3n-icx-xxv710

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.82       3.66 
 2.  2.97       3.85 
  
 3.   58  146  247        45  145  252  
 4.  119  206  322        85  164  214  
 5.  177  239  300       159  215  264  

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.90      11.67 
 2.  0.91      11.73 
  
 3.  130  235  334       151  253  336  
 4.  200  305  385       172  273  336  
 5.  441  573  660       382  476  576  

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.83       6.60 
 2.  1.93       6.98

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.96       4.37 
 2.  4.60       5.08 
  
 3.   61  166  272        48  154  251  
 4.   93  153  173       112  138  166  
 5.  103  134  176        91  120  159  

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.77       8.57 
 2.  8.29       9.15 
  
 3.   59  137  244        61  139  213  
 4.   42   65   82        42   67   89  
 5.   86  103  119        84  102  118  

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 15.23      16.81 
 2. 15.54      17.15 
  
 3.   21   29   35        18   22   29  
 4.   39   50   57        40   49   57  
 5.   90  105  120        88  105  118  

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.08      26.50 
 2.  2.18      27.72 
  
 3.   76  181  267        69  168  201  
 4.   75  112  177        83  125  148  
 5.  115  185  219       124  190  257  

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.81      48.51 
 2.  3.85      49.00 
  
 3.   78  184  267        69  193  297  
 4.   72  113  137        71  110  128  
 5.  114  138  155       119  147  169  

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.98      10.20 
 2.  3.34      11.43 

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.76      19.71 
 2.  5.85      20.01 

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 10.41      35.64 
 2. 10.41      35.64

25ge2p1xxv710-avf-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.42       3.78 
 2.  4.02       4.43 
  
 3.   67  173  278        35  153  266  
 4.   63  134  186        76  130  168  
 5.  107  145  401       105  147  347  

 64b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.83       7.54 
 2.  7.39       8.16 
  
 3.   62  158  242        85  150  207  
 4.   50   77   96        48   71   94  
 5.   95  115  134        96  116  138  

 64b-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 13.11      14.48 
 2. 13.38      14.77 
  
 3.   22   31   38        21   30   35  
 4.   38   47   54        38   48   55  
 5.  119  145  171       117  142  168  

 1518b-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.90      24.15 
 2.  1.97      25.14 
  
 3.   92  177  250       101  141  191  
 4.   83  141  169        69  113  133  
 5.  144  228  267       134  195  248  

 1518b-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.55      45.16 
 2.  3.58      45.61 
  
 3.   52  160  251        73  185  278  
 4.   59   94  121        77  114  149  
 5.  113  133  147       120  149  167  

 imix-2t1c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.70       9.26 
 2.  3.02      10.33 

 imix-4t2c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.11      17.49 
 2.  5.19      17.76 

 imix-8t4c-avf-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  9.58      32.78 
 2.  9.58      32.78

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.02       3.92 
 2.  3.02       3.92 
  
 3.   81  184  303        43  166  269  
 4.  131  230  301       115  202  263  
 5.  184  255  298       216  324  389  

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.93      12.06 
 2.  0.93      12.06 
  
 3.  152  255  353       119  226  315  
 4.  164  243  343       160  262  377  
 5.  402  499  569       385  500  573  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.99       7.21 
 2.  2.00       7.25

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.01       5.53 
 2.  5.04       5.56 
  
 3.   80  213  323        48  164  266  
 4.   80  154  186        72  122  157  
 5.   74  123  187       129  211  227  

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  9.78      10.80 
 2.  9.88      10.91 
  
 3.   61  135  218        88  128  210  
 4.   51   72   86        45  104  116  
 5.   85  102  118        80   97  109  

 64b-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 22.20      24.51 
 2. 22.73      25.09 
  
 3.   20   25   32        23   29   33  
 4.   40   47   53        40   46   52  
 5.   96  112  125        95  111  124  

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.79      35.53 
 2.  2.80      35.71 
  
 3.   66  162  244        98  203  294  
 4.   69  105  126        82  144  198  
 5.  125  147  166       118  155  173  

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   58  153  228        56  164  202  
 4.   48   89  124        52   79   99  
 5.   72  108  123        75   96  106  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.30      14.73 
 2.  4.33      14.81 

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  8.67      29.66 
 2.  8.71      29.81 

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 14.32      49.00 
 2. 14.32      49.00

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.74       5.23 
 2.  4.74       5.23 
  
 3.   73  167  279        50  156  264  
 4.   95  130  142       103  123  137  
 5.   94  132  169       122  158  207  

 64b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  9.15      10.10 
 2.  9.19      10.15 
  
 3.   37  131  187        46   96  203  
 4.   57   66   75        38   54   68  
 5.   85  101  116        84  100  112  

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.63      33.44 
 2.  2.63      33.44 
  
 3.   53  164  257        54  154  174  
 4.   58  134  147        65   96  137  
 5.  129  154  175       115  145  172  

 1518b-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   87  156  229        57  169  258  
 4.   60   84  125        58   74   83  
 5.   67   94  105        76   91  102  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.10      14.05 
 2.  4.13      14.12 

 imix-4t2c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.09      27.69 
 2.  8.17      27.97 

 imix-8t4c-avf-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 14.32      49.00 
 2. 14.32      49.00

25ge2p1xxv710-avf-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.98       1.09 
 2.  0.99       1.09 
  
 3.   93  199  308       103  189  284  
 4.  185  537  716       193  424  599  
 5.  594  897 1088       575  862 1088  

 1518b-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.84      10.75 
 2.  0.84      10.75 
  
 3.  120  222  316       102  210  305  
 4.  121  272  384       179  335  476  
 5.  433  670  849       425  649  796  

 imix-2t1c-avf-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.94       3.23 
 2.  0.94       3.23

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.91       5.07 
 2.  3.95       5.12 
  
 3.  106  195  274        87  180  267  
 4.  121  189  213        72  137  171  
 5.  158  210  234       173  213  248  

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.01      13.09 
 2.  1.03      13.29 
  
 3.  110  191  288       113  221  297  
 4.  121  196  290       168  231  316  
 5.  321  395  452       449  579  682  

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.25       8.12 
 2.  2.26       8.16

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.77       8.58 
 2.  7.89       8.71 
  
 3.   56  151  194       103  195  254  
 4.   51   87  103        48   71   93  
 5.  103  126  140       101  126  142  

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.80       8.61 
 2.  7.88       8.70 
  
 3.   66  143  245        46   86  188  
 4.   40   57   70        50   70   82  
 5.   85  103  113        77   94  104  

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.83       8.64 
 2.  7.87       8.69 
  
 3.   18   29   44        18   24   36  
 4.   31   49   67        38   61   76  
 5.   72   85   97        83  108  123  

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   85  180  248        97  178  248  
 4.   56  107  121        57   90  122  
 5.  114  151  160       128  148  158  

 1518b-4t2c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   66  152  235        95  177  238  
 4.   49   66   78        57   79  124  
 5.   89  116  123        88  102  109  

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.47      22.14 
 2.  6.50      22.25 

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.53      22.33 
 2.  6.59      22.56 

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.55      22.41 
 2.  6.58      22.52

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.67       8.46 
 2.  7.70       8.51 
  
 3.   76  165  260       108  196  273  
 4.   60   91  109        72  125  149  
 5.   81   99  115       118  141  154  

 64b-4t2c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.67       8.46 
 2.  7.74       8.55 
  
 3.   55   94  165        63  111  178  
 4.   39   60   75        48   68   85  
 5.   77   92  107        85  104  113  

 64b-8t4c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.66       8.46 
 2.  7.74       8.54 
  
 3.   18   19   35        18   21   40  
 4.   32   44   56        36   61   73  
 5.   86  113  131        67   85   95  

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.65      46.43 
 2.  3.68      46.90 
  
 3.  102  179  253        98  171  233  
 4.   55   75  102        55  100  108  
 5.  145  175  190       147  165  178  

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.18      21.15 
 2.  6.24      21.36 

 imix-4t2c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.33      21.65 
 2.  6.36      21.76 

 imix-8t4c-avf-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.34      21.69 
 2.  6.40      21.91

25ge2p1xxv710-avf-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  6.47       7.14 
 2.  6.53       7.21 
  
 3.   81  180  268        48  162  241  
 4.   59   77   95        89  138  160  
 5.  100  121  138        92  113  132  

 1518b-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.42      43.52 
 2.  3.43      43.73 
  
 3.   99  183  252        95  173  235  
 4.   56   86  108        79  108  120  
 5.  123  148  159       123  139  150  

 imix-2t1c-avf-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  5.47      18.73 
 2.  5.50      18.82

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.93       6.39 
 2.  5.00       6.48 
  
 3.  114  217  305       125  218  304  
 4.   90  129  152       123  201  247  
 5.  101  123  151       137  158  175  

 64b-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  6.90       8.95 
 2.  6.90       8.95 
  
 3.   79  168  296        83  144  187  
 4.   70   98  113        73   93  113  
 5.  126  149  172       110  127  140  

 1518b-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.51       6.53 
 2.  0.51       6.57 
  
 3.  154  235  333       145  230  312  
 4.  130  236  322       144  202  285  
 5.  147  324  366       162  229  302  

 imix-2t2c-avf-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.34       4.85 
 2.  1.35       4.90 

 imix-2t4c-avf-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.87      21.23 
 2.  5.90      21.34

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  6.94       7.66 
 2.  6.94       7.66 
  
 3.  124  229  338        78  215  294  
 4.   87  119  133        79  136  157  
 5.  112  137  163        92  109  119  

 64b-2t4c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  6.63       7.31 
 2.  6.69       7.39 
  
 3.   68  197  306        63  152  224  
 4.   63   90  108        59   82   98  
 5.   89  108  120        86  101  112  

 1518b-2t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.  115  172  255       106  147  235  
 4.   69  101  113        64   90   96  
 5.   82   96  105        84  107  115  

 imix-2t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  6.60      22.58 
 2.  6.97      23.86 

 imix-2t4c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.82      19.92 
 2.  6.03      20.64

25ge2p1xxv710-avf-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  7.34       8.10 
 2.  7.41       8.18 
  
 3.  100  220  332       116  225  314  
 4.   82  116  130       106  144  178  
 5.  114  131  156       107  127  149  

 64b-2t4c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  6.56       7.24 
 2.  6.69       7.39 
  
 3.   69  170  279        71  107  139  
 4.   56   73   92        69   95  117  
 5.   89  109  121        88  107  120  

 1518b-2t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   52  152  247        78  171  273  
 4.   55   75   88        69   94  157  
 5.   86  106  114        96  110  125  

 imix-2t2c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  6.65      22.77 
 2.  6.96      23.82 

 imix-2t4c-avf-ethip4ipsec1tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.92      20.27 
 2.  6.07      20.78

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.86       6.30 
 2.  4.91       6.36 
  
 3.  115  247  366       123  245  357  
 4.  131  232  281       108  214  236  
 5.  137  164  198       114  172  215  

 64b-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.57       7.22 
 2.  5.57       7.22 
  
 3.   79  203  323        86  220  327  
 4.   71  101  131        64  105  128  
 5.  149  190  214       112  156  198  

 1518b-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.48       6.24 
 2.  0.50       6.40 
  
 3.  157  257  338       171  274  376  
 4.  137  246  314       124  244  335  
 5.  147  261  322       147  265  361  

 imix-2t2c-avf-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.22       4.41 
 2.  1.24       4.50 

 imix-2t4c-avf-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.48      19.80 
 2.  5.56      20.10

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.51       6.08 
 2.  5.51       6.08 
  
 3.  104  217  350        93  207  343  
 4.  112  186  260       107  188  251  
 5.  146  199  219       125  176  229  

 64b-2t4c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.39       5.95 
 2.  5.47       6.04 
  
 3.   81  208  330        93  211  332  
 4.   70  113  157        77  155  220  
 5.  132  164  191       118  163  223  

 1518b-2t2c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   71  192  300       110  222  332  
 4.   69  108  133        79  163  214  
 5.  134  156  183       109  142  155  

 imix-2t2c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.67      19.40 
 2.  5.75      19.69 

 imix-2t4c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.20      17.79 
 2.  5.28      18.06

25ge2p1xxv710-avf-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.50       6.07 
 2.  5.56       6.14 
  
 3.   80  208  330        97  209  339  
 4.  102  161  249       107  202  237  
 5.  138  173  209       118  153  172  

 64b-2t4c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.38       5.94 
 2.  5.38       5.94 
  
 3.   97  214  274       107  226  359  
 4.   79  106  148        73  115  169  
 5.  127  153  206       105  165  193  

 1518b-2t2c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.  113  242  314        95  232  312  
 4.  105  167  206        82  127  171  
 5.  144  190  207       121  151  166  

 imix-2t2c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.74      19.63 
 2.  5.76      19.73 

 imix-2t4c-avf-ethip4ipsec2tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.26      18.00 
 2.  5.34      18.27

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.12       2.74 
 2.  2.23       2.90 
  
 3.   74  207  307        55  171  266  
 4.  119  222  285       184  291  376  
 5.  239  362  532       295  452  549  

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.82      10.56 
 2.  0.82      10.62 
  
 3.  154  266  363       133  239  318  
 4.  177  310  404       148  246  354  
 5.  357  451  543       353  486  569  

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.48       5.35 
 2.  1.52       5.49

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.78       3.07 
 2.  2.79       3.08 
  
 3.   71  176  285        47  177  284  
 4.   99  190  246       130  246  343  
 5.  169  257  312       160  266  355  

 64b-4t2c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.09       5.62 
 2.  5.11       5.65 
  
 3.   92  190  281        77  180  270  
 4.   65  112  149        58  113  146  
 5.   85  105  122       105  119  133  

 64b-8t4c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  9.85      10.87 
 2.  9.85      10.87 
  
 3.   19   33   42        19   32   39  
 4.   42   58   68        43   57   65  
 5.  101  119  132       101  118  132  

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.72      21.89 
 2.  1.73      22.00 
  
 3.   99  164  250        96  201  289  
 4.   74  150  192        86  169  221  
 5.  152  211  247       167  221  245  

 1518b-4t2c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.28      41.72 
 2.  3.31      42.14 
  
 3.   93  191  285        76  167  198  
 4.   82  117  143        75  102  134  
 5.  125  153  172       121  146  168  

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.32       7.95 
 2.  2.33       7.99 

 imix-4t2c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.49      15.37 
 2.  4.56      15.60 

 imix-8t4c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  8.58      29.37 
 2.  8.58      29.37

25ge2p1xxv710-avf-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.59       2.86 
 2.  2.61       2.88 
  
 3.   75  188  295        46  164  267  
 4.  121  225  307       135  251  350  
 5.  191  272  344       172  212  232  

 64b-4t2c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.84       5.35 
 2.  4.87       5.38 
  
 3.   50  169  253        70  179  255  
 4.   56   81  109        57   78  102  
 5.   82  110  134       104  120  132  

 64b-8t4c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  9.21      10.17 
 2.  9.31      10.28 
  
 3.   18   27   30        19   31   40  
 4.   57   65   70        37   50   58  
 5.  103  121  135       102  120  135  

 1518b-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.63      20.77 
 2.  1.63      20.77 
  
 3.   96  194  271        98  177  274  
 4.   99  190  264        88  153  223  
 5.  157  237  272       161  223  257  

 1518b-4t2c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.12      39.73 
 2.  3.12      39.73 
  
 3.   93  200  292       112  171  264  
 4.   76  133  146        55   67   83  
 5.  134  175  194       133  162  181  

 imix-2t1c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.24       7.66 
 2.  2.25       7.70 

 imix-8t4c-avf-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.15      27.89 
 2.  8.15      27.89

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.27       4.23 
 2.  3.32       4.30 
  
 3.   75  188  291        71  172  268  
 4.   79  130  191        90  126  203  
 5.  165  224  260       148  214  263  

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.94      12.13 
 2.  0.94      12.19 
  
 3.  127  220  284       152  267  375  
 4.  132  239  321       170  303  405  
 5.  368  524  619       366  540  641  

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.05       7.42 
 2.  2.07       7.50

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.59       7.27 
 2.  6.69       7.38 
  
 3.   45  151  245        86  166  264  
 4.   46   70   88        67  100  128  
 5.  101  143  174        98  135  165  

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 12.76      14.09 
 2. 13.55      14.96 
  
 3.   40   92  114        49   92  126  
 4.   42   54   64        43   54   65  
 5.  100  128  142        90  123  140  

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 26.27      29.00 
 2. 26.80      29.58 
  
 3.   22   31   36        20   29   38  
 4.   43   52   59        43   51   58  
 5.   97  148  189        96  148  188  

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.42      43.57 
 2.  3.42      43.57 
  
 3.   85  183  274        94  184  283  
 4.   61  103  130        69   98  119  
 5.  150  176  194       154  207  223  

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   59  141  194        75  165  262  
 4.   51   74  122        59   94  110  
 5.   63   83   96        67   82   92  

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.50      18.82 
 2.  5.55      19.01 

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 10.24      35.06 
 2. 10.35      35.41 

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 14.32      49.00 
 2. 14.32      49.00

25ge2p1xxv710-avf-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.48       7.15 
 2.  6.54       7.22 
  
 3.   52  145  233        57  170  268  
 4.   64   90  127        60   94  111  
 5.  101  132  148       101  145  173  

 64b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 12.50      13.80 
 2. 13.28      14.66 
  
 3.   49  102  178        56  106  151  
 4.   43   56   66        46   60   71  
 5.  102  129  144        91  126  142  

 64b-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 25.75      28.43 
 2. 26.14      28.86 
  
 3.   22   30   35        23   30   35  
 4.   43   53   60        42   52   59  
 5.   96  145  184        95  145  184  

 1518b-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.21      40.88 
 2.  3.21      40.88 
  
 3.   55  144  228        95  205  294  
 4.   81  114  131        70  113  135  
 5.  145  184  210       143  188  207  

 1518b-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   60  159  183        98  174  287  
 4.   54   79  106        54   74   91  
 5.   69   98  109        73   90  102  

 imix-2t1c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.31      18.19 
 2.  5.37      18.37 

 imix-4t2c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  9.96      34.09 
 2. 10.03      34.33 

 imix-8t4c-avf-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 14.32      49.00 
 2. 14.32      49.00

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.66       3.44 
 2.  2.68       3.47 
  
 3.   89  174  295        54  172  270  
 4.   82  142  216        97  212  305  
 5.  160  212  250       150  190  219  

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.82      10.57 
 2.  0.82      10.63 
  
 3.  119  207  296       107  239  341  
 4.  150  364  403       148  302  406  
 5.  429  609  734       329  470  575  

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.66       6.00 
 2.  1.67       6.04

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.31       5.86 
 2.  5.36       5.92 
  
 3.   73  172  290        43  156  258  
 4.   59   98  144        76  115  150  
 5.   94  115  142       114  145  167  

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.20       6.84 
 2.  6.23       6.88 
  
 3.   69  141  221        53  169  277  
 4.   50   90  149        95  165  183  
 5.   72   95  116        68  111  149  

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 10.57      11.67 
 2. 10.75      11.86 
  
 3.   19   27   36        18   21   29  
 4.   33   47   59        28   42   56  
 5.   56  113  132        34   98  117  

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.76      35.18 
 2.  2.76      35.18 
  
 3.   84  162  254        68  195  277  
 4.   67  106  131        72  126  176  
 5.  163  211  229       116  163  190  

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.27      41.65 
 2.  3.30      42.09 
  
 3.   48  148  248        36  199  294  
 4.   65  137  237        66  155  231  
 5.  123  148  193       103  156  197  

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.38      14.98 
 2.  4.41      15.09 

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.12      17.52 
 2.  5.17      17.70 

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  8.67      29.66 
 2.  8.80      30.11

25ge2p1xxv710-avf-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.21       5.75 
 2.  5.26       5.81 
  
 3.   73  166  272        47  169  273  
 4.   53   86  112        79  157  207  
 5.  106  117  135       111  139  157  

 64b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.10       6.73 
 2.  6.16       6.80 
  
 3.   51  134  215        55  168  272  
 4.   58  105  161        64  122  176  
 5.   85  112  150        60   97  120  

 64b-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 10.38      11.46 
 2. 10.54      11.63 
  
 3.   19   30   38        18   21   33  
 4.   33   48   65        27   40   52  
 5.   61  113  132        32   98  125  

 1518b-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.56      32.58 
 2.  2.58      32.91 
  
