[Soekris] Bug at VPN1201 card or on OpenBSD3.1

[Hideyuki Nishiyama]

Hello.

 As Sam replid my mail, I noticed need to write more detailed.
I post more information again.

> Hello.
> 
> I tested IPsec Performance of vpn1201 card on OpenBSD3.1.
> When tested, I experienced trouble by vpn1201 card or by 
> OpenBSD3.1.I tested to connected vpn1201 to normal PC(ATX 
> Standard).

----- < .... deleted ....> -------

> my test enviroment
> 
> PC-A ----- GW-1 ------ GW-2 ------PC-B
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
PC-A[dc0] --- [rl0]GW-1[sis0] === [sis0]GW-1[rl0] --- [dc0]PC-B

IPsec tunnel mode between GW-1 and GW-2
All link is 100baseTX half-duplex 

> 
> PC-A:
> CPU: 	Pentium3-1000
> MEM:	512MB
> OS:		FreeBSD 4.6-stable

  NIC:	Macronix 98715 chip(100baseTX)
> 
> PC-A:
  ^^^^^^
mistaked: PC-A => PC-B

> CPU: 	Pentium3-1000
> MEM:	512MB
> OS:		FreeBSD 4.6-stable

  NIC:	Macronix 98715 chip(100baseTX)

> 
> GW-1:
> CPU: 	Celeron 300, 566, 700, 1000 
> MEM:	128MB
> 		with VPN1201, without

  NIC:	SiS 900 chip(100baseTX)
	    Realtek 8139 chip(100baseTX)

> OS:		OpenBSD 3.1
> 
> GW-2:
> CPU: 	Duron 800, Athron 1400
> MEM:	128MB
> 		with VPN1201, without
> OS:		OpenBSD 3.1

  NIC:	SiS 900 chip(100baseTX)
	    Realtek 8139 chip(100baseTX)

> 
> 
> Test Program: netperf-2.2alpha
> executed command:	netperf -l 60 -H <IP Address of Opposite PC>
  ^^^^^^^^^^^^^^^^^
  executed command on PC-A or PC-B

> 
> Result: 
  ^^^^^^^
  Throughput Result(IPsec tunnnel mode between GW-1 and GW-2):

> 
> with vpn1201
> GW-1 CPU	NONE	DES-SHA	DES-MD5	3DES-SHA 3DES-MD5
> 300			67		27		27		27		 27
> 566			68		40		40		40		 40
> 700			73		45		45		45		 45
> 1000		74		47		47		47		 47		(Mbps)

 GW-1 is typically > 60% idle with vpn1201.

> 
> without vpn1201
> GW-1 CPU	DES-SHA	DES-MD5	3DES-SHA 3DES-MD5 AES-SHA AES-MD5
> 300			14		16		8		 9		  17	  21
> 566			23		27		15		 12		  28	  34
> 700			16		18		9		 10		  33	  37
> 1000		36		40		23		 25		  43	  47  (Mbps)

 GW-1 is typically < 30% idle without vpn1201.

> 
> During test period:
> CPU CLOCK SPEED:	GW-1 < GW-2
> (When GW-1 have Celeron 1000MHz, GW-2 have Athron 1400. Other 
> GW-2 have Duron 800)
> 
>   When GW-2 have Athron 1400, I have experienced GW-2 Hanged up 
> more mostly.
> 

----------------------------------------------
Nishiyama, Hideyuki　　　　　hnishi at mx5.harmonix.ne.jp