3n-skx-xxv710¶

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.44       3.16 
 2.  2.49       3.23 
  
 3.   80  180  284        61  192  309  
 4.  120  211  247       104  172  261  
 5.  143  168  236       157  196  275

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.68       8.80 
 2.  0.68       8.84 
  
 3.  114  230  321       101  230  339  
 4.  206  315  380       225  400  488  
 5.  345  460  556       346  455  543

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.52       5.50 
 2.  1.55       5.61

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.26 4.71 2. 4.42 4.88 3. 92 188 248 101 205 301 4. 48 76 97 65 91 115 5. 120 151 181 119 146 179
64b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.15 9.00 2. 8.36 9.23 3. 72 150 205 68 150 204 4. 45 58 72 47 62 76 5. 115 134 153 115 134 151
64b-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 13.32 14.70 2. 13.59 15.00 3. 22 31 41 20 30 38 4. 41 53 66 40 51 63 5. 76 137 185 74 135 183
1518b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.40 17.82 2. 1.44 18.36 3. 115 232 333 116 222 322 4. 97 193 269 98 167 232 5. 165 221 2471 163 210 2779
1518b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.59 33.05 2. 2.61 33.22 3. 53 177 287 71 186 291 4. 84 144 171 72 104 126 5. 143 165 1002 115 138 955
imix-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.75 9.42 2. 2.82 9.66
imix-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.43 18.60 2. 5.63 19.27
imix-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.69 29.75 2. 8.91 30.50

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.12 4.55 2. 4.23 4.67 3. 99 207 309 74 183 289 4. 61 100 122 77 132 177 5. 119 152 183 112 138 175
64b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.91 8.73 2. 8.15 9.00 3. 74 120 139 94 189 221 4. 47 63 74 55 83 104 5. 120 141 161 117 135 157
64b-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 12.69 14.01 2. 13.08 14.44 3. 23 34 42 20 29 38 4. 42 53 66 42 52 64 5. 78 173 267 77 171 262
1518b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.18 15.06 2. 1.21 15.37 3. 118 223 318 67 203 307 4. 75 175 283 117 205 308 5. 168 233 2137 154 232 2283
1518b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.24 28.50 2. 2.25 28.64 3. 107 218 312 74 196 320 4. 68 97 125 97 170 210 5. 130 160 326 127 155 301
imix-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.52 8.63 2. 2.64 9.03
imix-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.95 16.93 2. 5.07 17.35
imix-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.97 27.27 2. 8.13 27.82

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.60       3.38 
 2.  2.63       3.41 
  
 3.  109  220  330        81  192  307  
 4.   79  126  158        87  151  197  
 5.  208  253  278       179  203  216

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.71       9.12 
 2.  0.71       9.12 
  
 3.  117  223  304       113  242  340  
 4.  164  261  345       170  275  320  
 5.  353  459  525       356  453  528

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.64       5.93 
 2.  1.66       5.99

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.80 5.30 2. 4.83 5.33 3. 105 217 309 87 199 300 4. 64 86 105 53 74 94 5. 112 142 168 111 136 158
64b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.44 10.42 2. 9.54 10.53 3. 75 177 225 83 161 254 4. 52 74 91 53 75 88 5. 106 123 134 105 119 133
64b-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 20.78 22.94 2. 21.09 23.29 3. 23 31 38 22 31 37 4. 45 53 60 44 53 59 5. 106 122 134 105 121 133
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.55 19.72 2. 1.56 19.82 3. 103 203 296 77 198 309 4. 57 92 154 76 116 136 5. 145 180 211 145 186 234
1518b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.99 38.02 2. 3.02 38.41 3. 57 171 285 85 199 295 4. 72 118 140 76 130 150 5. 169 195 218 173 201 227
imix-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.32 11.36 2. 3.32 11.36
imix-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.57 22.48 2. 6.67 22.82
imix-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 13.34 45.65 2. 13.40 45.88

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.65 5.13 2. 4.67 5.16 3. 55 149 253 106 216 313 4. 74 151 167 101 144 162 5. 117 149 170 108 136 157
64b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.14 10.09 2. 9.23 10.19 3. 46 100 153 62 174 213 4. 44 53 65 46 71 84 5. 109 125 136 109 126 138
64b-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 20.21 22.31 2. 20.51 22.65 3. 23 32 38 22 32 39 4. 45 52 58 45 52 57 5. 110 126 139 109 126 138
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.29 16.40 2. 1.29 16.48 3. 79 199 308 103 198 294 4. 105 201 313 95 148 210 5. 162 230 264 154 220 279
1518b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.52 32.11 2. 2.55 32.44 3. 116 221 318 94 218 317 4. 79 114 138 75 121 145 5. 141 175 196 152 176 204
imix-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.01 10.30 2. 3.02 10.35
imix-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.02 20.61 2. 6.05 20.72
imix-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 12.26 41.98 2. 12.26 41.98

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr¶

IPv4 IPsec tunnel mode performance test suite.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  1.03       1.14 
 2.  1.05       1.16 
  
 3.   84  204  323        95  188  292  
 4.  142  328  469       154  265  369  
 5.  440  725  862       419  763  922

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  0.66       8.36 
 2.  0.66       8.40 
  
 3.  111  225  328        91  204  306  
 4.  138  259  361       152  280  379  
 5.  279  417  525       284  450  559

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  0.92       3.15 
 2.  0.92       3.15

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.04       3.94 
 2.  3.09       4.00 
  
 3.  115  195  290       103  160  241  
 4.   54  107  123        94  147  164  
 5.  132  162  190       148  206  239

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.78      10.04 
 2.  0.78      10.09 
  
 3.  125  224  313       126  193  265  
 4.  217  412  481       241  550  658  
 5.  475  611  755       483  597  697

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.93       6.98 
 2.  1.95       7.05

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.07 6.70 2. 6.64 7.33 3. 88 176 266 86 161 216 4. 56 75 89 51 74 88 5. 87 103 121 86 103 121
64b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.12 6.76 2. 6.80 7.51 3. 94 189 279 55 121 170 4. 44 65 74 52 67 77 5. 80 95 110 80 96 110
64b-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.35 4.80 2. 4.98 5.50 3. 19 20 28 22 23 24 4. 37 58 70 37 55 69 5. 44 70 80 119 163 207
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.77 22.60 2. 1.78 22.71 3. 121 204 258 110 175 249 4. 70 122 144 97 185 215 5. 193 265 291 191 249 270
1518b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.16 27.48 2. 2.17 27.62 3. 101 180 242 84 158 246 4. 92 178 205 70 107 122 5. 167 220 238 162 189 210
imix-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.16 14.24 2. 4.27 14.60
imix-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.44 15.18 2. 4.57 15.64
imix-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.99 10.23 2. 3.20 10.97

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.96 6.57 2. 6.55 7.23 3. 65 163 253 66 150 193 4. 47 61 74 53 71 82 5. 89 108 127 88 105 125
64b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.09 6.72 2. 6.66 7.36 3. 68 154 243 61 124 191 4. 46 65 75 43 58 73 5. 81 94 105 81 95 106
64b-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.33 4.78 2. 4.86 5.37 3. 19 32 42 22 42 53 4. 39 52 61 57 81 94 5. 48 66 77 76 99 126
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.47 18.77 2. 1.49 18.96 3. 120 211 292 91 172 234 4. 68 160 197 94 163 195 5. 215 280 304 222 282 313
1518b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.91 24.31 2. 1.92 24.43 3. 87 185 250 84 150 229 4. 88 171 187 112 220 248 5. 192 250 269 199 260 287
imix-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.87 13.25 2. 3.95 13.51
imix-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.27 14.60 2. 4.35 14.89
imix-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.96 10.13 2. 3.16 10.81

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr¶

IPv4 IPsec tunnel mode performance test suite.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  5.42       5.98 
 2.  5.75       6.35 
  
 3.   61  178  267        73  150  229  
 4.   53   74   85        51   73   81  
 5.  103  125  139        99  121  138

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  1.46      18.58 
 2.  1.47      18.77 
  
 3.  122  202  280        88  164  246  
 4.  104  206  265       104  207  248  
 5.  200  267  301       176  237  266

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  3.62      12.39 
 2.  3.73      12.77

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.18 5.42 2. 4.25 5.50 3. 109 220 327 119 233 350 4. 73 100 120 112 151 170 5. 132 158 179 120 150 170
64b-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.18 6.72 2. 5.26 6.82 3. 96 173 256 114 209 270 4. 76 102 122 85 112 133 5. 166 188 207 175 199 219
1518b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.50 6.44 2. 0.50 6.50 3. 159 260 354 161 270 344 4. 166 280 368 150 266 373 5. 229 421 485 193 244 309
imix-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.20 4.32 2. 1.20 4.34
imix-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.84 17.50 2. 5.04 18.22

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.06 5.59 2. 5.06 5.59 3. 100 208 325 120 226 337 4. 65 88 107 87 137 163 5. 82 92 100 91 119 130
64b-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.99 5.51 2. 5.01 5.53 3. 113 213 294 112 221 334 4. 84 104 122 94 140 171 5. 165 215 236 240 275 308
1518b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 1.78 22.62 2. 1.78 22.73 3. 99 195 296 113 227 320 4. 72 115 159 75 118 151 5. 146 173 192 131 168 190
imix-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.48 18.76 2. 5.59 19.14
imix-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.40 15.06 2. 4.58 15.67

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.08 5.61 2. 5.08 5.61 3. 94 201 321 95 192 290 4. 68 88 105 64 84 99 5. 83 93 101 97 121 130
64b-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.02 5.54 2. 5.02 5.54 3. 117 241 337 93 191 278 4. 76 94 108 72 107 142 5. 140 185 221 246 280 315
1518b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 1.49 19.03 2. 1.50 19.13 3. 111 234 346 133 254 364 4. 70 106 129 98 157 261 5. 92 113 127 95 128 143
imix-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.24 17.94 2. 5.29 18.12
imix-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.43 15.15 2. 4.65 15.93

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.02 5.21 2. 4.10 5.31 3. 98 236 354 109 248 372 4. 79 116 145 87 127 153 5. 163 193 224 128 190 236
64b-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.05 5.24 2. 4.11 5.32 3. 78 186 290 119 249 363 4. 89 129 161 109 171 204 5. 226 262 296 161 247 292
1518b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.50 6.43 2. 0.50 6.43 3. 158 284 418 155 273 395 4. 129 235 380 131 284 408 5. 181 299 368 218 417 562
imix-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.26 4.56 2. 1.26 4.56
imix-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.07 14.71 2. 4.21 15.23

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.25 4.69 2. 4.46 4.93 3. 76 192 337 109 243 367 4. 92 146 191 100 137 158 5. 168 201 228 121 182 217
64b-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.17 4.60 2. 4.19 4.62 3. 102 214 294 126 249 350 4. 80 122 155 94 141 179 5. 256 311 365 138 218 259
1518b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 1.71 21.79 2. 1.73 22.01 3. 69 184 296 112 253 398 4. 95 170 234 103 194 283 5. 134 173 201 143 229 276
imix-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.27 14.62 2. 4.28 14.66
imix-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.98 13.64 2. 4.11 14.05

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.26 4.70 2. 4.47 4.94 3. 79 202 325 123 252 401 4. 76 123 142 111 151 170 5. 179 212 234 115 171 209
64b-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.16 4.59 2. 4.20 4.63 3. 83 192 326 89 238 328 4. 96 142 184 106 170 199 5. 312 384 437 150 235 275
1518b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 1.47 18.66 2. 1.49 18.94 3. 98 251 370 109 246 398 4. 98 182 276 101 212 305 5. 133 190 232 161 237 269
imix-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.26 14.57 2. 4.28 14.65
imix-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.98 13.62 2. 4.12 14.11

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.72       3.53 
 2.  2.75       3.57 
  
 3.  106  215  331        57  171  278  
 4.   89  154  203       102  170  222  
 5.  172  225  271       157  224  250

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.72       9.28 
 2.  0.72       9.37 
  
 3.  143  255  365       128  245  348  
 4.  157  246  299       185  305  387  
 5.  365  488  571       342  469  576

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.67       6.04 
 2.  1.69       6.10

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.55 6.13 2. 5.78 6.38 3. 67 165 258 84 155 234 4. 61 101 139 53 71 90 5. 116 152 170 107 147 168
64b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 10.82 11.95 2. 10.93 12.07 3. 53 105 160 47 128 153 4. 46 59 73 44 56 65 5. 98 124 141 91 119 136
64b-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 20.03 22.12 2. 20.54 22.68 3. 23 32 39 23 33 40 4. 46 58 71 45 57 71 5. 96 170 246 93 169 234
1518b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.65 21.03 2. 1.66 21.14 3. 95 221 317 70 178 280 4. 104 195 235 84 119 146 5. 172 241 286 149 206 234
1518b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.09 39.30 2. 3.20 40.70 3. 104 198 291 63 170 268 4. 70 94 118 64 119 145 5. 182 240 272 158 235 272
imix-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.67 12.56 2. 3.72 12.75
imix-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.02 24.03 2. 7.27 24.89
imix-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 12.64 43.26 2. 12.83 43.91

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.47 6.04 2. 5.63 6.22 3. 59 160 249 85 203 296 4. 60 83 116 62 102 124 5. 121 156 171 113 149 163
64b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.66 11.77 2. 10.77 11.89 3. 49 100 122 59 159 220 4. 43 57 67 46 62 77 5. 99 126 141 93 123 138
64b-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 19.52 21.55 2. 20.12 22.21 3. 24 34 42 26 35 42 4. 45 58 72 44 57 71 5. 96 178 266 94 177 253
1518b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.38 17.55 2. 1.38 17.63 3. 104 208 308 111 205 306 4. 104 173 258 112 195 263 5. 161 214 245 154 208 261
1518b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.49 31.73 2. 2.50 31.89 3. 92 209 327 83 191 284 4. 71 130 155 74 147 193 5. 109 136 169 115 142 156
imix-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.41 11.66 2. 3.46 11.83
imix-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.25 21.39 2. 6.25 21.39
imix-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 11.61 39.73 2. 11.84 40.54

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.13       2.76 
 2.  2.16       2.80 
  
 3.   93  200  308        92  201  330  
 4.  101  166  269        95  169  218  
 5.  170  208  237       135  220  261

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.60       7.82 
 2.  0.61       7.90 
  
 3.  140  269  385       114  225  336  
 4.  182  270  435       150  260  340  
 5.  393  540  624       315  535  669

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.33       4.81 
 2.  1.33       4.81

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.58 5.06 2. 4.63 5.11 3. 89 214 283 83 195 302 4. 72 142 181 100 137 149 5. 122 155 174 85 134 157
64b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.27 5.82 2. 5.32 5.88 3. 68 173 249 56 183 297 4. 59 114 138 60 111 138 5. 103 131 147 59 109 140
64b-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.10 10.05 2. 9.24 10.20 3. 20 29 44 20 28 45 4. 32 66 75 27 41 52 5. 58 155 180 50 118 145
1518b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.33 16.95 2. 1.33 16.95 3. 102 215 318 88 191 307 4. 88 175 276 92 188 301 5. 197 277 347 141 282 369
1518b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.61 20.54 2. 1.62 20.64 3. 73 174 260 25 157 292 4. 119 220 320 100 208 290 5. 150 219 278 107 199 270
imix-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.99 10.23 2. 3.02 10.33
imix-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.55 12.15 2. 3.59 12.27
imix-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.80 19.86 2. 5.89 20.16