 3.   87  175  270        96  195  302  
 4.   61  115  202        76  149  270  
 5.  150  219  258       139  198  239  

 1518b-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.08      39.22 
 2.  3.10      39.42 
  
 3.   59  143  233        30  193  289  
 4.   57  134  191        77  192  263  
 5.  113  152  185        94  171  223  

 imix-2t1c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.23      14.49 
 2.  4.27      14.62 

 imix-4t2c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.95      16.96 
 2.  4.98      17.04 

 imix-8t4c-avf-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.40      28.77 
 2.  8.49      29.06

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.81       6.23 
 2.  4.88       6.32 
  
 3.   75  213  333       112  230  351  
 4.   76  108  134        74  163  201  
 5.  110  148  175       121  171  207  

 64b-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.51       7.14 
 2.  5.60       7.26 
  
 3.   89  193  243        87  227  372  
 4.   76  114  164        96  158  216  
 5.  152  183  202       120  160  191  

 1518b-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.50       6.50 
 2.  0.52       6.66 
  
 3.  153  267  377       170  285  395  
 4.  123  267  377       141  266  390  
 5.  162  315  407       197  344  436  

 imix-2t2c-avf-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.26       4.54 
 2.  1.27       4.61 

 imix-2t4c-avf-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.35      19.35 
 2.  5.49      19.84

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.50       6.07 
 2.  5.56       6.14 
  
 3.   82  213  349        87  218  326  
 4.  120  202  267        85  134  158  
 5.  159  202  225       100  145  167  

 64b-2t4c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.26       5.80 
 2.  5.31       5.86 
  
 3.  114  226  333       109  231  358  
 4.   89  148  225        92  157  232  
 5.  136  166  185       110  185  219  

 1518b-2t2c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   77  209  294        87  228  352  
 4.   81  153  213        78  154  231  
 5.  160  189  210       106  157  180  

 imix-2t2c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.63      19.27 
 2.  5.71      19.56 

 imix-2t4c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.19      17.77 
 2.  5.27      18.04

25ge2p1xxv710-avf-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.42       5.99 
 2.  5.56       6.14 
  
 3.   75  206  330       115  241  355  
 4.   81  138  211        67  129  165  
 5.  159  201  230       109  139  159  

 64b-2t4c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.37       5.93 
 2.  5.37       5.93 
  
 3.  106  252  374       117  236  359  
 4.   84  153  238        82  121  159  
 5.  141  163  184        98  146  162  

 1518b-2t2c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   74  189  302        93  240  357  
 4.   82  116  172        86  127  167  
 5.  142  160  175       114  159  180  

 imix-2t2c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.72      19.59 
 2.  5.75      19.69 

 imix-2t4c-avf-ethip4ipsec4tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.21      17.83 
 2.  5.31      18.19

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.87       6.31 
 2.  4.89       6.34 
  
 3.   94  223  350        80  218  330  
 4.   77  115  137        92  193  222  
 5.  117  149  181       121  174  214  

 64b-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.49       7.11 
 2.  5.49       7.11 
  
 3.   89  216  346       104  227  355  
 4.   80  109  139        77  115  140  
 5.  168  204  226       116  149  173  

 1518b-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.50       6.48 
 2.  0.51       6.60 
  
 3.  133  259  366       150  266  374  
 4.  146  260  370       154  275  386  
 5.  167  350  473       189  301  423  

 imix-2t2c-avf-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.23       4.46 
 2.  1.26       4.55 

 imix-2t4c-avf-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.44      19.68 
 2.  5.57      20.13

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.45       6.01 
 2.  5.53       6.11 
  
 3.  100  216  341        88  197  296  
 4.   97  162  204        71  112  155  
 5.  136  186  205       116  162  209  

 64b-2t4c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.36       5.92 
 2.  5.36       5.92 
  
 3.   95  205  314       102  243  349  
 4.   75  118  160        82  123  155  
 5.  149  191  210       120  175  230  

 1518b-2t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.  100  209  266       111  229  343  
 4.   74  102  180        68  108  199  
 5.  147  185  210       116  171  201  

 imix-2t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.52      18.91 
 2.  5.61      19.19 

 imix-2t4c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes128gcm-ndrpdr 

 1.  5.13      17.55 
 2.  5.23      17.90

25ge2p1xxv710-avf-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.38       5.94 
 2.  5.51       6.08 
  
 3.   89  204  323        80  227  348  
 4.   81  145  237        79  124  150  
 5.  143  187  220       100  150  172  

 64b-2t4c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.30       5.85 
 2.  5.37       5.93 
  
 3.  105  224  352       108  222  332  
 4.   82  148  210        73  142  185  
 5.  149  183  215       128  167  189  

 1518b-2t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   61  164  280        83  203  327  
 4.   79  120  143        81  136  173  
 5.  147  189  215       140  183  198  

 imix-2t2c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.63      19.27 
 2.  5.71      19.56 

 imix-2t4c-avf-ethip4ipsec8tnlswasync- 
 scheduler-ip4base-int-aes256gcm-ndrpdr 

 1.  5.16      17.66 
 2.  5.29      18.10

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.82       3.66 
 2.  2.88       3.73 
  
 3.   20   51   94        20   80   98  
 4.   77  188  213        67  149  183  
 5.  165  233  281       171  251  313  

 1518b-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.89      11.47 
 2.  0.89      11.53 
  
 3.   57  120  149        50   78   94  
 4.  117  269  316       136  241  306  
 5.  500  652  831       480  645  787  

 imix-2t1c-ethip4ipsec10000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.77       6.41 
 2.  1.80       6.51

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.86       4.26 
 2.  4.14       4.57 
  
 3.   17   50   70        17   39  113  
 4.   51  116  141        59  101  128  
 5.  115  162  204       108  151  202  

 64b-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.05       7.79 
 2.  7.34       8.10 
  
 3.   28   53   82        27   51   76  
 4.   44   61   73        42   56   70  
 5.   90  108  132        88  105  126  

 64b-8t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 12.94      14.29 
 2. 13.07      14.43 
  
 3.   31   59   78        25   50   73  
 4.   40   52   66        45   59   72  
 5.  134  167  202       134  166  202  

 1518b-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.80      22.94 
 2.  1.82      23.17 
  
 3.   22   48   80        23   51   69  
 4.   53   99  121        60   92  105  
 5.   96  168  195       115  141  176  

 1518b-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.25      41.36 
 2.  3.25      41.36 
  
 3.   23   55   84        23   47   67  
 4.   67   89  110        52   72   89  
 5.  112  138  160       112  161  197  

 imix-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.65       9.07 
 2.  2.80       9.59 

 imix-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.79      16.38 
 2.  4.79      16.38 

 imix-8t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  8.98      30.73 
 2.  8.98      30.73

25ge2p1xxv710-ethip4ipsec10000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.32       3.66 
 2.  3.76       4.15 
  
 3.   17   61   80        17   46   65  
 4.   59   84  123        47  119  148  
 5.  105  136  989       112  157 1070  

 64b-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.12       6.76 
 2.  6.37       7.03 
  
 3.   26   47   75        30   55   80  
 4.   46   67   85        46   62   77  
 5.  109  141  188       108  138  182  

 64b-8t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 11.15      12.30 
 2. 11.26      12.43 
  
 3.   28   46   59        26   52   74  
 4.   40   52   61        40   51   61  
 5.  112  134  155       113  135  156  

 1518b-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.74      22.10 
 2.  1.74      22.10 
  
 3.   23   56   77        23   39   61  
 4.   38  130  161        47   75   92  
 5.  137  200  226       137  177  203  

 1518b-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.07      39.08 
 2.  3.07      39.08 
  
 3.   23   47   76        26   58   83  
 4.   43   60   73        48   68   79  
 5.  116  150  172       122  146  166  

 imix-2t1c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.43       8.30 
 2.  2.44       8.35 

 imix-4t2c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.50      15.39 
 2.  4.50      15.39 

 imix-8t4c-ethip4ipsec10000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.34      28.53 
 2.  8.34      28.53

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.01       3.90 
 2.  3.01       3.90 
  
 3.   20   89  119        20   56   74  
 4.   80  157  181        82  175  211  
 5.  181  233  295       170  221  266  

 1518b-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.91      11.82 
 2.  0.91      11.82 
  
 3.   49   91  123        49   95  122  
 4.  146  275  338       126  284  347  
 5.  439  552  636       429  510  583  

 imix-2t1c-ethip4ipsec1000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.92       6.93 
 2.  1.92       6.93

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.85       5.36 
 2.  4.85       5.36 
  
 3.   17   30   69        17   25   47  
 4.   56   90  103        41   95  120  
 5.   88  120  147        82  118  132  

 64b-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  9.44      10.42 
 2.  9.44      10.42 
  
 3.   38   63   79        32   67   85  
 4.   59   69   82        57   69   78  
 5.   82   97  109        77   94  106  

 64b-8t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 21.26      23.47 
 2. 21.26      23.47 
  
 3.   35   55   73        35   55   76  
 4.   39   47   55        39   48   55  
 5.   96  116  135        96  116  134  

 1518b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.67      33.97 
 2.  2.67      33.97 
  
 3.   32   63   84        35   69   83  
 4.   58   82   97        51  114  135  
 5.  144  171  191       126  160  190  

 1518b-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   21   39   56        23   54   84  
 4.   48   68   95        46   62   72  
 5.   76   91  102        85  114  122  

 imix-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.96      13.54 
 2.  3.96      13.54 

 imix-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.81      26.72 
 2.  7.81      26.72 

 imix-8t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 14.32      49.00 
 2. 14.32      49.00

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.61       5.08 
 2.  4.61       5.08 
  
 3.   17   39   64        17   34   47  
 4.   49   67   81        66  110  124  
 5.  111  150  176       110  153  169  

 64b-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.63       9.53 
 2.  8.77       9.68 
  
 3.   30   60   78        25   55   81  
 4.   37   53   64        38   58   73  
 5.   81   97  110        78   94  108  

 64b-8t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 19.89      21.95 
 2. 20.09      22.17 
  
 3.   25   50   72        20   49   75  
 4.   39   49   61        40   53   62  
 5.  124  167  208       125  169  210  

 1518b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.51      31.97 
 2.  2.51      31.97 
  
 3.   23   46   72        22   47   65  
 4.   49  113  136        45   94  126  
 5.  127  156  184       178  219  249  

 1518b-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   21   30   55        21   39   51  
 4.   50   69   93        51   89  102  
 5.   85  109  121        92  108  121  

 imix-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.71      12.70 
 2.  3.71      12.70 

 imix-4t2c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.20      24.63 
 2.  7.23      24.73 

 imix-8t4c-ethip4ipsec1000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 14.32      49.00 
 2. 14.32      49.00

25ge2p1xxv710-ethip4ipsec1000tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.97       1.07 
 2.  0.98       1.09 
  
 3.   22   55   90        22   64   90  
 4.   91  527  749       124  387  533  
 5.  545  855 1097       543  991 1263  

 1518b-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.84      10.75 
 2.  0.86      10.97 
  
 3.   25   45   65        26   47   64  
 4.   87  186  249        77  161  253  
 5.  419  731  954       424  639  784  

 imix-2t1c-ethip4ipsec1000tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  0.93       3.18 
 2.  0.94       3.23

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.80       4.93 
 2.  3.84       4.98 
  
 3.   21   28   47        21  103  123  
 4.   58  101  136        87  150  181  
 5.  154  196  205       187  236  279  

 1518b-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.99      12.81 
 2.  1.00      12.88 
  
 3.   41   77   92        43   66   80  
 4.   87  227  272       189  291  318  
 5.  440  541  599       357  493  579  

 imix-2t1c-ethip4ipsec1tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.14       7.73 
 2.  2.15       7.77

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.48       8.25 
 2.  7.51       8.30 
  
 3.   18   37   56        38   65   76  
 4.   59  107  120        40   61   73  
 5.   99  122  138        89  109  129  

 64b-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.60       8.40 
 2.  7.64       8.44 
  
 3.   28   59   77        23   46   71  
 4.   31   46   61        46   72   88  
 5.   68   83   93        85  113  136  

 64b-8t4c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.64       8.44 
 2.  7.68       8.48 
  
 3.   36   55   76        23   52   78  
 4.   38   50   60        39   62   80  
 5.   69   83   93        71   84   95  

 1518b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.63      46.25 
 2.  3.65      46.48 
  
 3.   22   41   72        22   51   81  
 4.   59   80   96        60   92  105  
 5.  147  166  179       130  153  171  

 1518b-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   23   49   75        26   72   86  
 4.   48   88  111        54   97  108  
 5.  108  122  139       109  132  143  

 imix-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.63      19.26 
 2.  5.65      19.35 

 imix-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.71      19.56 
 2.  5.74      19.66 

 imix-8t4c-ethip4ipsec1tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.71      19.56 
 2.  5.74      19.66

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.36       8.13 
 2.  7.40       8.17 
  
 3.   18   39   69        18   46   72  
 4.   43   70   89        45   70   92  
 5.   84  103  116        74   90  103  

 64b-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.51       8.30 
 2.  7.55       8.34 
  
 3.   18   43   77        31   54   78  
 4.   40   56   70        42   59   74  
 5.   72   92  107        75   90  105  

 64b-8t4c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.50       8.28 
 2.  7.54       8.32 
  
 3.   19   67   79        18   54   70  
 4.   39   51   60        45   64   74  
 5.   74   91   99        86  105  120  

 1518b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.41      43.41 
 2.  3.43      43.63 
  
 3.   23   71   83        35   75   84  
 4.   55   94  107        53   74   91  
 5.  138  161  172       124  138  150  

 1518b-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.78      48.12 
 2.  3.80      48.36 
  
 3.   22   63   80        24   60   83  
 4.   55   77   89        43  105  116  
 5.  144  174  186       117  133  147  

 imix-2t1c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.45      18.65 
 2.  5.48      18.75 

 imix-4t2c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.57      19.08 
 2.  5.60      19.17 

 imix-8t4c-ethip4ipsec1tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.56      19.05 
 2.  5.59      19.14

25ge2p1xxv710-ethip4ipsec1tnlsw-ip4base-policy-aes256gcm-ndrpdr

IPv4 IPsec tunnel mode performance test suite.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  6.15       6.79 
 2.  6.21       6.86 
  
 3.   19   45   72        19   46   73  
 4.   66   93  106        59  109  120  
 5.  106  130  147       105  136  153  

 1518b-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  3.16      40.24 
 2.  3.18      40.44 
  
 3.   23   50   87        22   57   78  
 4.   57  106  120        82  173  181  
 5.  165  201  218       138  168  184  

 imix-2t1c-ethip4ipsec1tnlsw- 
 ip4base-policy-aes256gcm-ndrpdr 

 1.  4.86      16.64 
 2.  4.89      16.73

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.73       6.13 
 2.  4.78       6.19 
  
 3.   24   78  107        23  103  124  
 4.   60  106  117        80  131  144  
 5.  120  148  167       151  179  196  

 64b-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  6.09       7.89 
 2.  6.12       7.93 
  
 3.   37   56   70        32   56   73  
 4.   72  104  118        52   82   98  
 5.  113  130  147       105  125  140  

 1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.41       5.35 
 2.  0.42       5.43 
  
 3.   42   83  116        42   46   66  
 4.   66  128  158        66  134  161  
 5.  113  281  373       213  371  441  

 imix-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.16       4.20 
 2.  1.20       4.33 

 imix-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.32      19.24 
 2.  5.40      19.53

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.27       6.92 
 2.  6.40       7.06 
  
 3.   20   58   71        21   76   90  
 4.   54   90  103        56  126  141  
 5.  113  133  143       112  138  148  

 64b-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.04       6.67 
 2.  6.04       6.67 
  
 3.   21   73   85        21   46   75  
 4.   49   82   89        52   68   84  
 5.  111  129  141        85  113  127  

 1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   25   59   80        25   71   87  
 4.   62  106  120        59  107  120  
 5.   87  129  141       104  141  158  

 imix-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.48      18.74 
 2.  5.79      19.80 

 imix-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.99      17.08 
 2.  5.09      17.43

25ge2p1xxv710-ethip4ipsec1tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.36       7.02 
 2.  6.52       7.20 
  
 3.   21   56   71        20   94  110  
 4.   60  108  123        70  126  134  
 5.  111  135  144        98  131  142  

 64b-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.85       6.45 
 2.  5.99       6.62 
  
 3.   22   59   83        42   64   79  
 4.   50   86   99        56   75   89  
 5.  102  127  142        87  119  132  

 1518b-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   25   51   84        34   75   84  
 4.   59   95  108        52   76   86  
 5.  116  136  145       110  124  131  

 imix-2t2c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.35      18.31 
 2.  5.71      19.54 

 imix-2t4c-ethip4ipsec1tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.04      17.25 
 2.  5.17      17.68

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.61       5.98 
 2.  4.71       6.10 
  
 3.   23   48   59        24   63   84  
 4.   49   96  154        81  100  110  
 5.  127  170  196       115  161  184  

 64b-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.19       6.72 
 2.  5.21       6.76 
  
 3.   24   34   58        24   26   49  
 4.   73  103  118        57   89  110  
 5.  220  243  258        61  150  169  

 1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.37       4.77 
 2.  0.38       4.88 
  
 3.   42   73   83        42   47   74  
 4.   57  112  170        58  115  189  
 5.  169  361  501       287  443  569  

 imix-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.17       4.21 
 2.  1.18       4.25 

 imix-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.59      16.59 
 2.  4.68      16.93

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.08       5.61 
 2.  5.21       5.76 
  
 3.   21   51   74        20   36   51  
 4.   55   88  100        43   83  102  
 5.  166  192  208        79  149  173  

 64b-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.06       5.58 
 2.  5.09       5.62 
  
 3.   21   51   77        21   50   68  
 4.   62   92  110        47   77  103  
 5.  138  164  179        78  133  179  

 1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   25   52   74        25   51   70  
 4.   85  122  144        60  116  169  
 5.  184  224  242       150  196  227  

 imix-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.67      16.00 
 2.  4.70      16.08 

 imix-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.40      15.05 
 2.  4.49      15.36

25ge2p1xxv710-ethip4ipsec2tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.18       5.72 
 2.  5.29       5.84 
  
 3.   21   34   44        20   36   51  
 4.   54  115  128        47   99  129  
 5.  177  202  217        86  161  179  

 64b-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.02       5.54 
 2.  5.09       5.62 
  
 3.   21   52   74        21   28   33  
 4.   50  101  119        50   75   97  
 5.  144  167  182        84  141  174  

 1518b-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   30   55   82        25   44   75  
 4.   76   99  119        70   93  109  
 5.  170  203  221       134  190  213  

 imix-2t2c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.72      16.17 
 2.  4.77      16.33 

 imix-2t4c-ethip4ipsec2tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.39      15.03 
 2.  4.48      15.33

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.09       2.71 
 2.  2.15       2.79 
  
 3.   21   72   92        21   73   92  
 4.   74  250  276        84  231  297  
 5.  230  333  405       228  343  424  

 1518b-2t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.83      10.69 
 2.  0.83      10.75 
  
 3.   48  116  148        48   85  104  
 4.  107  300  388        98  288  370  
 5.  466  645  746       465  581  677  

 imix-2t1c-ethip4ipsec40000tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.44       5.21 
 2.  1.46       5.29

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.73       3.02 
 2.  2.73       3.02 
  
 3.   18   24   71        18   43   66  
 4.   71  167  204        78  171  220  
 5.  179  244  276       159  232  277  

 64b-4t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.05       5.58 
 2.  5.05       5.58 
  
 3.   24   61   80        19   48   81  
 4.   43   74   91        44   65   81  
 5.  114  127  137        99  138  154  

 64b-8t4c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  9.45      10.44 
 2.  9.45      10.44 
  
 3.   22   51   63        33   62   83  
 4.   45   55   65        47   63   76  
 5.  101  121  140       101  120  141  

 1518b-2t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  1.70      21.64 
 2.  1.70      21.64 
  
 3.   22   40   60        22   32   48  
 4.   47  122  136        55  100  132  
 5.  157  214  251       197  236  272  

 1518b-4t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.08      39.25 
 2.  3.10      39.44 
  
 3.   23   60   80        26   63   85  
 4.   59   80   95        50   70   87  
 5.  155  200  228       137  165  187  

 imix-2t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.20       7.52 
 2.  2.22       7.60 

 imix-4t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.22      14.45 
 2.  4.22      14.45 

 imix-8t4c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.92      27.12 
 2.  7.92      27.12

25ge2p1xxv710-ethip4ipsec40000tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.58       2.85 
 2.  2.58       2.85 
  
 3.   18   31   42        18   53   73  
 4.   73  160  232        44  155  176  
 5.  202  282  333       198  287  350  

 64b-4t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.73       5.22 
 2.  4.75       5.24 
  
 3.   26   67   82        18   40   76  
 4.   39   63   75        40   65   84  
 5.  106  127  144       100  130  147  

 64b-8t4c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  8.89       9.82 
 2.  8.89       9.82 
  
 3.   19   41   70        25   52   82  
 4.   42   57   71        38   54   67  
 5.  102  123  147       102  124  143  

 1518b-2t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  1.59      20.31 
 2.  1.59      20.31 
  
 3.   28   67   81        23   59   85  
 4.   68  110  143        48  106  137  
 5.  176  241  272       170  241  293  

 1518b-4t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.91      37.02 
 2.  2.91      37.02 
  
 3.   23   52   80        24   49   62  
 4.   54   85  106        47  101  123  
 5.  145  189  211       146  183  218  

 imix-2t1c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.10       7.18 
 2.  2.13       7.29 

 imix-4t2c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.06      13.88 
 2.  4.06      13.88 

 imix-8t4c-ethip4ipsec40000tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.37      25.24 
 2.  7.37      25.24

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  3.22       4.17 
 2.  3.23       4.19 
  
 3.   21   98  123        21   54  118  
 4.   81  192  214        68  130  150  
 5.  173  240  283       174  240  314  

 1518b-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.92      11.83 
 2.  0.93      12.01 
  
 3.   66  109  147        60  100  121  
 4.  146  242  300       140  255  329  
 5.  440  646  784       411  592  704  

 imix-2t1c-ethip4ipsec40tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.95       7.04 
 2.  1.97       7.12

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  6.18       6.83 
 2.  6.28       6.93 
  
 3.   18   52   83        18   46   72  
 4.   45   64   84        50   71   80  
 5.   99  134  155        96  132  160  

 64b-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 12.40      13.69 
 2. 12.65      13.96 
  
 3.   28   57   80        30   54   81  
 4.   43   56   67        41   52   62  
 5.   90  116  131        84  112  129  

 64b-8t4c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 24.63      27.19 
 2. 25.25      27.88 
  
 3.   32   54   74        27   48   73  
 4.   41   51   60        43   53   61  
 5.   88  134  172        88  134  172  

 1518b-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.14      39.98 
 2.  3.17      40.38 
  
 3.   22   43   65        22   45   66  
 4.   61   85   99        48   62   78  
 5.  155  202  225       142  193  211  

 1518b-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   23   43   60        25   49   75  
 4.   52   93  108        51   83  106  
 5.   69  121  135        69   84   97  

 imix-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.77      16.33 
 2.  4.82      16.49 

 imix-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  9.03      30.91 
 2.  9.21      31.53 

 imix-8t4c-ethip4ipsec40tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1. 14.32      49.00 
 2. 14.32      49.00

25ge2p1xxv710-ethip4ipsec40tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  6.08       6.71 
 2.  6.14       6.78 
  
 3.   18   45   63        18   46   68  
 4.   51   70   93        42   68   77  
 5.  107  140  164        99  139  170  

 64b-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 12.13      13.39 
 2. 12.37      13.66 
  
 3.   30   50   68        26   49   71  
 4.   43   55   67        42   53   64  
 5.   92  118  134        84  112  129  

 64b-8t4c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 24.13      26.64 
 2. 24.62      27.18 
  
 3.   32   51   66        28   51   69  
 4.   41   51   59        42   52   62  
 5.   86  130  167        87  130  166  

 1518b-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.96      37.72 
 2.  2.99      38.10 
  
 3.   25   52   73        25   47   74  
 4.   52   71   85        59   89  101  
 5.  168  214  250       145  195  219  

 1518b-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   22   40   58        25   54   81  
 4.   47   71   86        46   77   97  
 5.   77  106  120        72   97  107  

 imix-2t1c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.65      15.93 
 2.  4.68      16.01 

 imix-4t2c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  9.07      31.06 
 2.  9.21      31.53 

 imix-8t4c-ethip4ipsec40tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1. 14.32      49.00 
 2. 14.32      49.00

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  2.56       3.32 
 2.  2.61       3.39 
  
 3.   21   43   57        21   31   51  
 4.   66  120  140        50  123  177  
 5.  162  204  258        78  173  205  

 1518b-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.79      10.21 
 2.  0.79      10.26 
  
 3.   40  105  132        40   74   92  
 4.  133  271  344       111  303  390  
 5.  411  577  663       329  560  668  

 imix-2t1c-ethip4ipsec4tnlsw-ip4base- 
 int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.56       5.63 
 2.  1.56       5.65

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.11       5.64 
 2.  5.15       5.69 
  
 3.   18   32   64        18   33   49  
 4.   48   92  114        39   81  103  
 5.  117  149  173        73  127  150  

 64b-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.94       6.56 
 2.  6.00       6.63 
  
 3.   19   41   68        18   42   71  
 4.   42   60   73        30   53   76  
 5.   87  108  124        41   95  130  

 64b-8t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  9.98      11.02 
 2. 10.13      11.18 
  
 3.   18   43   68        18   44   67  
 4.   40   58   74        39   61   75  
 5.   59  109  124        51  109  142  

 1518b-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.52      32.13 
 2.  2.54      32.29 
  
 3.   28   61   83        22   51   80  
 4.   47  108  150        45   72   87  
 5.  155  190  214       103  183  216  

 1518b-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  2.98      37.97 
 2.  3.00      38.16 
  
 3.   23   50   78        22   52   94  
 4.   49   76   90        44   96  129  
 5.  140  183  214        90  142  181  

 imix-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.77      12.89 
 2.  3.79      12.95 

 imix-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.41      15.11 
 2.  4.46      15.26 

 imix-8t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  7.42      25.40 
 2.  7.53      25.78

25ge2p1xxv710-ethip4ipsec4tnlsw-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.02       5.54 
 2.  5.06       5.58 
  
 3.   18   33   45        18   63   85  
 4.   46   73   94        29   67   93  
 5.   72  105  129        89  127  167  

 64b-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.84       6.45 
 2.  5.87       6.48 
  
 3.   19   48   70        18   59   79  
 4.   39   65   92        32   61   86  
 5.   89  109  128        40   94  130  

 64b-8t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  9.84      10.86 
 2.  9.98      11.02 
  
 3.   20   50   78        18   49   81  
 4.   44   64   77        40   63   81  
 5.   64  106  131        44  104  129  

 1518b-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.36      30.07 
 2.  2.37      30.22 
  
 3.   24   50   74        22   43   74  
 4.   51  104  138        55  119  157  
 5.  164  203  221       106  174  208  

 1518b-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  2.83      36.00 
 2.  2.84      36.18 
  
