[Openswan Users] IPSEC Low Speed

[Michael Schwartzkopff]

Am Montag, 26. Januar 2015, 15:05:50 schrieb Hardik A Gohil:
> On Mon, Jan 26, 2015 at 2:57 PM, Neal Murphy <neal.p.murphy at alum.wpi.edu>
> 
> wrote:
> > On Monday, January 26, 2015 01:26:26 AM Hardik A Gohil wrote:
> > > Hello,
> > > 
> > > I am working on Openswan IPSEC implementation on Linux-kernel 2.6.35.9.
> > > 
> > > I performed speed test using iperf for IPSEC enabled kernel Image
> > > without
> > > enabling the ipsec service and speed is only 40 Mbps and 10 Mbps when
> > > acting as server and client.
> > > 
> > > Same performed on kernel Image with no IPSEC enabled in kernel i can
> > > measure upto 88Mbps.
> > > 
> > > Ethernet supports 100Mbps.
> > > 
> > > why speed is degraded for ipsec enabled kernel/RFS image without running
> > > ipsec service?
> > 
> > Tell us about the hardware running the kernel; maybe it cannot compute the
> > IPSEC encryption any faster.
> > _______________________________________________
> > Users at lists.openswan.org
> > https://lists.openswan.org/mailman/listinfo/users
> > Micropayments: https://flattr.com/thing/38387/IPsec-for-Linux-made-easy
> > Building and Integrating Virtual Private Networks with Openswan:
> > http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
> 
> Hello,
> 
> CPU: PMC-Sierra  RM5231A™ Microprocessor with 32-Bit System Bus
> 
> No Hardware Acceleration
> 
> Please read my message speed is degraded just because of enabling ipsec in
> kernel Image the speed i measured is without running ipsec service(i,e
> ipsec setup start)
> 
> hope you got my point

As I told you already in private mail, 10 Mbit/s is quite good for such a slow 
processor.

Mit freundlichen Grüßen,

Michael Schwartzkopff

-- 
[*] sys4 AG

http://sys4.de, +49 (89) 30 90 46 64, +49 (162) 165 0044
Franziskanerstraße 15, 81669 München

Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer
Aufsichtsratsvorsitzender: Florian Kirstein