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.46 4.92 2. 4.51 4.97 3. 99 225 309 93 189 293 4. 63 88 106 79 131 159 5. 112 142 169 91 136 162
64b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.17 5.71 2. 5.25 5.79 3. 68 180 256 66 182 287 4. 54 111 140 66 115 143 5. 107 136 151 60 124 141
64b-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.93 9.86 2. 9.07 10.01 3. 19 27 38 21 32 44 4. 31 51 69 30 43 51 5. 58 160 190 50 120 147
1518b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.16 14.73 2. 1.16 14.80 3. 89 194 293 82 188 312 4. 125 211 294 103 207 320 5. 158 225 296 140 253 310
1518b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.41 17.91 2. 1.42 18.09 3. 78 177 284 48 172 252 4. 119 215 300 103 208 290 5. 151 224 288 111 209 297
imix-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.80 9.57 2. 2.82 9.67
imix-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.32 11.35 2. 3.35 11.47
imix-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.37 18.37 2. 5.45 18.65

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.03 5.22 2. 4.07 5.27 3. 91 225 352 141 268 397 4. 90 141 203 105 171 217 5. 170 204 245 137 202 239
64b-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.03 5.22 2. 4.05 5.25 3. 86 187 287 117 248 359 4. 96 142 186 94 153 201 5. 216 256 291 157 242 283
1518b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.50 6.47 2. 0.50 6.47 3. 160 280 396 181 297 428 4. 120 250 372 135 292 403 5. 205 313 415 280 524 722
imix-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.18 4.27 2. 1.21 4.38
imix-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.07 14.71 2. 4.19 15.16

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.23 4.68 2. 4.45 4.91 3. 70 216 296 133 267 412 4. 63 125 154 104 132 152 5. 177 211 236 119 177 220
64b-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.12 4.55 2. 4.15 4.58 3. 118 239 354 107 245 336 4. 107 162 204 103 163 193 5. 232 277 318 136 204 245
1518b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 1.70 21.66 2. 1.72 21.88 3. 101 258 377 117 235 350 4. 91 149 234 92 160 218 5. 141 183 218 143 190 248
imix-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.20 14.37 2. 4.23 14.48
imix-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.94 13.50 2. 4.06 13.91

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.24 4.68 2. 4.42 4.87 3. 83 205 331 122 252 384 4. 71 102 120 102 139 159 5. 164 196 223 122 184 212
64b-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.12 4.55 2. 4.16 4.60 3. 93 216 311 119 244 347 4. 85 127 157 84 120 141 5. 224 265 303 123 205 242
1518b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 1.44 18.39 2. 1.45 18.49 3. 97 252 372 87 224 336 4. 91 182 296 117 239 336 5. 141 194 236 146 222 254
imix-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.23 14.49 2. 4.25 14.56
imix-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.97 13.58 2. 4.07 13.93

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.88 5.02 2. 3.90 5.05 3. 86 165 277 114 244 357 4. 90 128 173 95 163 208 5. 152 176 199 125 186 226
64b-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.97 5.14 2. 3.97 5.14 3. 96 173 289 132 242 346 4. 84 119 152 89 132 160 5. 197 224 247 128 210 246
1518b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.44 5.68 2. 0.44 5.68 3. 167 281 401 183 299 418 4. 125 237 372 155 279 401 5. 138 222 290 150 265 308
imix-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.97 3.49 2. 0.97 3.49
imix-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.01 14.50 2. 4.20 15.17

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.23 4.67 2. 4.40 4.86 3. 65 145 247 114 243 380 4. 55 87 117 115 155 175 5. 170 194 213 118 172 204
64b-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.07 4.50 2. 4.11 4.54 3. 98 195 298 83 176 215 4. 71 91 108 70 103 127 5. 231 272 309 118 200 242
1518b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 1.71 21.72 2. 1.72 21.94 3. 97 212 314 89 229 355 4. 101 195 225 126 254 331 5. 157 218 238 144 218 264
imix-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.17 14.29 2. 4.22 14.43
imix-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.92 13.40 2. 4.01 13.74

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.20 4.64 2. 4.41 4.87 3. 82 187 263 120 247 370 4. 70 89 103 94 130 148 5. 183 209 229 120 190 222
64b-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.07 4.49 2. 4.11 4.54 3. 117 221 351 88 237 342 4. 85 117 155 109 168 194 5. 222 264 303 129 207 240
1518b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 1.47 18.67 2. 1.47 18.75 3. 111 239 364 102 216 337 4. 76 163 204 85 125 160 5. 148 216 236 113 151 180
imix-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.16 14.23 2. 4.20 14.37
imix-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.89 13.31 2. 3.99 13.65

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  2.20       2.86 
 2.  2.31       2.99 
  
 3.   23   48   74        23   47   61  
 4.   53   86  110        71  109  121  
 5.  160  204  266       155  195  241

 1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  0.66       8.59 
 2.  0.66       8.59 
  
 3.   48   76  120        49  104  132  
 4.  135  275  354       137  263  331  
 5.  443  583  691       453  583  691

 imix-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  1.42       5.13 
 2.  1.43       5.16

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.80 4.19 2. 3.99 4.41 3. 19 37 61 23 52 76 4. 56 82 96 56 78 96 5. 111 136 161 112 136 159
64b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.96 7.69 2. 7.47 8.25 3. 20 44 74 21 60 84 4. 47 61 71 46 62 74 5. 113 133 152 115 135 153
64b-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 13.08 14.44 2. 14.10 15.57 3. 32 54 67 36 53 76 4. 49 59 69 45 55 61 5. 126 148 168 128 149 170
1518b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.22 15.54 2. 1.25 15.94 3. 25 35 71 25 33 50 4. 76 162 187 57 178 257 5. 167 227 287 166 240 269
1518b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.32 29.55 2. 2.32 29.55 3. 25 44 75 25 44 65 4. 59 82 103 65 102 116 5. 144 174 202 146 183 211
imix-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.46 8.43 2. 2.55 8.73
imix-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.53 15.50 2. 4.53 15.50
imix-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.69 29.74 2. 8.69 29.74

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.64 4.02 2. 3.85 4.25 3. 19 50 73 19 32 43 4. 52 83 107 51 89 118 5. 108 135 170 112 142 170
64b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.67 7.37 2. 7.16 7.90 3. 22 49 80 28 58 80 4. 46 59 73 45 57 70 5. 113 134 151 111 131 150
64b-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 12.37 13.66 2. 13.32 14.71 3. 35 56 77 25 50 68 4. 45 58 67 46 59 70 5. 118 138 156 119 140 157
1518b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.08 13.73 2. 1.08 13.80 3. 25 49 65 34 63 84 4. 70 124 154 67 128 181 5. 205 289 328 197 278 334
1518b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.04 26.03 2. 2.04 26.03 3. 26 46 76 26 56 86 4. 61 86 105 55 87 107 5. 157 196 225 155 193 222
imix-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.26 7.75 2. 2.31 7.90
imix-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.32 14.78 2. 4.32 14.78
imix-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.09 27.70 2. 8.09 27.70

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  2.40       3.11 
 2.  2.45       3.18 
  
 3.   23   62   83        23   50   69  
 4.   67  103  139        77  113  138  
 5.  155  199  225       162  214  235

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  0.70       9.01 
 2.  0.70       9.01 
  
 3.   46   97  127        44   89  124  
 4.  145  283  346       131  337  423  
 5.  436  546  632       433  539  612

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  1.56       5.65 
 2.  1.58       5.71

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.24 4.68 2. 4.31 4.76 3. 21 51 81 26 56 79 4. 52 68 80 49 70 89 5. 107 126 144 106 126 145
64b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.54 9.43 2. 8.71 9.62 3. 30 52 68 36 63 80 4. 47 59 72 45 59 69 5. 105 122 137 105 121 136
64b-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 17.76 19.60 2. 18.22 20.11 3. 28 62 81 35 57 74 4. 41 50 57 43 54 62 5. 104 120 133 103 119 133
1518b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.45 18.49 2. 1.47 18.68 3. 24 40 62 24 52 72 4. 41 104 123 65 106 133 5. 230 291 326 209 255 288
1518b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.72 34.62 2. 2.72 34.62 3. 24 44 73 24 61 87 4. 57 77 90 59 80 95 5. 174 194 216 153 196 220
imix-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.97 10.18 2. 2.97 10.18
imix-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.92 20.27 2. 5.92 20.27
imix-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 11.60 39.70 2. 11.60 39.70

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.14 4.57 2. 4.20 4.63 3. 20 50 77 24 50 81 4. 48 68 84 47 64 77 5. 109 128 144 109 128 143
64b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.33 9.20 2. 8.49 9.37 3. 32 54 73 30 54 73 4. 44 57 69 43 55 68 5. 107 125 139 107 124 137
64b-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 17.21 19.00 2. 17.62 19.45 3. 37 57 71 33 59 73 4. 43 52 59 44 52 59 5. 103 120 134 103 119 133
1518b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.23 15.72 2. 1.25 15.88 3. 25 61 88 25 58 84 4. 60 90 116 59 116 130 5. 216 278 323 213 274 314
1518b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.38 30.27 2. 2.38 30.27 3. 25 52 84 25 62 83 4. 68 88 106 57 79 104 5. 157 182 205 155 186 217
imix-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.75 9.43 2. 2.75 9.43
imix-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.52 18.89 2. 5.52 18.89
imix-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.89 37.26 2. 10.89 37.26

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr¶

IPv4 IPsec tunnel mode performance test suite.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  0.99       1.09 
 2.  1.00       1.10 
  
 3.   23   31   47        24   51   78  
 4.   65  248  345        73  209  329  
 5.  321  508  674       313  483  620

 1518b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  0.67       8.52 
 2.  0.67       8.52 
  
 3.   28   36   69        29   60   78  
 4.  100  282  361        88  242  320  
 5.  399  660  809       407  605  743

 imix-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  0.90       3.06 
 2.  0.90       3.08

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  2.69       3.49 
 2.  2.70       3.50 
  
 3.   23   37   60        22   58   86  
 4.   66  105  140        72  133  159  
 5.  145  171  209        84  111  139

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  0.77       9.90 
 2.  0.77       9.90 
  
 3.   43  107  129        42  111  126  
 4.  162  405  512       146  305  389  
 5.  393  516  572       424  582  625

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  1.84       6.66 
 2.  1.85       6.69

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.37 5.93 2. 5.42 5.98 3. 19 40 72 19 49 66 4. 41 67 77 40 68 82 5. 54 67 80 63 76 87
64b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.56 6.14 2. 5.62 6.20 3. 19 51 58 30 54 79 4. 37 51 62 43 56 71 5. 61 76 92 62 76 87
64b-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.58 6.16 2. 5.64 6.22 3. 21 57 77 18 62 75 4. 36 61 78 41 65 76 5. 64 78 90 59 74 84
1518b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.67 21.26 2. 1.67 21.26 3. 24 40 80 24 40 50 4. 73 112 144 87 144 179 5. 157 205 235 174 225 272
1518b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.98 25.25 2. 1.98 25.25 3. 24 53 80 23 78 99 4. 63 100 122 93 195 213 5. 163 219 240 186 238 255
imix-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.81 13.04 2. 3.81 13.04
imix-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.10 14.04 2. 4.12 14.11
imix-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.08 13.96 2. 4.10 14.03

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.26 5.81 2. 5.34 5.90 3. 19 54 71 19 41 70 4. 47 65 78 40 58 73 5. 72 86 102 62 78 93
64b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.53 6.11 2. 5.56 6.14 3. 19 41 74 18 27 57 4. 35 49 59 46 67 79 5. 58 72 83 60 81 97
64b-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.46 6.03 2. 5.52 6.09 3. 19 44 73 24 44 62 4. 38 57 64 38 56 72 5. 70 86 98 58 70 81
1518b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.42 18.11 2. 1.42 18.11 3. 24 32 53 24 79 92 4. 62 170 198 90 213 249 5. 217 292 315 184 243 271
1518b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.82 23.22 2. 1.82 23.22 3. 24 25 44 24 55 99 4. 65 112 141 71 109 135 5. 174 207 230 171 208 247
imix-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.55 12.15 2. 3.55 12.15
imix-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.93 13.44 2. 3.95 13.51
imix-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.92 13.41 2. 3.94 13.48

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr¶

IPv4 IPsec tunnel mode performance test suite.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  4.74       5.24 
 2.  4.79       5.29 
  
 3.   19   20   67        20   63   83  
 4.   39   73   93        56   79   89  
 5.   79   97  109        70   89  103

 1518b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  1.40      17.79 
 2.  1.40      17.88 
  
 3.   24   82  101        25   74   85  
 4.   74  224  253        69   91  112  
 5.  245  341  365       236  311  344

 imix-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  3.31      11.32 
 2.  3.32      11.37

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.95 5.12 2. 3.99 5.17 3. 26 55 64 25 77 102 4. 63 91 123 69 108 130 5. 108 128 144 121 150 171
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.52 5.86 2. 4.54 5.89 3. 27 67 93 27 62 84 4. 96 137 146 64 84 110 5. 178 209 234 170 198 222
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.44 5.66 2. 0.44 5.66 3. 48 63 98 46 73 100 4. 59 151 186 53 154 182 5. 132 240 304 214 387 439
imix-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.17 4.24 2. 1.19 4.29
imix-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.90 14.10 2. 4.08 14.75

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.47 4.94 2. 4.54 5.01 3. 22 58 79 21 33 62 4. 57 70 76 46 61 80 5. 90 105 127 83 100 116
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.46 4.93 2. 4.56 5.03 3. 24 67 89 24 60 68 4. 81 94 102 57 81 95 5. 274 306 332 228 276 316
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 1.66 21.08 2. 1.70 21.61 3. 27 46 60 27 51 79 4. 56 134 150 64 154 168 5. 137 201 219 153 198 216
imix-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.20 14.38 2. 4.55 15.58
imix-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.71 12.69 2. 3.82 13.08

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.44 4.90 2. 4.44 4.90 3. 22 43 66 21 53 72 4. 60 80 92 56 75 91 5. 88 104 122 85 101 118
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.34 4.79 2. 4.45 4.91 3. 24 49 63 24 67 77 4. 75 99 110 38 93 109 5. 225 260 291 142 188 225
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 1.41 18.00 2. 1.42 18.09 3. 27 41 53 27 54 78 4. 57 79 98 43 95 107 5. 129 170 184 118 160 173
imix-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.33 14.83 2. 4.47 15.28
imix-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.72 12.72 2. 3.83 13.11

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.49 4.52 2. 3.53 4.57 3. 26 58 89 25 55 70 4. 63 99 123 61 83 112 5. 148 177 199 108 159 196
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.10 4.02 2. 3.19 4.14 3. 28 68 95 27 55 87 4. 82 122 145 53 98 142 5. 166 204 228 106 172 212
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.41 5.31 2. 0.42 5.41 3. 45 69 93 44 73 110 4. 55 227 285 59 139 260 5. 146 319 414 150 380 513
imix-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.20 4.32 2. 1.24 4.50
imix-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.47 12.54 2. 3.63 13.10

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.57 3.95 2. 3.65 4.03 3. 23 48 59 24 53 65 4. 56 74 87 47 72 90 5. 119 143 166 82 122 147
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.01 3.32 2. 3.10 3.43 3. 27 62 84 29 55 70 4. 52 77 98 52 79 94 5. 129 159 185 87 135 161
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 1.55 19.78 2. 1.58 20.18 3. 27 43 90 27 50 66 4. 66 96 112 48 143 160 5. 179 224 257 139 216 255
imix-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.62 12.41 2. 3.64 12.47
imix-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.39 11.59 2. 3.49 11.95

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.57 3.94 2. 3.64 4.02 3. 22 48 63 22 48 62 4. 57 93 109 47 85 107 5. 122 148 169 80 122 151
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.03 3.35 2. 3.11 3.43 3. 25 57 79 25 55 72 4. 59 88 98 49 77 109 5. 130 156 176 82 129 155
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 1.34 17.09 2. 1.36 17.35 3. 27 57 72 27 50 65 4. 58 105 126 58 117 164 5. 144 194 220 122 183 224
imix-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.62 12.40 2. 3.64 12.46
imix-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.41 11.68 2. 3.48 11.92

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  2.34       3.04 
 2.  2.38       3.08 
  
 3.   23   35   62        23   49   85  
 4.   62   78   90        64   94  111  
 5.  124  166  193       123  159  188

 1518b-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  0.68       8.82 
 2.  0.69       8.87 
  
 3.   45   81  104        43   80  114  
 4.  130  313  432       101  315  406  
 5.  382  559  649       404  568  669

 imix-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  1.57       5.67 
 2.  1.58       5.70

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.58 5.06 2. 4.67 5.16 3. 19 38 42 21 51 77 4. 40 59 82 51 62 70 5. 80 104 124 74 95 114
64b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.24 10.20 2. 9.42 10.40 3. 24 45 74 29 51 77 4. 45 58 71 43 58 71 5. 81 103 117 79 98 112
64b-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 17.34 19.14 2. 18.05 19.92 3. 35 54 73 36 53 72 4. 42 53 61 40 49 56 5. 79 107 130 77 104 126
1518b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.50 19.09 2. 1.51 19.18 3. 24 42 74 24 42 73 4. 42 59 80 54 88 105 5. 157 204 243 149 208 233
1518b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.82 35.88 2. 2.86 36.43 3. 24 46 73 24 54 80 4. 48 82 109 59 79 98 5. 141 180 208 133 173 196
imix-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.25 11.13 2. 3.25 11.13
imix-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.23 21.33 2. 6.26 21.44
imix-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 11.22 38.40 2. 11.22 38.40

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.51 4.98 2. 4.61 5.08 3. 19 28 56 19 37 52 4. 57 73 84 46 68 92 5. 81 103 122 77 96 114
64b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.08 10.02 2. 9.26 10.23 3. 23 48 76 23 49 77 4. 44 62 72 44 59 74 5. 84 106 122 82 105 121
64b-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 16.94 18.70 2. 17.72 19.56 3. 38 59 79 33 59 74 4. 41 50 59 41 52 60 5. 78 107 131 78 106 130
1518b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.29 16.45 2. 1.30 16.53 3. 24 39 74 24 43 60 4. 47 110 142 59 96 143 5. 144 211 249 139 209 245
1518b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.39 30.38 2. 2.39 30.38 3. 25 60 82 24 53 92 4. 77 111 134 54 75 89 5. 117 164 205 126 159 186
imix-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.01 10.32 2. 3.03 10.37
imix-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.66 19.39 2. 5.75 19.68
imix-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.53 36.04 2. 10.53 36.04

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  1.85       2.39 
 2.  1.87       2.43 
  
 3.   23   40   84        23   51   79  
 4.   47  107  154        49   90  115  
 5.  130  188  211       105  179  239

 1518b-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  0.58       7.47 
 2.  0.58       7.50 
  
 3.   42   90  115        45   85  111  
 4.  113  365  439       103  268  355  
 5.  354  490  556       243  441  550

 imix-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  1.26       4.54 
 2.  1.26       4.54

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.59 3.96 2. 3.59 3.96 3. 28 58 78 19 39 78 4. 47 68 80 36 65 83 5. 70 92 108 57 88 122
64b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.18 4.61 2. 4.26 4.70 3. 19 45 75 19 45 78 4. 41 61 77 42 64 86 5. 62 81 94 48 73 94
64b-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.15 7.90 2. 7.26 8.01 3. 28 55 79 19 52 81 4. 43 62 79 41 63 83 5. 56 83 100 44 75 99
1518b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.26 16.10 2. 1.26 16.10 3. 24 56 82 24 39 61 4. 54 85 113 51 99 128 5. 194 269 324 128 234 285
1518b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.50 19.14 2. 1.50 19.14 3. 24 61 82 24 58 84 4. 33 130 151 27 79 121 5. 142 202 226 68 159 219
imix-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.62 8.97 2. 2.63 9.01
imix-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.11 10.66 2. 3.13 10.71
imix-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.97 17.00 2. 4.99 17.08

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.51 3.87 2. 3.63 4.01 3. 19 37 63 19 49 76 4. 52 75 101 35 67 81 5. 73 95 113 60 86 107
64b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.13 4.56 2. 4.20 4.63 3. 19 48 78 19 51 79 4. 44 64 79 45 66 87 5. 67 85 103 48 76 100
64b-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.92 7.64 2. 7.10 7.84 3. 22 51 78 28 56 76 4. 44 63 81 44 63 85 5. 54 85 102 48 79 103
1518b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.08 13.74 2. 1.08 13.74 3. 24 37 62 24 34 60 4. 76 192 242 47 144 185 5. 182 273 301 126 238 299
1518b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.31 16.67 2. 1.31 16.67 3. 24 25 42 24 28 59 4. 52 92 108 47 84 106 5. 155 213 257 64 141 188
imix-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.44 8.35 2. 2.45 8.40
imix-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.94 10.07 2. 2.96 10.12
imix-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.65 15.90 2. 4.67 15.98

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.52 4.56 2. 3.57 4.63 3. 28 53 73 25 59 111 4. 68 92 110 51 91 108 5. 154 181 205 108 160 192
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.09 4.01 2. 3.19 4.13 3. 37 62 87 27 52 70 4. 72 93 114 51 97 123 5. 147 180 207 103 164 199
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.43 5.61 2. 0.44 5.66 3. 45 84 111 47 80 110 4. 58 112 164 57 146 211 5. 896 1093 1252 1585 1859 2077
imix-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.21 4.36 2. 1.21 4.36
imix-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.48 12.57 2. 3.61 13.04

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.54 3.90 2. 3.55 3.92 3. 22 48 60 22 39 54 4. 59 93 108 43 81 91 5. 108 132 154 77 120 140
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 2.99 3.30 2. 3.10 3.42 3. 34 62 89 23 32 47 4. 57 76 96 43 73 105 5. 117 150 181 89 125 153
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 1.56 19.84 2. 1.58 20.14 3. 27 41 66 27 56 89 4. 63 90 103 70 100 111 5. 181 221 254 143 190 232
imix-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.60 12.33 2. 3.60 12.33
imix-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.39 11.59 2. 3.47 11.88

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.55 3.92 2. 3.59 3.96 3. 22 45 69 22 28 48 4. 55 87 101 47 81 97 5. 109 134 162 79 119 147
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 2.99 3.30 2. 3.08 3.40 3. 24 61 105 23 43 71 4. 56 88 110 36 77 89 5. 125 155 180 80 128 152
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 1.34 17.00 2. 1.36 17.30 3. 28 52 66 27 40 56 4. 60 106 126 48 97 138 5. 145 184 212 135 213 243
imix-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.60 12.33 2. 3.62 12.39
imix-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.38 11.57 2. 3.50 11.98

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.43 4.44 2. 3.46 4.49 3. 28 57 85 25 42 66 4. 71 97 113 60 82 102 5. 142 162 180 102 149 173
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 2.98 3.86 2. 3.07 3.98 3. 27 58 89 27 43 72 4. 63 86 119 53 104 126 5. 162 195 218 99 160 199
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.36 4.69 2. 0.36 4.69 3. 45 54 75 44 69 103 4. 53 276 370 57 234 355 5. 290 632 775 259 640 729
imix-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.89 3.21 2. 0.89 3.21
imix-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 3.44 12.42 2. 3.57 12.90

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.46 3.81 2. 3.49 3.85 3. 24 57 68 22 45 72 4. 62 76 91 51 88 99 5. 120 140 156 80 121 141
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 2.95 3.25 2. 3.07 3.38 3. 24 68 87 28 60 86 4. 59 98 112 45 85 102 5. 134 163 193 88 134 160
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 1.55 19.79 2. 1.62 20.67 3. 27 67 81 27 49 74 4. 84 191 207 56 130 144 5. 194 230 255 152 209 234
imix-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.56 12.20 2. 3.62 12.39
imix-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.34 11.45 2. 3.48 11.91

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.48 3.85 2. 3.54 3.90 3. 22 47 80 22 42 69 4. 58 91 114 55 76 91 5. 117 140 166 83 119 143
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 2.90 3.20 2. 2.98 3.30 3. 28 66 89 35 58 84 4. 55 86 106 54 78 96 5. 130 157 183 84 131 158
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 1.33 16.93 2. 1.34 17.10 3. 28 59 88 27 64 86 4. 48 115 132 54 114 161 5. 129 170 194 123 160 186
imix-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.57 12.21 2. 3.58 12.25
imix-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.33 11.39 2. 3.45 11.80