|
||||||||
rofl -- Regards, Hilton Travis > -----Original Message----- > From: Thomas Hertz [mailto:term at cynisk dot net] > Sent: Tuesday, 8 June 2004 08:11 > To: m0n0wall at lists dot m0n0 dot ch > Subject: RE: [m0n0wall] More throughput testing - m0n0wall to > m0n0wall (wired) IPSec > > This would probably be a pretty certain method, but it would > require me to physically transport my lazy ass to the > m0n0wall and open it up and then walk back and... > > Out of the question. :D > > // Thomas Hertz > > > > -----Original Message----- > > From: Quark AV - Hilton Travis [mailto:Hilton at QuarkAV dot com] > > Sent: den 8 juni 2004 00:06 > > To: m0n0wall at lists dot m0n0 dot ch > > Subject: RE: [m0n0wall] More throughput testing - m0n0wall > to m0n0wall > > (wired) IPSec > > > > Hi Thomas, > > > > The easy way to check this is to remove the VPN card and benchmark > > 3DES again. :) > > > > -- > > > > Regards, > > > > Hilton Travis Phone: +61-(0)7-3343-3889 > > Manager, Mobile: +61 (0)419 792 394 > > Quark IT http://www.QuarkIT.com.au/ > > Quark AudioVisual http://www.QuarkAV.net/ > > (Brisbane, Australia) > > > > Network Administration, SmoothWall Firewalls, NOD32 AntiVirus Non > > Linear Video Editing Solutions & Digital Audio Workstations > Conference > > and Seminar AudioVisual Production and Recording > > > > War doesn't determine who is right. War determines who is left. > > > > > > > -----Original Message----- > > > From: Thomas Hertz [mailto:term at cynisk dot net] > > > Sent: Tuesday, 8 June 2004 07:41 > > > To: m0n0wall at lists dot m0n0 dot ch > > > Subject: RE: [m0n0wall] More throughput testing - m0n0wall to > > > m0n0wall (wired) IPSec > > > > > > Hello James, Mitch et al. :) > > > > > > I haven't done anything to make my vpn1411 work, but to > pop it right > > > in. I do believe it's working, at least my benchmarking shows so. > > > These are the benchmarks running ttcp on the m0n0wall box (a > > > net4801). > > > > > > Using DES/MD5: > > > > > > $ /tmp/ttcp -t -s -u 192.168.0.200 > > > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001 udp -> > > > 192.168.0.200 > > > ttcp-t: socket > > > ttcp-t: 16777216 bytes in 4.10 real seconds = 3999.29 KB/sec +++ > > > ttcp-t: 2054 I/O calls, msec/call = 2.04, calls/sec = 501.38 > > > ttcp-t: 0.0user 2.3sys 0:04real 59% 18i+250d 236maxrss 0+2pf > > > 0+2059csw > > > > > > Using 3DES/MD5: > > > > > > $ /tmp/ttcp -t -s -u 192.168.0.200 > > > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001 udp -> > > > 192.168.0.200 > > > ttcp-t: socket > > > ttcp-t: 16777216 bytes in 4.11 real seconds = 3982.17 KB/sec +++ > > > ttcp-t: 2054 I/O calls, msec/call = 2.05, calls/sec = 499.23 > > > ttcp-t: 0.0user 2.2sys 0:04real 55% 20i+266d 236maxrss 0+2pf > > > 0+2054csw > > > > > > Using Blowfish/MD5: > > > > > > $ /tmp/ttcp -t -s -u 192.168.0.200 > > > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001 udp -> > > > 192.168.0.200 > > > ttcp-t: socket > > > ttcp-t: 16777216 bytes in 9.26 real seconds = 1768.90 KB/sec +++ > > > ttcp-t: 2054 I/O calls, msec/call = 4.62, calls/sec = 221.76 > > > ttcp-t: 0.0user 8.7sys 0:09real 94% 16i+215d 236maxrss 0+2pf > > > 0+148csw > > > > > > The only of these not supported by the vpn1411 is Blowfish, which > > > usually is a lot faster than 3DES when using software > encryption. I > > > believe this shows that my card is indeed working as it should. > > > Also, I don't believe the > > > net4801 has enough juice in it to manage >30Mbps 3DES without HW > > > crypto either. Here is what dmesg tells me in case someone is > > > interested: > > > > > > hifn0 mem > > > 0xa0008000-0xa000ffff,0xa0004000-0xa0005fff,0xa0003000-0xa0003fff > > > irq 11 at device 14.0 on pci0 > > > hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions > > > > > > Cheers, > > > > > > Thomas Hertz > > > > > > > > > > -----Original Message----- > > > > From: James Baber [mailto:origin at gmail dot com] > > > > Sent: den 7 juni 2004 15:44 > > > > To: Thomas Hertz > > > > Subject: Re: [m0n0wall] More throughput testing - m0n0wall > > > to m0n0wall > > > > (wired) IPSec > > > > > > > > Hello Thomas, > > > > > > > > Can you tell me how you are getting the 1411 to work? I > > > can't get any > > > > of mine to work in the 4801. > > > > > > > > Thanks, > > > > James > > > > > > > > > > > > > > > > > > -------------------------------------------------------------------- > > > - To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > > > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > > > > > > > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch > |