[ previous ] [ next ] [ threads ]
 
 From:  "Quark AV - Hilton Travis" <Hilton at QuarkAV dot com>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  RE: [m0n0wall] More throughput testing - m0n0wall to m0n0wall (wired) IPSec
 Date:  Tue, 8 Jun 2004 09:19:31 +1000
rofl

--
 
Regards,
 
Hilton Travis

> -----Original Message-----
> From: Thomas Hertz [mailto:term at cynisk dot net] 
> Sent: Tuesday, 8 June 2004 08:11
> To: m0n0wall at lists dot m0n0 dot ch
> Subject: RE: [m0n0wall] More throughput testing - m0n0wall to 
> m0n0wall (wired) IPSec
> 
> This would probably be a pretty certain method, but it would 
> require me to physically transport my lazy ass to the 
> m0n0wall and open it up and then walk back and...
> 
> Out of the question. :D
> 
> // Thomas Hertz
> 
> 
> > -----Original Message-----
> > From: Quark AV - Hilton Travis [mailto:Hilton at QuarkAV dot com]
> > Sent: den 8 juni 2004 00:06
> > To: m0n0wall at lists dot m0n0 dot ch
> > Subject: RE: [m0n0wall] More throughput testing - m0n0wall 
> to m0n0wall
> > (wired) IPSec
> > 
> > Hi Thomas,
> > 
> > The easy way to check this is to remove the VPN card and benchmark 
> > 3DES again.  :)
> > 
> > --
> > 
> > Regards,
> > 
> > Hilton Travis                        Phone: +61-(0)7-3343-3889
> > Manager,                             Mobile: +61 (0)419 792 394
> > Quark IT                             http://www.QuarkIT.com.au/
> > Quark AudioVisual                    http://www.QuarkAV.net/
> > (Brisbane, Australia)
> > 
> > Network Administration, SmoothWall Firewalls, NOD32 AntiVirus Non 
> > Linear Video Editing Solutions & Digital Audio Workstations 
> Conference 
> > and Seminar AudioVisual Production and Recording
> > 
> >  War doesn't determine who is right. War determines who is left.
> > 
> > 
> > > -----Original Message-----
> > > From: Thomas Hertz [mailto:term at cynisk dot net]
> > > Sent: Tuesday, 8 June 2004 07:41
> > > To: m0n0wall at lists dot m0n0 dot ch
> > > Subject: RE: [m0n0wall] More throughput testing - m0n0wall to 
> > > m0n0wall (wired) IPSec
> > >
> > > Hello James, Mitch et al. :)
> > >
> > > I haven't done anything to make my vpn1411 work, but to 
> pop it right 
> > > in. I do believe it's working, at least my benchmarking shows so. 
> > > These are the benchmarks running ttcp on the m0n0wall box (a 
> > > net4801).
> > >
> > > Using DES/MD5:
> > >
> > > $ /tmp/ttcp -t -s -u 192.168.0.200
> > > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001  udp  -> 
> > > 192.168.0.200
> > > ttcp-t: socket
> > > ttcp-t: 16777216 bytes in 4.10 real seconds = 3999.29 KB/sec +++
> > > ttcp-t: 2054 I/O calls, msec/call = 2.04, calls/sec = 501.38
> > > ttcp-t: 0.0user 2.3sys 0:04real 59% 18i+250d 236maxrss 0+2pf 
> > > 0+2059csw
> > >
> > > Using 3DES/MD5:
> > >
> > > $ /tmp/ttcp -t -s -u 192.168.0.200
> > > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001  udp  -> 
> > > 192.168.0.200
> > > ttcp-t: socket
> > > ttcp-t: 16777216 bytes in 4.11 real seconds = 3982.17 KB/sec +++
> > > ttcp-t: 2054 I/O calls, msec/call = 2.05, calls/sec = 499.23
> > > ttcp-t: 0.0user 2.2sys 0:04real 55% 20i+266d 236maxrss 0+2pf 
> > > 0+2054csw
> > >
> > > Using Blowfish/MD5:
> > >
> > > $ /tmp/ttcp -t -s -u 192.168.0.200
> > > ttcp-t: buflen=8192, nbuf=2048, align=16384/0, port=5001  udp  -> 
> > > 192.168.0.200
> > > ttcp-t: socket
> > > ttcp-t: 16777216 bytes in 9.26 real seconds = 1768.90 KB/sec +++
> > > ttcp-t: 2054 I/O calls, msec/call = 4.62, calls/sec = 221.76
> > > ttcp-t: 0.0user 8.7sys 0:09real 94% 16i+215d 236maxrss 0+2pf 
> > > 0+148csw
> > >
> > > The only of these not supported by the vpn1411 is Blowfish, which 
> > > usually is a lot faster than 3DES when using software 
> encryption. I 
> > > believe this shows that my card is indeed working as it should. 
> > > Also, I don't believe the
> > > net4801 has enough juice in it to manage >30Mbps 3DES without HW 
> > > crypto either. Here is what dmesg tells me in case someone is 
> > > interested:
> > >
> > > hifn0 mem
> > > 0xa0008000-0xa000ffff,0xa0004000-0xa0005fff,0xa0003000-0xa0003fff
> > > irq 11 at device 14.0 on pci0
> > > hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions
> > >
> > > Cheers,
> > >
> > > Thomas Hertz
> > >
> > >
> > > > -----Original Message-----
> > > > From: James Baber [mailto:origin at gmail dot com]
> > > > Sent: den 7 juni 2004 15:44
> > > > To: Thomas Hertz
> > > > Subject: Re: [m0n0wall] More throughput testing - m0n0wall
> > > to m0n0wall
> > > > (wired) IPSec
> > > >
> > > > Hello Thomas,
> > > >
> > > > Can you tell me how you are getting the 1411 to work?  I
> > > can't get any
> > > > of mine to work in the 4801.
> > > >
> > > > Thanks,
> > > > James
> > > >
> > > >
> > >
> > >
> > > 
> --------------------------------------------------------------------
> > > - To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> > > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> > >
> > 
> > 
> > 
> ---------------------------------------------------------------------
> > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> 
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
>