Advertisement
gugus

IPSEC-in-kernel and forwarding impact

Jul 4th, 2015
226
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.82 KB | None | 0 0
  1. Impact of just adding IPSEC into kernel (but not using it) regarding paquet-per-second forwarding rate
  2.  
  3. x GENERIC-NODEBUG.forwarding.pps
  4. + GENERIC-IPSEC-NODEBUG.forwarding.pps
  5. +--------------------------------------------------------------------------------+
  6. |+ + ++ + x x x x x|
  7. | |_________________A_____M___________| |
  8. | |___A_M__| |
  9. +--------------------------------------------------------------------------------+
  10. N Min Max Median Avg Stddev
  11. x 5 1329152 1384180 1364744 1357066.4 21979.585
  12. + 5 1286904 1298754 1295769 1293647.2 5003.6938
  13. Difference at 95.0% confidence
  14. -63419.2 +/- 23246.9
  15. -4.67326% +/- 1.71303%
  16. (Student's t, pooled s = 15939.6)
  17.  
  18. pkt generator:
  19. pkt-gen -i igb2 -U -f tx -n 1000000000 -l 60 -d 3.3.3.2:2000-3.3.3.128 -D 00:1b:21:d3:8f:3e -s 1.3.3.3:2000-1.3.3.10 -w 4
  20.  
  21. system-under-test configuration:
  22. - IBM System x3550 M3 with quad cores (Intel Xeon L5630 2.13GHz, hyper-threading disabled) and a quad NIC 82580 connected to the PCI-Express Bus.
  23. - FreeBSD 11.0-CURRENT #0 r285132
  24. - Just 2 routes on the system-under-test
  25. - net.inet.ip.fastforwarding: 0 (default)
  26. - net.isr.dispatch: direct (default)
  27.  
  28. kernel configuration for IPSEC:
  29. --- /usr/src-head/sys/amd64/conf/GENERIC-NODEBUG 2015-06-30 08:21:34.000000000 +0200
  30. +++ /usr/src-head/sys/amd64/conf/GENERIC-NODEBUG-IPSEC 2015-06-30 12:48:12.581781000 +0200
  31. @@ -28,7 +28,9 @@
  32.  
  33. include GENERIC
  34.  
  35. -ident GENERIC-NODEBUG
  36. +ident GENERIC-NODEBUG-IPSEC
  37. +options IPSEC
  38. +device crypto
  39.  
  40. nooptions INVARIANTS
  41. nooptions INVARIANT_SUPPORT
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement