Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Impact of just adding IPSEC into kernel (but not using it) regarding paquet-per-second forwarding rate
- x GENERIC-NODEBUG.forwarding.pps
- + GENERIC-IPSEC-NODEBUG.forwarding.pps
- +--------------------------------------------------------------------------------+
- |+ + ++ + x x x x x|
- | |_________________A_____M___________| |
- | |___A_M__| |
- +--------------------------------------------------------------------------------+
- N Min Max Median Avg Stddev
- x 5 1329152 1384180 1364744 1357066.4 21979.585
- + 5 1286904 1298754 1295769 1293647.2 5003.6938
- Difference at 95.0% confidence
- -63419.2 +/- 23246.9
- -4.67326% +/- 1.71303%
- (Student's t, pooled s = 15939.6)
- pkt generator:
- pkt-gen -i igb2 -U -f tx -n 1000000000 -l 60 -d 3.3.3.2:2000-3.3.3.128 -D 00:1b:21:d3:8f:3e -s 1.3.3.3:2000-1.3.3.10 -w 4
- system-under-test configuration:
- - IBM System x3550 M3 with quad cores (Intel Xeon L5630 2.13GHz, hyper-threading disabled) and a quad NIC 82580 connected to the PCI-Express Bus.
- - FreeBSD 11.0-CURRENT #0 r285132
- - Just 2 routes on the system-under-test
- - net.inet.ip.fastforwarding: 0 (default)
- - net.isr.dispatch: direct (default)
- kernel configuration for IPSEC:
- --- /usr/src-head/sys/amd64/conf/GENERIC-NODEBUG 2015-06-30 08:21:34.000000000 +0200
- +++ /usr/src-head/sys/amd64/conf/GENERIC-NODEBUG-IPSEC 2015-06-30 12:48:12.581781000 +0200
- @@ -28,7 +28,9 @@
- include GENERIC
- -ident GENERIC-NODEBUG
- +ident GENERIC-NODEBUG-IPSEC
- +options IPSEC
- +device crypto
- nooptions INVARIANTS
- nooptions INVARIANT_SUPPORT
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement