|
||||||||
Hi Thomas, The easy way to check this is to remove the VPN card and benchmark 3DES again. :) -- Regards, Hilton Travis Phone: +61-(0)7-3343-3889 Manager, Mobile: +61 (0)419 792 394 Quark IT http://www.QuarkIT.com.au/ Quark AudioVisual http://www.QuarkAV.net/ (Brisbane, Australia) Network Administration, SmoothWall Firewalls, NOD32 AntiVirus Non Linear Video Editing Solutions & Digital Audio Workstations Conference and Seminar AudioVisual Production and Recording War doesn't determine who is right. War determines who is left. > -----Original Message----- > From: Thomas Hertz [mailto:term at cynisk dot net] > Sent: Tuesday, 8 June 2004 07:41 > To: m0n0wall at lists dot m0n0 dot ch > Subject: RE: [m0n0wall] More throughput testing - m0n0wall to > m0n0wall (wired) IPSec > > Hello James, Mitch et al. :) > > I haven't done anything to make my vpn1411 work, but to pop > it right in. I do believe it's working, at least my > benchmarking shows so. These are the benchmarks running ttcp > on the m0n0wall box (a net4801). > > Using DES/MD5: > > $ /tmp/ttcp -t -s -u 192.168.0.200 > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001 udp > -> 192.168.0.200 > ttcp-t: socket > ttcp-t: 16777216 bytes in 4.10 real seconds = 3999.29 KB/sec +++ > ttcp-t: 2054 I/O calls, msec/call = 2.04, calls/sec = 501.38 > ttcp-t: 0.0user 2.3sys 0:04real 59% 18i+250d 236maxrss 0+2pf 0+2059csw > > Using 3DES/MD5: > > $ /tmp/ttcp -t -s -u 192.168.0.200 > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001 udp > -> 192.168.0.200 > ttcp-t: socket > ttcp-t: 16777216 bytes in 4.11 real seconds = 3982.17 KB/sec +++ > ttcp-t: 2054 I/O calls, msec/call = 2.05, calls/sec = 499.23 > ttcp-t: 0.0user 2.2sys 0:04real 55% 20i+266d 236maxrss 0+2pf 0+2054csw > > Using Blowfish/MD5: > > $ /tmp/ttcp -t -s -u 192.168.0.200 > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001 udp > -> 192.168.0.200 > ttcp-t: socket > ttcp-t: 16777216 bytes in 9.26 real seconds = 1768.90 KB/sec +++ > ttcp-t: 2054 I/O calls, msec/call = 4.62, calls/sec = 221.76 > ttcp-t: 0.0user 8.7sys 0:09real 94% 16i+215d 236maxrss 0+2pf 0+148csw > > The only of these not supported by the vpn1411 is Blowfish, > which usually is a lot faster than 3DES when using software > encryption. I believe this shows that my card is indeed > working as it should. Also, I don't believe the > net4801 has enough juice in it to manage >30Mbps 3DES without > HW crypto either. Here is what dmesg tells me in case someone > is interested: > > hifn0 mem > 0xa0008000-0xa000ffff,0xa0004000-0xa0005fff,0xa0003000-0xa0003fff > irq 11 at device 14.0 on pci0 > hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions > > Cheers, > > Thomas Hertz > > > > -----Original Message----- > > From: James Baber [mailto:origin at gmail dot com] > > Sent: den 7 juni 2004 15:44 > > To: Thomas Hertz > > Subject: Re: [m0n0wall] More throughput testing - m0n0wall > to m0n0wall > > (wired) IPSec > > > > Hello Thomas, > > > > Can you tell me how you are getting the 1411 to work? I > can't get any > > of mine to work in the 4801. > > > > Thanks, > > James > > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > |