[Openswan Users] Performance question: how many tunnels on a P4 2.4 Ghz?

[randy at pillowfactory.org]

Check your idle time - since much of the processing is done in kernel
space and most user tools only display userland CPU utilization, it'll
look like it's doing nothing.  However, if you check the idle time, I'd be
willing to bet that you're at or near zero most of the time.  Have a dual
P-III 1GHz that has one processor always at zero idle (2-5% system load
overall) when I'm doing max throughput.

That said, the same P-III system above usually does ~20Mbit/sec (ipsec +
l2tp/ppp) on a single tunnel - haven't checked max tunnels.  I forget the
URL at the moment, but Google for 'swan ipsec performance' (less the
quotes); there's quite a decent page out there that helps guesstimate
throughput and some tunnel performance numbers.

> Hi all,
>
> I am experienceing mysterious break downs of a vpnserver. It seems to me
> that it cannot be the amount of traffic (the uplink < 2Mit, the NICS are
> 100 MBit). Allthought the CPU is alost always sleeping (<2% processor
> usage) I suspect it is the amount of tunnels that causes the breakdown: it
> started after adding several tunnels.
>
> Hence the question:
>
> How many tunnels can a P4 2.4 Ghz do, depending on what?
>
>
> Groeten,
>
> Joost Kraaijeveld
> Askesis B.V.
> Molukkenstraat 14
> 6524NB Nijmegen
> tel: 024-3888063 / 06-51855277
> fax: 024-3608416
> e-mail: J.Kraaijeveld at Askesis.nl
> web: www.askesis.nl
> _______________________________________________
> Users mailing list
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
>