[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewalls-gc
Subject:    Re: swIPe abstract (was Re: raptor encryption)
From:       mikech () avana ! net
Date:       1997-07-21 9:17:02
[Download RAW message or body]



------------------------
  From: Jyri Kaljundi <jk@stallion.ee>
  Subject: Re: swIPe abstract (was Re: raptor encryption) 
  Date: Mon, 21 Jul 1997 14:50:51 +0300 (EET DST) 
  To: Firewalls@GreatCircle.COM
  Cc: mikech@avana.net


> 
> mikech@avana.net wrote:
> 
> > In our own implementation we stuck with the basics, DES/3DES and Keyed
> > MD5 header authentication with manual key exchange. We used Phil Karn's
> > excellent DES/3DES 80x86 assembly code for the encryption/decryption
> > engine and get about 10 megabits/sec on a 150 MHz Pentium (this code is
> > in the public domain and can be used by anyone).
> 
> This is the algorithm speed, right? What is the real speed of your IPSec
> implementation on some Pentium 100/200/Pro? Just curious.
> 
> Jyri Kaljundi
> jk@stallion.ee
> 
> 

---------------End of Original Message-----------------

I'll just give you some real world statistics. We could easily flood a 10 
Megabit ethernet connection with an encrypted tunnel on a 100 MHz Pentium. We 
have clients using IPSec on both FDDI and 100 Mbit ethernet who report they 
get about 30% utilization with very fast Pentiums. Unless you are using 
specialized crypto-specific chips you probably won't get much faster than 
that. Again, anyone who has statistics for other VPN's can speak up.

We used Netperf and a Network General Sniffer for our testing. We also used a 
"clean" LAN that carried no other traffic.

Phil Karn did an excellent job.

Mike
--
09:17:02
07/21/97
_______________________________________________________________________
Michael W. Chalkley                                Tel: +1.770.772.4567
ZapNet! Inc.                                       Fax: +1.770.475.7640
Suite 400-120                                E-mail: mikech@iproute.com
10945 State Bridge Road                                mikech@avana.net
Alpharetta, GA 30202                             http://www.iproute.com

[prev in list] [next in list] [prev in thread] [next in thread]