3n-icx-xxv710¶

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.87       3.72 
 2.  3.00       3.89 
  
 3.   79  187  297        70  181  269  
 4.  128  215  253       169  230  316  
 5.  231  334  435       182  246  310

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.88      11.42 
 2.  0.88      11.42 
  
 3.  122  237  328       129  236  340  
 4.  188  321  386       191  408  486  
 5.  416  551  643       364  538  610

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.82       6.56 
 2.  1.91       6.90

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.01 4.42 2. 4.68 5.17 3. 97 217 300 82 184 277 4. 60 115 158 94 116 129 5. 95 129 200 121 160 210
64b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.88 8.70 2. 8.41 9.29 3. 74 164 238 70 140 188 4. 52 74 93 46 68 87 5. 93 110 131 93 114 143
64b-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 14.73 16.26 2. 14.95 16.51 3. 21 33 41 25 34 41 4. 41 56 65 41 55 64 5. 87 103 116 88 102 117
1518b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.09 26.67 2. 2.19 27.90 3. 50 152 216 91 192 288 4. 82 153 177 104 179 217 5. 137 198 260 162 231 262
1518b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 56 180 292 109 216 314 4. 65 94 109 76 123 142 5. 118 153 173 124 150 166
imix-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.99 10.23 2. 3.32 11.37
imix-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.77 19.74 2. 5.77 19.74
imix-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 10.25 35.10 2. 10.31 35.27

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.58 3.95 2. 4.21 4.64 3. 70 180 289 33 159 258 4. 101 185 237 98 196 257 5. 173 258 403 142 203 445
64b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.87 7.59 2. 7.37 8.14 3. 69 147 225 79 178 284 4. 60 89 110 62 106 134 5. 98 124 154 105 132 160
1518b-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.94 24.67 2. 1.99 25.30 3. 67 191 285 88 200 289 4. 72 161 244 94 165 262 5. 133 182 229 163 234 273
1518b-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.57 45.42 2. 3.57 45.42 3. 88 158 254 74 172 252 4. 70 109 133 64 104 133 5. 109 127 144 103 121 140
imix-2t1c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.74 9.36 2. 3.02 10.35
imix-4t2c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.12 17.53 2. 5.12 17.53
imix-8t4c-avf-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.50 32.52 2. 9.50 32.52

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.02       3.91 
 2.  3.05       3.95 
  
 3.   79  170  275        88  181  288  
 4.  143  193  256        96  172  189  
 5.  187  256  306       193  249  295

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.92      11.86 
 2.  0.92      11.86 
  
 3.  122  239  336       112  220  311  
 4.  219  359  429       187  343  421  
 5.  457  600  700       429  549  674

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.00       7.23 
 2.  2.01       7.26

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.19 5.73 2. 5.19 5.73 3. 46 163 275 48 148 249 4. 83 158 195 83 163 211 5. 117 165 183 142 178 207
64b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 10.36 11.44 2. 10.46 11.55 3. 49 110 140 60 159 246 4. 47 58 73 45 57 67 5. 95 111 125 91 107 120
64b-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 22.18 24.49 2. 22.63 24.98 3. 19 27 36 22 30 35 4. 43 51 57 42 50 55 5. 100 116 129 99 115 127
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.89 36.76 2. 2.90 36.94 3. 56 167 254 82 188 272 4. 77 119 203 79 145 192 5. 144 184 215 146 186 204
1518b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 69 154 251 61 149 246 4. 57 104 155 50 65 80 5. 84 100 108 72 113 123
imix-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.46 15.25 2. 4.50 15.41
imix-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.14 31.29 2. 9.19 31.44
imix-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.87 5.38 2. 4.92 5.43 3. 71 189 300 56 167 272 4. 86 116 140 99 182 222 5. 114 174 190 114 172 216
64b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.89 10.92 2. 9.99 11.03 3. 69 134 151 36 100 133 4. 45 58 73 43 60 70 5. 104 118 130 103 120 134
1518b-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.72 34.64 2. 2.73 34.81 3. 73 146 251 103 188 248 4. 70 105 124 67 113 157 5. 136 170 192 140 192 211
1518b-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 82 189 267 46 137 239 4. 58 87 117 64 140 210 5. 77 89 97 88 115 122
imix-2t1c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.24 14.50 2. 4.26 14.58
imix-4t2c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.69 29.75 2. 8.78 30.05
imix-8t4c-avf-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr¶

IPv4 IPsec tunnel mode performance test suite.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  1.10       1.21 
 2.  1.11       1.22 
  
 3.   70  177  284        56  159  242  
 4.  170  495  697       164  447  618  
 5.  456  710  858       457  725  871

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  0.94      11.93 
 2.  0.94      11.99 
  
 3.  120  211  285        80  182  276  
 4.  130  290  395       146  372  542  
 5.  374  526  657       411  662  821

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  1.06       3.63 
 2.  1.07       3.65

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.85       4.99 
 2.  3.93       5.10 
  
 3.   94  151  242        91  168  250  
 4.   76  154  186       133  204  232  
 5.  194  236  259       203  254  280

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.00      12.92 
 2.  1.00      12.99 
  
 3.  106  165  228       128  203  296  
 4.  134  300  352       211  419  501  
 5.  420  603  664       410  527  634

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.20       7.95 
 2.  2.21       7.99

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.66 8.45 2. 7.69 8.50 3. 79 149 206 103 190 260 4. 61 96 113 90 132 150 5. 117 138 153 110 130 146
64b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.66 8.45 2. 7.69 8.49 3. 29 110 143 69 157 258 4. 34 46 57 70 107 126 5. 72 90 104 98 120 133
64b-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.65 8.45 2. 7.73 8.53 3. 17 24 35 17 18 26 4. 36 68 92 30 57 72 5. 84 103 125 76 90 99
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.81 48.51 2. 3.85 49.00 3. 63 140 226 84 166 238 4. 60 86 136 51 73 79 5. 133 147 158 122 135 146
1518b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 62 140 197 91 174 265 4. 47 67 76 56 100 154 5. 75 93 104 95 116 133
imix-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.25 21.39 2. 6.31 21.61
imix-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.31 21.58 2. 6.37 21.80

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.63 8.42 2. 7.71 8.51 3. 74 150 234 103 176 246 4. 60 95 112 73 119 135 5. 116 138 153 102 133 149
64b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.52 8.30 2. 7.59 8.38 3. 46 133 165 70 136 197 4. 37 53 61 58 89 111 5. 71 85 96 87 107 121
64b-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.58 8.37 2. 7.62 8.41 3. 17 19 34 17 54 80 4. 39 63 79 41 76 100 5. 64 83 99 83 107 127
1518b-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.60 45.83 2. 3.63 46.29 3. 72 143 203 87 182 264 4. 55 90 148 81 122 135 5. 149 174 187 130 151 164
1518b-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 56 137 187 73 148 243 4. 59 84 110 51 91 126 5. 107 120 125 120 153 158
imix-2t1c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.08 20.80 2. 6.14 21.01
imix-4t2c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.10 20.87 2. 6.16 21.08
imix-8t4c-avf-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.17 21.11 2. 6.23 21.33

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr¶

IPv4 IPsec tunnel mode performance test suite.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  6.51       7.18 
 2.  6.57       7.25 
  
 3.   60  139  227       115  202  267  
 4.   84  117  142       107  152  171  
 5.  121  144  157       115  153  174

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  3.39      43.22 
 2.  3.43      43.66 
  
 3.   51  136  215       105  185  239  
 4.   56   75  115        79  116  143  
 5.  145  162  180       136  150  159

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  5.50      18.82 
 2.  5.52      18.91

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.84 6.28 2. 4.89 6.34 3. 85 193 262 123 227 331 4. 84 129 142 104 186 213 5. 98 135 166 108 138 159
64b-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 6.49 8.42 2. 6.66 8.63 3. 72 147 192 67 133 178 4. 67 99 114 63 98 118 5. 112 128 141 114 136 159
1518b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.49 6.31 2. 0.50 6.43 3. 136 228 315 154 253 345 4. 117 215 310 150 244 322 5. 196 281 355 197 299 376
imix-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.28 4.61 2. 1.28 4.61
imix-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.88 21.26 2. 6.09 22.02

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.94 7.66 2. 7.15 7.89 3. 76 181 253 113 226 330 4. 64 108 130 93 121 156 5. 108 128 138 102 120 134
64b-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.50 7.18 2. 6.64 7.33 3. 68 175 297 81 177 214 4. 62 85 104 63 90 151 5. 88 104 117 94 116 141
1518b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 89 190 265 109 212 298 4. 69 90 111 58 91 104 5. 94 114 127 97 113 127
imix-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 6.51 22.28 2. 6.88 23.55
imix-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.88 20.13 2. 6.09 20.85

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 7.05 7.78 2. 7.05 7.78 3. 98 223 300 108 188 270 4. 61 102 115 71 115 126 5. 108 135 149 109 135 169
64b-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.24 6.89 2. 6.56 7.24 3. 76 129 156 52 165 220 4. 55 82 99 66 89 106 5. 94 110 121 96 116 136
1518b-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 92 152 249 113 210 290 4. 67 93 108 63 87 98 5. 100 121 129 103 117 125
imix-2t2c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 6.57 22.48 2. 6.84 23.40
imix-2t4c-avf-ethip4ipsec1tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.88 20.14 2. 5.94 20.34

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.76 6.16 2. 4.83 6.26 3. 101 225 335 120 234 362 4. 86 136 170 100 200 234 5. 139 172 202 121 167 211
64b-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.41 7.02 2. 5.43 7.04 3. 91 226 305 98 219 336 4. 74 112 154 79 130 171 5. 150 175 194 111 152 174
1518b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.48 6.27 2. 0.50 6.49 3. 144 263 349 140 258 336 4. 123 237 338 153 268 376 5. 148 302 422 198 364 466
imix-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.21 4.38 2. 1.25 4.51
imix-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.37 19.43 2. 5.47 19.79

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.34 5.90 2. 5.40 5.97 3. 78 182 297 107 233 364 4. 75 122 189 98 169 230 5. 139 169 191 128 156 174
64b-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.18 5.71 2. 5.25 5.80 3. 93 201 301 109 218 301 4. 75 112 175 80 151 190 5. 150 178 192 111 155 216
1518b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 75 194 282 99 222 311 4. 88 122 157 79 162 258 5. 147 172 197 128 159 192
imix-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.52 18.90 2. 5.52 18.90
imix-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.01 17.13 2. 5.18 17.75

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.26 5.81 2. 5.31 5.87 3. 109 220 352 89 226 332 4. 98 171 215 79 165 232 5. 153 211 232 81 159 177
64b-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.24 5.78 2. 5.24 5.78 3. 76 219 349 88 227 310 4. 70 111 164 70 104 130 5. 136 157 172 102 131 154
1518b-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 68 183 290 96 211 304 4. 81 130 183 77 135 209 5. 159 190 207 118 150 163
imix-2t2c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.55 19.00 2. 5.55 19.00
imix-2t4c-avf-ethip4ipsec2tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.05 17.29 2. 5.18 17.73

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.09       2.71 
 2.  2.22       2.88 
  
 3.   91  187  294        68  163  264  
 4.  142  260  312       176  278  376  
 5.  262  389  506       234  332  412