 3.   28   53   76        23   44   80  
 4.   42   65   95        32   66   92  
 5.  123  154  193        66  126  161  

 imix-2t1c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.65      12.49 
 2.  3.68      12.58 

 imix-4t2c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.29      14.68 
 2.  4.33      14.82 

 imix-8t4c-ethip4ipsec4tnlsw- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  7.26      24.85 
 2.  7.37      25.22

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.76       6.17 
 2.  4.76       6.17 
  
 3.   24   78  114        23   54   71  
 4.   92  113  126        38   77  111  
 5.  116  157  182       105  149  183  

 64b-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.18       6.71 
 2.  5.21       6.75 
  
 3.   24   59   90        24   29   40  
 4.   61   96  113        55   84  105  
 5.  211  240  256        82  166  183  

 1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.40       5.16 
 2.  0.41       5.28 
  
 3.   52   85  115        42   52   70  
 4.   52   86  102        54  101  152  
 5.  133  219  321       205  420  532  

 imix-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.15       4.14 
 2.  1.15       4.14 

 imix-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.54      16.40 
 2.  4.63      16.73

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.18       5.72 
 2.  5.29       5.84 
  
 3.   21   52   98        20   51   65  
 4.   57   86  102        50   88  110  
 5.  173  208  243        77  146  176  

 64b-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.98       5.50 
 2.  5.04       5.56 
  
 3.   21   30   51        21   27   46  
 4.   57   81   99        50   82   97  
 5.  149  168  183        73   99  124  

 1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   25   49   72        25   45   75  
 4.   80  103  136        71  108  131  
 5.  180  201  214       142  179  195  

 imix-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.67      15.99 
 2.  4.70      16.07 

 imix-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.37      14.96 
 2.  4.46      15.27

25ge2p1xxv710-ethip4ipsec4tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.13       5.67 
 2.  5.24       5.78 
  
 3.   21   78   98        21   31   56  
 4.   51  102  120        48   73   96  
 5.  194  230  248        59  100  165  

 64b-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.03       5.55 
 2.  5.03       5.55 
  
 3.   22   55   74        21   30   53  
 4.   60   74   87        47   77   93  
 5.  149  168  187        74  133  162  

 1518b-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   28   59   89        27   44   66  
 4.   75  110  135        74  102  118  
 5.  178  199  214       135  187  215  

 imix-2t2c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.67      15.99 
 2.  4.72      16.15 

 imix-2t4c-ethip4ipsec4tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.41      15.10 
 2.  4.48      15.33

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128cbc-hmac512sha-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.61       5.97 
 2.  4.71       6.10 
  
 3.   24   74  110        24   52   77  
 4.   62   77   98        72  112  132  
 5.  121  160  183       114  159  191  

 64b-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  5.17       6.70 
 2.  5.17       6.70 
  
 3.   29   56   69        24   54   72  
 4.   65   87  102        55   84  102  
 5.  180  207  231       118  167  182  

 1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  0.40       5.22 
 2.  0.41       5.30 
  
 3.   44   76  109        42   61   88  
 4.   53   77  113        54  106  162  
 5.  167  279  356       226  458  651  

 imix-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  1.13       4.07 
 2.  1.19       4.30 

 imix-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128cbc-hmac512sha-ndrpdr 

 1.  4.50      16.25 
 2.  4.59      16.58

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes128gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.09       5.62 
 2.  5.22       5.77 
  
 3.   21   27   44        20   34   74  
 4.   63   90  111        41   93  114  
 5.  192  219  236        81  163  175  

 64b-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  5.00       5.52 
 2.  5.07       5.60 
  
 3.   21   29   53        21   44   60  
 4.   55   78  101        50   78   97  
 5.  146  175  196        88  164  186  

 1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   26   56   79        26   44   70  
 4.   79  108  128        71  103  127  
 5.  189  212  229       129  184  201  

 imix-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.65      15.93 
 2.  4.70      16.09 

 imix-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes128gcm-ndrpdr 

 1.  4.38      15.00 
 2.  4.43      15.15

25ge2p1xxv710-ethip4ipsec8tnlswasync-scheduler-ip4base-int-aes256gcm-ndrpdr

RFC2544: Pkt throughput IPv4 IPsec tunnel mode.

  • [Top] Network Topologies: TG-DUT1-DUT2-TG 3-node circular opology with single links between nodes.

  • [Enc] Packet Encapsulations: Eth-IPv4 on TG-DUTn, Eth-IPv4-IPSec on DUT1-DUT2.

  • [Cfg] DUT configuration: DUT1 and DUT2 are configured with multiple IPsec tunnels between them, run with IPsec async mode and use crypto sw scheduler engine to schedule crypto work to crypto cores. DUTs get IPv4 traffic from TG, encrypt it and send to another DUT, where packets are decrypted and sent back to TG.

  • [Ver] TG verification: TG finds and reports throughput NDR (Non Drop Rate) with zero packet loss tolerance and throughput PDR (Partial Drop Rate) with non-zero packet loss tolerance (LT) expressed in percentage of packets transmitted. NDR and PDR are discovered for different Ethernet L2 frame sizes using MLRsearch library.

Test packets are generated by TG on links to DUTs. TG traffic profile contains two L3 flow-groups (flow-group per direction, number of flows per flow-group equals to umber of IPSec tunnels) with all packets containing Ethernet header, IPv4 header with IP protocol=61 and static payload. MAC addresses are matching MAC addresses of the TG ode interfaces. Incrementing of IP.dst (IPv4 destination address) is applied to both streams.

  • [Ref] Applicable standard specifications: RFC4303 and RFC2544.

 Test Name 

 Throughput: 
 1.  Mpps       Gbps (NDR) 
 2.  Mpps       Gbps (PDR) 
 
 One-Way Latency Percentiles in uSec at %PDR load, 
 one set per each direction: 
 3.  P50  P90  P99       P50  P90  P99 (10% PDR) 
 4.  P50  P90  P99       P50  P90  P99 (50% PDR) 
 5.  P50  P90  P99       P50  P90  P99 (90% PDR) 

 64b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  5.05       5.57 
 2.  5.23       5.77 
  
 3.   21   48  100        21   39   53  
 4.   57   97  118        32   83  100  
 5.  179  202  217        92  167  189  

 64b-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.97       5.49 
 2.  5.06       5.59 
  
 3.   27   51   81        21   49   75  
 4.   56   90  105        46   80  118  
 5.  134  151  165        81  120  143  

 1518b-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  3.85      49.00 
 2.  3.85      49.00 
  
 3.   34   59   84        26   75   98  
 4.   77  113  131        76  119  151  
 5.  171  197  222       137  191  212  

 imix-2t2c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.65      15.92 
 2.  4.69      16.06 

 imix-2t4c-ethip4ipsec8tnlswasync-scheduler- 
 ip4base-int-aes256gcm-ndrpdr 

 1.  4.41      15.09 
 2.  4.47      15.32