 80 95
64b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 13.32 14.71 2. 13.53 14.93 3. 28 53 73 33 56 75 4. 33 43 52 36 47 56 5. 61 76 85 60 74 84
64b-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 25.46 28.11 2. 26.64 29.41 3. 30 47 62 33 51 65 4. 34 41 48 35 41 47 5. 60 80 97 60 80 97
1518b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.81 48.51 2. 3.85 49.00 3. 21 51 80 21 40 70 4. 54 75 90 63 96 116 5. 135 165 185 134 174 194
1518b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 31 60 75 22 43 76 4. 42 58 87 45 62 78 5. 55 65 79 56 69 79
imix-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.73 19.61 2. 5.79 19.81
imix-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 10.84 37.11 2. 11.01 37.68
imix-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.56 7.24 2. 6.70 7.39 3. 18 49 78 17 48 79 4. 37 50 60 41 58 72 5. 62 78 92 61 80 100
64b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 13.08 14.44 2. 13.48 14.88 3. 34 58 77 33 56 74 4. 35 45 55 37 49 60 5. 64 78 88 61 76 86
64b-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 25.13 27.75 2. 26.29 29.03 3. 32 49 64 34 53 70 4. 35 42 48 35 42 48 5. 60 81 98 61 82 98
1518b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.61 45.93 2. 3.64 46.39 3. 22 36 75 24 56 78 4. 61 82 97 50 81 93 5. 139 174 191 131 173 195
1518b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 22 39 60 29 64 84 4. 41 59 84 44 60 76 5. 54 68 77 55 67 78
imix-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.58 19.11 2. 5.64 19.30
imix-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.77 36.85 2. 10.82 37.03
imix-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec4tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 2.76 3.57 2. 2.84 3.68 3. 20 44 72 20 37 56 4. 48 84 116 52 102 109 5. 94 127 143 81 127 142
1518b-2t1c-ethip4ipsec4tnlsw-ip4base- int-aes128cbc-hmac512sha-ndrpdr	1. 1.00 12.93 2. 1.01 13.00 3. 35 52 76 34 73 98 4. 100 163 200 75 184 276 5. 305 443 546 237 370 477

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.11 5.64 2. 5.32 5.87 3. 18 38 54 17 37 76 4. 42 56 73 41 62 77 5. 62 75 88 52 72 81
64b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.04 6.67 2. 6.20 6.84 3. 34 61 81 17 46 73 4. 37 54 66 36 51 65 5. 52 66 79 42 63 78
64b-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 10.35 11.43 2. 10.62 11.72 3. 28 57 77 18 46 77 4. 35 51 64 37 55 70 5. 46 66 80 36 66 80
1518b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.05 38.82 2. 3.07 39.13 3. 21 55 76 21 42 71 4. 50 64 81 46 67 81 5. 135 155 169 104 139 164
1518b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.64 46.37 2. 3.64 46.37 3. 24 53 78 22 47 74 4. 49 67 86 48 70 87 5. 129 149 166 68 126 152
imix-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.54 15.54 2. 4.58 15.68
imix-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.35 18.33 2. 5.41 18.51
imix-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.95 30.63 2. 9.13 31.25

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.08 5.61 2. 5.26 5.81 3. 18 36 59 17 35 61 4. 42 60 73 39 65 82 5. 62 76 95 59 78 89
64b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.85 6.46 2. 6.06 6.69 3. 25 52 76 17 41 75 4. 36 52 68 38 66 81 5. 51 66 79 39 63 83
64b-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.12 11.17 2. 10.43 11.52 3. 29 55 76 21 48 77 4. 35 50 61 38 55 68 5. 44 67 80 39 61 74
1518b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.86 36.44 2. 2.86 36.44 3. 22 41 65 21 46 75 4. 47 73 83 52 76 93 5. 121 150 167 85 140 160
1518b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.42 43.49 2. 3.45 43.93 3. 22 52 78 22 44 79 4. 48 67 85 47 84 115 5. 119 139 154 71 124 157
imix-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.42 15.13 2. 4.46 15.28
imix-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.20 17.78 2. 5.25 17.96
imix-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.72 29.84 2. 8.85 30.29

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.22 6.77 2. 5.33 6.91 3. 28 53 66 22 51 66 4. 57 72 86 48 69 86 5. 102 120 136 91 119 139
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.62 7.28 2. 5.67 7.35 3. 37 59 89 22 51 69 4. 57 74 92 50 73 92 5. 111 129 146 93 123 145
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.53 6.85 2. 0.53 6.85 3. 36 71 105 36 50 80 4. 46 133 180 45 235 362 5. 67 171 271 129 335 427

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.56 6.14 2. 5.59 6.17 3. 23 47 66 19 41 63 4. 47 64 77 45 66 81 5. 88 106 120 65 95 118
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.34 5.90 2. 5.45 6.02 3. 25 43 67 23 49 55 4. 52 70 84 46 67 84 5. 94 113 128 67 97 122
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 24 57 78 23 58 86 4. 59 79 92 57 78 91 5. 108 120 132 87 114 128
imix-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.71 19.55 2. 5.80 19.87
imix-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.24 17.93 2. 5.40 18.48

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.50 6.07 2. 5.61 6.19 3. 20 42 56 19 40 62 4. 51 69 83 46 71 86 5. 85 105 122 67 95 118
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.39 5.95 2. 5.53 6.11 3. 20 46 86 20 45 53 4. 52 73 88 48 65 76 5. 89 107 121 66 97 120
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 26 52 79 24 58 82 4. 62 82 98 55 80 92 5. 112 125 136 92 117 133
imix-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.74 19.64 2. 5.82 19.90
imix-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.24 17.94 2. 5.40 18.49

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.12 6.64 2. 5.23 6.77 3. 22 47 66 22 41 64 4. 62 84 101 54 85 106 5. 107 126 138 96 129 156
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.29 6.86 2. 5.37 6.96 3. 25 46 75 25 52 83 4. 58 81 91 53 78 99 5. 107 124 140 93 119 140
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.47 6.04 2. 0.47 6.04 3. 37 71 100 36 53 67 4. 44 81 111 47 162 195 5. 105 175 236 80 239 320

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.30 5.85 2. 5.41 5.97 3. 20 41 61 20 47 81 4. 49 64 78 49 69 86 5. 86 100 112 66 89 108
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.26 5.81 2. 5.42 5.98 3. 20 52 72 20 43 82 4. 56 70 83 46 68 82 5. 87 106 123 65 91 113
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 26 49 71 25 51 72 4. 57 73 86 58 87 102 5. 107 121 131 94 122 134
imix-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.59 19.12 2. 5.73 19.60
imix-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.17 17.71 2. 5.33 18.25

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

• [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.

• [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

• [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

• [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

• [Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.41 5.97 2. 5.55 6.13 3. 20 46 63 19 40 49 4. 50 71 81 42 63 76 5. 91 108 124 68 95 119
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.33 5.89 2. 5.39 5.95 3. 20 50 71 20 38 65 4. 46 63 74 50 67 83 5. 92 109 123 66 90 106
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 27 50 69 23 51 76 4. 59 75 86 55 75 86 5. 115 134 146 84 108 120
imix-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.56 19.02 2. 5.75 19.66
imix-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.14 17.59 2. 5.32 18.22