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.81      10.44 
 2.  0.82      10.54 
  
 3.  124  229  339       129  239  335  
 4.  218  317  397       207  377  483  
 5.  437  577  765       475  719  844

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.46       5.29 
 2.  1.50       5.42

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.76 3.05 2. 2.79 3.08 3. 85 193 287 85 190 293 4. 94 160 202 117 206 313 5. 144 191 235 115 163 229
64b-4t2c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.12 5.65 2. 5.15 5.68 3. 92 160 246 96 205 307 4. 58 132 157 51 106 137 5. 96 155 168 109 126 141
64b-8t4c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.84 10.86 2. 9.87 10.89 3. 20 28 37 20 24 34 4. 41 53 65 38 50 58 5. 104 123 137 104 122 137
1518b-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.75 22.30 2. 1.76 22.41 3. 83 203 292 111 203 298 4. 106 195 269 119 182 258 5. 173 250 284 175 294 329
imix-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.33 7.96 2. 2.35 8.04
imix-4t2c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.48 15.33 2. 4.55 15.56
imix-8t4c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.46 28.97 2. 8.46 28.97

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.67 2.95 2. 2.69 2.96 3. 78 181 281 103 211 304 4. 115 175 228 129 224 318 5. 175 254 301 187 271 330
64b-4t2c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.87 5.38 2. 4.87 5.38 3. 85 179 246 76 173 278 4. 66 101 123 77 107 129 5. 86 107 127 110 129 162
64b-8t4c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.21 10.17 2. 9.26 10.22 3. 21 39 45 21 30 40 4. 47 55 62 44 52 61 5. 107 126 141 105 123 139
1518b-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.66 21.10 2. 1.67 21.21 3. 90 194 278 101 198 273 4. 103 157 204 95 177 254 5. 180 242 282 182 263 315
imix-2t1c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.24 7.68 2. 2.25 7.72
imix-4t2c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.29 14.67 2. 4.35 14.89
imix-8t4c-avf-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.09 27.71 2. 8.09 27.71

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  3.28       4.25 
 2.  3.33       4.31 
  
 3.   77  204  314        55  176  268  
 4.  113  186  267       111  223  288  
 5.  214  317  370       158  241  346

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.93      12.02 
 2.  0.94      12.14 
  
 3.  131  222  317       108  222  339  
 4.  163  254  349       162  266  371  
 5.  434  623  727       417  600  727

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.01       7.26 
 2.  2.04       7.37

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.51 7.19 2. 6.58 7.26 3. 45 141 241 54 159 255 4. 75 115 142 66 121 144 5. 114 156 189 93 131 165
64b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 12.49 13.79 2. 13.07 14.43 3. 37 74 158 60 120 178 4. 41 54 68 42 54 67 5. 94 120 134 85 115 131
64b-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 25.80 28.49 2. 26.32 29.06 3. 23 30 35 22 29 35 4. 42 51 59 43 52 59 5. 95 145 185 95 145 182
1518b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.38 43.04 2. 3.41 43.47 3. 74 193 290 81 193 284 4. 70 138 173 80 109 132 5. 157 202 220 145 199 216
1518b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 68 142 255 70 173 255 4. 51 75 107 56 86 132 5. 70 97 108 82 99 113
imix-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.36 18.36 2. 5.42 18.55
imix-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 10.04 34.37 2. 10.09 34.54
imix-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.40 7.07 2. 6.47 7.14 3. 46 137 234 67 176 256 4. 64 89 111 78 132 165 5. 107 144 174 95 134 171
64b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 12.49 13.79 2. 12.68 14.00 3. 49 87 111 51 115 157 4. 41 54 64 41 52 62 5. 91 117 134 83 110 127
64b-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 25.44 28.08 2. 25.82 28.51 3. 21 30 37 20 29 35 4. 43 52 60 43 52 59 5. 96 144 183 95 143 180
1518b-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.18 40.53 2. 3.21 40.94 3. 69 144 231 89 205 302 4. 62 108 125 88 123 153 5. 166 204 227 152 201 220
1518b-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 55 143 211 76 179 272 4. 50 88 107 54 94 110 5. 65 83 91 66 91 103
imix-2t1c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.21 17.83 2. 5.26 18.01
imix-4t2c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.78 33.46 2. 9.78 33.46
imix-8t4c-avf-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  2.65       3.44 
 2.  2.65       3.44 
  
 3.   63  168  267        37  167  278  
 4.  112  211  286       134  245  351  
 5.  237  334  457       211  342  449

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  0.80      10.34 
 2.  0.80      10.39 
  
 3.  115  191  278       118  237  326  
 4.  141  245  320       125  249  381  
 5.  320  458  546       300  441  553

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr

 1.  1.62       5.84 
 2.  1.63       5.90

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.23 5.78 2. 5.29 5.84 3. 69 156 257 36 161 268 4. 65 124 168 93 181 224 5. 126 150 172 90 157 174
64b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.11 6.75 2. 6.18 6.82 3. 49 133 210 41 152 261 4. 58 122 148 63 128 170 5. 91 132 157 52 98 118
64b-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 10.43 11.51 2. 10.59 11.69 3. 17 32 42 17 28 47 4. 29 46 66 25 42 58 5. 57 115 135 33 98 119
1518b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.70 34.40 2. 2.73 34.71 3. 73 161 234 111 202 281 4. 65 116 152 82 153 239 5. 147 179 202 104 182 216
1518b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.26 41.55 2. 3.29 41.91 3. 42 147 237 25 179 272 4. 80 154 236 77 180 269 5. 148 194 253 93 154 187
imix-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.25 14.53 2. 4.31 14.74
imix-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.01 17.16 2. 5.06 17.33
imix-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.56 29.31 2. 8.69 29.75

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.12 5.65 2. 5.17 5.71 3. 52 158 245 68 173 267 4. 70 152 205 90 170 211 5. 131 172 230 85 150 167
64b-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 10.23 11.30 2. 10.34 11.41 3. 18 31 48 19 28 40 4. 30 47 57 26 42 57 5. 65 110 135 41 93 114
1518b-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.56 32.60 2. 2.59 32.93 3. 73 164 242 75 173 264 4. 73 116 213 81 158 208 5. 180 239 267 145 250 290
1518b-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.07 39.11 2. 3.10 39.50 3. 56 148 244 27 192 282 4. 69 154 249 68 197 281 5. 161 207 242 77 155 220
imix-2t1c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.11 14.08 2. 4.13 14.15
imix-4t2c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.87 16.66 2. 4.92 16.82
imix-8t4c-avf-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.27 28.31 2. 8.36 28.60

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.79 6.21 2. 4.84 6.27 3. 111 241 366 110 220 351 4. 106 159 226 103 203 242 5. 118 157 184 112 176 219
64b-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.38 6.98 2. 5.44 7.05 3. 102 220 326 121 242 366 4. 77 109 149 81 118 177 5. 145 167 187 108 155 192
1518b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.48 6.26 2. 0.49 6.33 3. 154 270 389 144 261 360 4. 147 262 380 141 260 365 5. 194 306 394 160 276 359
imix-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.24 4.46 2. 1.24 4.49
imix-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.26 19.01 2. 5.45 19.69

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.28 5.83 2. 5.41 5.98 3. 101 235 356 107 244 356 4. 100 162 246 96 169 239 5. 169 207 231 137 164 191
64b-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.22 5.76 2. 5.24 5.79 3. 98 231 350 128 251 363 4. 82 143 217 72 113 145 5. 153 204 236 94 138 178
1518b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 79 189 261 88 229 340 4. 80 114 146 78 116 156 5. 148 172 209 112 144 168
imix-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.45 18.67 2. 5.45 18.67
imix-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.01 17.16 2. 5.17 17.69

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.26 5.80 2. 5.42 5.98 3. 97 227 358 120 229 359 4. 99 162 252 97 174 228 5. 163 208 240 121 150 169
64b-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.25 5.79 2. 5.25 5.79 3. 76 189 284 103 217 317 4. 81 129 179 80 133 185 5. 126 168 208 81 133 153
1518b-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 72 184 285 109 248 374 4. 84 121 154 75 139 187 5. 147 184 198 128 171 188
imix-2t2c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.50 18.82 2. 5.50 18.82
imix-2t4c-avf-ethip4ipsec4tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 4.96 16.98 2. 5.14 17.59

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.66 6.04 2. 4.76 6.16 3. 94 203 323 96 232 342 4. 73 133 187 96 199 269 5. 122 159 189 134 206 251
64b-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.44 7.06 2. 5.46 7.07 3. 97 211 304 96 230 347 4. 101 167 217 74 115 142 5. 153 192 220 104 162 194
1518b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.48 6.18 2. 0.49 6.34 3. 146 256 374 144 249 363 4. 132 253 366 143 263 376 5. 155 281 380 183 316 457
imix-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.21 4.37 2. 1.25 4.52
imix-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.30 19.16 2. 5.43 19.64

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.31 5.86 2. 5.43 6.00 3. 97 215 342 92 219 338 4. 102 156 212 91 156 206 5. 175 214 235 137 171 236
64b-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.18 5.72 2. 5.23 5.78 3. 99 203 299 103 210 330 4. 84 135 196 71 106 129 5. 134 159 179 97 134 154
1518b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 81 198 308 76 209 295 4. 79 127 150 79 132 235 5. 151 186 213 126 181 198
imix-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 5.38 18.43 2. 5.47 18.71
imix-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes128gcm-ndrpdr	1. 4.99 17.06 2. 5.11 17.50

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.22 5.77 2. 5.22 5.77 3. 90 221 348 110 235 355 4. 101 161 255 117 206 274 5. 154 219 249 104 169 180
64b-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.24 5.79 2. 5.27 5.82 3. 95 213 316 122 242 362 4. 73 113 150 70 121 160 5. 144 164 179 131 180 209
1518b-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 82 186 293 71 212 332 4. 98 167 240 87 144 179 5. 159 199 216 135 178 192
imix-2t2c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.41 18.51 2. 5.46 18.70
imix-2t4c-avf-ethip4ipsec8tnlswasync- scheduler-ip4base-int-aes256gcm-ndrpdr	1. 5.00 17.12 2. 5.05 17.30

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  2.85       3.69 
 2.  2.92       3.78 
  
 3.   22   73   88        22   84  101  
 4.   87  143  203        69  164  202  
 5.  183  254  309       187  252  329

 1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  0.88      11.35 
 2.  0.88      11.35 
  
 3.   46  112  136        45   88  123  
 4.  100  380  428       120  372  467  
 5.  542  727  870       542  706  875

 imix-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  1.78       6.45 
 2.  1.80       6.52

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.88 4.28 2. 4.26 4.71 3. 19 37 68 19 50 70 4. 49 82 109 39 75 88 5. 122 168 506 134 180 563
64b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.11 7.85 2. 7.34 8.10 3. 24 53 70 27 58 81 4. 45 58 70 46 58 68 5. 95 115 137 93 112 131
64b-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 12.90 14.25 2. 13.17 14.54 3. 29 53 69 26 49 69 4. 45 57 68 46 62 75 5. 138 170 202 138 170 204
1518b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.87 23.87 2. 1.87 23.87 3. 24 58 74 24 39 58 4. 52 115 150 48 101 121 5. 169 241 288 154 228 277
1518b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.21 40.87 2. 3.21 40.87 3. 24 40 63 28 62 83 4. 62 85 100 43 61 75 5. 144 172 197 129 152 170
imix-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.71 9.29 2. 2.80 9.57
imix-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.84 16.56 2. 4.84 16.56
imix-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.92 30.52 2. 8.92 30.52

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.39 3.74 2. 3.67 4.06 3. 19 52 79 19 45 69 4. 60 96 122 60 117 155 5. 128 173 819 127 174 881
64b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 6.30 6.95 2. 6.42 7.09 3. 24 55 84 26 55 81 4. 47 69 82 47 63 72 5. 109 142 181 110 141 178
64b-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 11.14 12.29 2. 11.19 12.36 3. 31 54 73 30 52 80 4. 42 53 64 42 55 66 5. 111 132 149 111 131 149
1518b-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.74 22.18 2. 1.75 22.29 3. 31 57 75 24 34 60 4. 49 97 124 40 119 141 5. 181 233 262 157 205 231
1518b-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.07 39.06 2. 3.07 39.06 3. 24 50 79 24 42 61 4. 48 80 107 85 108 120 5. 135 176 202 141 177 195
imix-2t1c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.47 8.45 2. 2.47 8.45
imix-4t2c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.55 15.58 2. 4.55 15.58
imix-8t4c-ethip4ipsec10000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.26 28.28 2. 8.26 28.28

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  3.06       3.97 
 2.  3.06       3.97 
  
 3.   22   51   72        22   77   95  
 4.   64  140  153        79  190  209  
 5.  181  226  275       184  238  288

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  0.90      11.69 
 2.  0.90      11.69 
  
 3.   47   95  125        43  111  147  
 4.  158  283  341       142  291  352  
 5.  399  497  567       388  512  603

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  1.94       7.00 
 2.  1.94       7.00

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.05 5.57 2. 5.05 5.57 3. 19 54 82 18 60 77 4. 49 73 87 39 108 123 5. 104 122 135 76 116 131
64b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.90 10.93 2. 9.95 10.98 3. 23 48 75 21 54 77 4. 51 66 80 45 57 68 5. 91 107 119 91 106 116
64b-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 21.12 23.32 2. 21.44 23.67 3. 34 52 77 34 54 73 4. 42 50 57 42 50 57 5. 105 124 140 107 126 141
1518b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.77 35.27 2. 2.77 35.27 3. 29 51 78 25 53 68 4. 58 82 98 53 90 115 5. 154 206 225 142 167 189
1518b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 23 41 67 24 46 68 4. 48 62 76 49 83 95 5. 81 100 110 77 91 100
imix-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.11 14.07 2. 4.11 14.07
imix-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 8.13 27.81 2. 8.13 27.81
imix-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.74 5.23 2. 4.74 5.23 3. 19 45 65 18 34 44 4. 49 70 80 47 81 101 5. 107 132 155 100 131 148
64b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.39 10.37 2. 9.54 10.53 3. 22 47 73 20 38 67 4. 47 57 66 49 61 73 5. 97 113 128 96 113 128
64b-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 20.44 22.57 2. 20.44 22.57 3. 33 51 74 33 52 68 4. 42 50 57 42 50 57 5. 135 170 202 136 171 204
1518b-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.56 32.65 2. 2.56 32.65 3. 28 51 74 23 56 83 4. 61 133 156 57 130 152 5. 129 161 188 147 176 193
1518b-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 28 67 83 26 55 80 4. 51 86 102 55 74 86 5. 80 96 106 97 131 146
imix-2t1c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.91 13.38 2. 3.91 13.38
imix-4t2c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.78 26.63 2. 7.78 26.63
imix-8t4c-ethip4ipsec1000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr¶

IPv4 IPsec tunnel mode performance test suite.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  1.08       1.20 
 2.  1.10       1.22 
  
 3.   23   59   80        22   42   88  
 4.  133  549  750       147  417  604  
 5.  549  843 1118       569  879 1186

 1518b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  0.93      11.83 
 2.  0.93      11.83 
  
 3.   27   63   91        27   47   75  
 4.   67  243  349        61  208  307  
 5.  294  488  596       283  504  663

 imix-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  1.03       3.54 
 2.  1.04       3.56

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  3.71       4.80 
 2.  3.73       4.83 
  
 3.   20   43   63        21   60   71  
 4.   58   99  137        56  127  149  
 5.  139  172  193       142  184  208

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  0.98      12.68 
 2.  0.98      12.68 
  
 3.   45   71   90        42   82   98  
 4.  100  190  230        80  274  347  
 5.  290  411  499       495  638  716

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  2.09       7.56 
 2.  2.11       7.63

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.17 7.92 2. 7.24 8.00 3. 17 38 69 17 71 91 4. 41 58 69 59 102 120 5. 74 91 108 102 123 135
64b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.36 8.13 2. 7.44 8.21 3. 21 50 68 24 60 75 4. 37 51 64 42 74 91 5. 70 83 93 91 113 126
64b-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.37 8.14 2. 7.45 8.22 3. 24 50 68 33 62 78 4. 44 71 81 41 66 83 5. 82 102 112 71 89 100
1518b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.58 45.56 2. 3.61 46.01 3. 22 55 72 21 41 70 4. 45 80 113 56 117 125 5. 131 146 158 155 194 209
1518b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 21 37 58 21 50 69 4. 64 85 104 64 102 120 5. 115 135 143 122 132 141
imix-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.50 18.83 2. 5.56 19.02
imix-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.59 19.14 2. 5.65 19.33
imix-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.63 19.25 2. 5.68 19.45

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.13 7.88 2. 7.21 7.96 3. 17 49 75 23 54 68 4. 54 107 125 54 92 109 5. 94 121 137 91 117 141
64b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.29 8.05 2. 7.33 8.09 3. 22 50 74 33 54 74 4. 34 57 69 38 56 73 5. 63 77 88 78 94 107
64b-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.28 8.04 2. 7.36 8.12 3. 22 49 73 27 51 73 4. 42 67 86 42 68 78 5. 91 111 126 80 99 112
1518b-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.36 42.80 2. 3.39 43.23 3. 21 70 80 22 49 64 4. 53 84 112 58 87 99 5. 139 157 169 140 157 169
1518b-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.74 47.59 2. 3.77 48.07 3. 21 45 68 21 41 61 4. 51 73 84 52 101 125 5. 123 151 166 140 163 179
imix-2t1c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.34 18.29 2. 5.40 18.48
imix-4t2c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.48 18.77 2. 5.54 18.96
imix-8t4c-ethip4ipsec1tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.47 18.72 2. 5.53 18.91

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr¶

IPv4 IPsec tunnel mode performance test suite.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  6.16       6.80 
 2.  6.22       6.87 
  
 3.   17   97  118        17   50   72  
 4.   66  126  137        68  130  141  
 5.  126  159  180       108  141  162

 1518b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  3.16      40.28 
 2.  3.19      40.69 
  
 3.   22   52   78        23   44   71  
 4.   77   99  110        44  104  118  
 5.  142  159  173       128  153  175

 imix-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr

 1.  4.88      16.71 
 2.  4.91      16.80

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.76 6.18 2. 4.91 6.36 3. 22 88 117 22 54 69 4. 76 149 161 78 153 186 5. 111 138 152 153 185 209
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.95 7.71 2. 6.07 7.87 3. 23 95 112 22 73 110 4. 60 106 132 60 117 127 5. 127 147 169 120 139 153
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.38 4.90 2. 0.39 5.00 3. 42 67 82 41 58 85 4. 51 98 122 51 94 105 5. 92 312 388 89 284 328
imix-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.26 4.54 2. 1.26 4.54
imix-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.11 18.46 2. 5.26 19.02

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 6.17 6.81 2. 6.26 6.92 3. 19 59 114 20 86 107 4. 47 97 106 80 122 136 5. 112 142 152 107 132 141
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.88 6.49 2. 6.03 6.66 3. 20 53 67 24 54 75 4. 46 92 101 55 91 102 5. 101 121 129 92 117 142
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 24 55 74 24 49 71 4. 63 88 99 65 87 98 5. 98 118 131 94 123 138
imix-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.48 18.75 2. 5.64 19.32
imix-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 5.05 17.29 2. 5.18 17.73

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 6.20 6.85 2. 6.27 6.92 3. 19 100 115 19 50 60 4. 59 116 124 58 114 123 5. 110 137 150 106 136 150
64b-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.67 6.26 2. 5.81 6.42 3. 33 66 86 32 52 72 4. 55 99 119 50 81 106 5. 88 109 121 82 96 111
1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 24 48 64 24 43 58 4. 68 87 98 52 83 97 5. 106 135 146 100 113 123
imix-2t2c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.53 18.93 2. 5.79 19.80
imix-2t4c-ethip4ipsec1tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 5.00 17.10 2. 5.07 17.36

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.64 6.01 2. 4.73 6.13 3. 23 43 56 22 42 64 4. 97 143 152 48 132 153 5. 142 182 218 142 195 230
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.01 6.49 2. 5.06 6.56 3. 23 55 77 24 52 66 4. 58 99 113 52 84 101 5. 150 170 189 94 143 171
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.41 5.28 2. 0.42 5.39 3. 40 66 97 41 65 79 4. 55 89 116 51 87 145 5. 93 182 266 89 273 357
imix-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.20 4.33 2. 1.20 4.35
imix-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.53 16.36 2. 4.64 16.78

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.96 5.47 2. 5.08 5.61 3. 20 57 65 19 29 74 4. 62 84 99 38 83 97 5. 149 177 200 70 150 180
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.86 5.37 2. 4.89 5.40 3. 22 47 68 20 33 49 4. 51 72 88 54 76 93 5. 140 166 185 86 139 164
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 25 57 83 26 56 81 4. 82 128 149 75 101 117 5. 179 198 212 157 195 213
imix-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.54 15.55 2. 4.63 15.86
imix-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.33 14.83 2. 4.40 15.06

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.95 5.47 2. 5.00 5.52 3. 19 35 56 19 36 54 4. 58 87 106 37 91 115 5. 129 159 182 69 105 137
64b-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.87 5.37 2. 4.89 5.40 3. 20 31 55 20 40 56 4. 56 75 87 39 74 102 5. 136 162 180 80 130 154
1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 34 57 84 25 62 88 4. 82 130 157 66 105 123 5. 192 221 237 162 217 254
imix-2t2c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.54 15.53 2. 4.63 15.86
imix-2t4c-ethip4ipsec2tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.35 14.88 2. 4.41 15.10

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  2.07       2.68 
 2.  2.12       2.75 
  
 3.   23   48   63        23   41   61  
 4.   84  155  205        82  215  263  
 5.  233  317  384       244  322  399

 1518b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  0.80      10.34 
 2.  0.80      10.34 
  
 3.   42   98  122        42   82  101  
 4.  134  263  357       144  345  430  
 5.  558  818  938       545  742  906

 imix-2t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  1.43       5.17 
 2.  1.45       5.25

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.75 3.04 2. 2.75 3.04 3. 19 46 95 19 40 55 4. 70 176 200 56 166 251 5. 151 186 248 146 184 263
64b-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.08 5.61 2. 5.08 5.61 3. 20 53 69 20 47 77 4. 49 68 86 50 71 85 5. 120 138 156 104 117 138
64b-8t4c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.32 10.28 2. 9.36 10.34 3. 28 48 75 30 46 74 4. 56 67 82 42 58 71 5. 104 122 139 105 125 143
1518b-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 1.71 21.81 2. 1.71 21.81 3. 24 47 74 24 64 76 4. 60 94 122 43 148 165 5. 175 216 263 166 267 291
1518b-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.13 39.87 2. 3.13 39.87 3. 24 61 77 24 90 128 4. 55 85 99 39 149 160 5. 167 207 232 186 229 249
imix-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.24 7.67 2. 2.26 7.75
imix-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.31 14.75 2. 4.31 14.75
imix-8t4c-ethip4ipsec40000tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.76 26.54 2. 7.76 26.54

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.58 2.85 2. 2.58 2.85 3. 19 66 84 19 65 82 4. 59 155 237 57 199 234 5. 206 300 375 229 307 379
64b-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.78 5.28 2. 4.78 5.28 3. 20 51 84 20 45 72 4. 54 84 104 53 95 110 5. 116 142 164 95 140 155
64b-8t4c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.85 9.77 2. 8.85 9.77 3. 20 37 58 28 56 81 4. 48 62 72 48 58 68 5. 105 123 142 104 124 141
1518b-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 1.59 20.21 2. 1.59 20.21 3. 27 53 81 27 57 74 4. 41 116 145 52 89 109 5. 188 258 297 170 223 273
1518b-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.91 37.09 2. 2.91 37.09 3. 24 52 85 24 48 58 4. 54 100 131 51 89 109 5. 162 212 243 144 187 207
imix-2t1c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.12 7.27 2. 2.16 7.38
imix-4t2c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.08 13.97 2. 4.08 13.97
imix-8t4c-ethip4ipsec40000tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.37 25.23 2. 7.44 25.48

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  3.12       4.04 
 2.  3.17       4.10 
  
 3.   21   68  117        20   57  133  
 4.   59   90  127        60   84  115  
 5.  178  251  290       170  241  309

 1518b-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  0.91      11.71 
 2.  0.91      11.77 
  
 3.   57  111  139        42   95  126  
 4.  140  385  481       156  342  445  
 5.  449  658  798       423  614  765

 imix-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  1.91       6.91 
 2.  1.93       6.99

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 6.07 6.70 2. 6.13 6.77 3. 19 47 71 17 34 67 4. 53 68 75 34 72 84 5. 104 142 172 93 139 168
64b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 12.05 13.31 2. 12.30 13.58 3. 28 51 80 26 50 70 4. 41 53 64 44 57 68 5. 90 116 132 83 111 128
64b-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 24.07 26.57 2. 24.68 27.25 3. 28 47 64 32 51 72 4. 42 54 64 41 53 64 5. 87 131 169 87 131 167
1518b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.09 39.39 2. 3.12 39.79 3. 22 48 81 23 55 86 4. 56 75 90 40 87 100 5. 158 200 223 155 211 262
1518b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 21 36 50 22 53 75 4. 42 71 89 48 65 85 5. 74 89 98 77 98 107
imix-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.68 16.01 2. 4.70 16.09
imix-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.14 31.28 2. 9.23 31.60
imix-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.98 6.60 2. 6.04 6.67 3. 17 55 75 17 38 58 4. 45 90 102 51 77 90 5. 107 146 172 89 138 173
64b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 11.78 13.01 2. 11.96 13.20 3. 31 50 79 29 53 71 4. 42 55 66 41 53 63 5. 86 110 124 80 107 121
64b-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 23.49 25.94 2. 24.09 26.59 3. 33 58 77 34 56 72 4. 42 53 64 43 54 64 5. 87 132 168 88 132 167
1518b-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.92 37.19 2. 2.95 37.56 3. 22 56 82 21 45 73 4. 54 78 97 48 98 113 5. 183 240 278 172 236 259
1518b-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 23 53 73 22 47 77 4. 45 68 92 51 81 106 5. 79 98 113 76 103 116
imix-2t1c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.55 15.57 2. 4.60 15.73
imix-4t2c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 8.94 30.58 2. 8.94 30.58
imix-8t4c-ethip4ipsec40tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 14.32 49.00 2. 14.32 49.00

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR)

 64b-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  2.56       3.32 
 2.  2.57       3.33 
  
 3.   20   60   82        20   42   60  
 4.   66  144  198        51  148  204  
 5.  180  225  303       155  254  322

 1518b-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  0.78      10.03 
 2.  0.78      10.08 
  
 3.   43   72  103        47   81  114  
 4.   82  219  282        76  215  257  
 5.  406  547  629       267  562  704

 imix-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr

 1.  1.54       5.57 
 2.  1.55       5.60

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.95 5.46 2. 5.00 5.52 3. 17 59 73 17 43 73 4. 47 68 92 32 57 68 5. 72 103 148 73 106 152
64b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 5.72 6.31 2. 5.83 6.44 3. 18 47 67 17 27 55 4. 35 64 80 28 61 82 5. 83 106 121 41 88 127
64b-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 9.74 10.75 2. 9.89 10.91 3. 17 34 60 17 40 69 4. 36 56 73 36 60 79 5. 62 107 128 48 104 139
1518b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.46 31.29 2. 2.48 31.61 3. 23 46 65 21 48 80 4. 56 108 142 45 100 159 5. 153 205 232 127 174 206
1518b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 2.98 37.92 2. 3.01 38.30 3. 22 47 73 21 50 81 4. 40 99 120 34 71 102 5. 139 186 218 63 134 184
imix-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 3.70 12.67 2. 3.72 12.73
imix-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 4.36 14.91 2. 4.42 15.14
imix-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes128gcm-ndrpdr	1. 7.39 25.29 2. 7.50 25.68

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.85 5.36 2. 4.91 5.42 3. 17 48 67 17 22 52 4. 35 91 120 38 69 84 5. 78 124 163 79 124 188
64b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 5.71 6.30 2. 5.77 6.37 3. 25 51 71 17 29 50 4. 35 63 78 31 59 78 5. 84 105 122 41 90 116
64b-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 9.57 10.57 2. 9.76 10.78 3. 18 39 65 17 44 74 4. 40 65 79 32 56 80 5. 63 109 131 43 103 139
1518b-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.32 29.56 2. 2.34 29.84 3. 21 35 70 21 38 70 4. 48 76 97 48 84 99 5. 136 177 207 97 163 192
1518b-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 2.81 35.76 2. 2.84 36.12 3. 23 50 74 21 35 80 4. 43 62 82 30 64 90 5. 135 176 196 63 122 161
imix-2t1c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 3.59 12.28 2. 3.61 12.34
imix-4t2c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 4.28 14.64 2. 4.30 14.71
imix-8t4c-ethip4ipsec4tnlsw- ip4base-int-aes256gcm-ndrpdr	1. 7.22 24.70 2. 7.33 25.08

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.63 6.00 2. 4.74 6.15 3. 23 76 94 22 34 51 4. 56 73 119 79 130 145 5. 150 194 232 131 176 212
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 5.03 6.52 2. 5.03 6.52 3. 26 53 77 25 58 75 4. 60 85 107 58 85 98 5. 150 171 189 103 141 176
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.42 5.42 2. 0.42 5.42 3. 45 74 101 41 57 71 4. 54 76 126 62 97 201 5. 117 284 378 159 339 527
imix-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.14 4.13 2. 1.17 4.21
imix-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.47 16.15 2. 4.56 16.48

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.95 5.47 2. 5.05 5.58 3. 20 67 82 19 37 56 4. 46 110 126 52 82 95 5. 133 181 203 97 147 182
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.83 5.34 2. 4.87 5.37 3. 21 47 63 20 40 62 4. 55 78 94 50 68 96 5. 128 155 174 101 141 171
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 31 50 73 24 52 67 4. 68 140 156 65 110 136 5. 197 218 234 138 185 221
imix-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.62 15.83 2. 4.65 15.90
imix-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.34 14.84 2. 4.40 15.07

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.92 5.43 2. 5.00 5.52 3. 19 66 81 19 26 48 4. 45 100 122 42 71 84 5. 127 166 188 86 118 179
64b-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.87 5.38 2. 4.91 5.42 3. 22 43 56 20 43 58 4. 58 93 117 57 84 105 5. 137 164 188 101 148 179
1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 24 42 66 24 40 71 4. 75 125 160 67 124 149 5. 190 214 233 165 212 252
imix-2t2c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.63 15.86 2. 4.66 15.94
imix-2t4c-ethip4ipsec4tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.31 14.76 2. 4.40 15.06

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.59 5.94 2. 4.66 6.03 3. 23 50 79 23 88 110 4. 58 102 129 45 88 107 5. 138 171 201 109 159 186
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.98 6.45 2. 5.00 6.48 3. 23 49 69 23 46 69 4. 71 87 102 46 82 103 5. 149 173 189 93 125 175
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 0.42 5.37 2. 0.43 5.56 3. 41 80 105 40 49 75 4. 54 115 207 60 108 127 5. 625 970 1223 195 394 516
imix-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 1.14 4.11 2. 1.16 4.21
imix-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128cbc-hmac512sha-ndrpdr	1. 4.47 16.17 2. 4.59 16.58

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.96 5.48 2. 5.06 5.59 3. 20 50 74 20 48 61 4. 55 96 115 49 91 110 5. 168 191 207 99 155 171
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.81 5.31 2. 4.83 5.34 3. 20 42 57 20 44 58 4. 56 81 95 35 71 96 5. 140 165 184 79 140 167
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 24 40 52 23 40 75 4. 75 101 113 69 98 115 5. 190 215 231 139 175 191
imix-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.58 15.67 2. 4.58 15.67
imix-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes128gcm-ndrpdr	1. 4.23 14.49 2. 4.36 14.93

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr¶

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

[Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular topology with single links between nodes.
[Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.
[Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.
[Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to number of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG node interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

[Ref] Applicable standard specifications: RFC4303 and RFC2544.

Test Name	Throughput: 1. Mpps Gbps (NDR) 2. Mpps Gbps (PDR) One-Way Latency Percentiles in uSec at %PDR load, one set per each direction: 3. P50 P90 P99 P50 P90 P99 (10% PDR) 4. P50 P90 P99 P50 P90 P99 (50% PDR) 5. P50 P90 P99 P50 P90 P99 (90% PDR)
64b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.92 5.44 2. 5.00 5.52 3. 20 31 59 19 25 46 4. 51 98 111 55 88 106 5. 132 178 211 95 169 193
64b-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.82 5.32 2. 4.86 5.36 3. 24 50 64 20 44 60 4. 62 97 109 46 65 88 5. 144 164 182 78 123 152
1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 3.85 49.00 2. 3.85 49.00 3. 27 49 74 24 52 77 4. 74 113 127 73 100 119 5. 203 231 250 139 177 198
imix-2t2c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.53 15.51 2. 4.59 15.72
imix-2t4c-ethip4ipsec8tnlswasync-scheduler- ip4base-int-aes256gcm-ndrpdr	1. 4.28 14.66 2. 4.39 15.03