[Soekris] Screams of frustration were heard...

Michael DeMan michael at staff.openaccess.org
Tue May 6 20:23:40 UTC 2003


I have 7-8Mbit as follows:


FreeBSD 4.8
FAST_IPSEC w/HiFN driver
KERNEL POLLING enabled

We are hoping for improvements in the BSD HiFN drivers to speed things up.
Don't know if it is possible or will happen or when.


On 5/6/03 12:54 PM, "Christopher R. Hertel" <crh at ubiqx.mn.org> wrote:

> On Tue, May 06, 2003 at 12:33:11PM -0700, Lars Eggert wrote:
>> Stephen Milton wrote:
>>> I have now run my Soekris 4521s through complete speed testing under
>>> Debian Linux, FreeBSD 4.8, and OpenBSD 3.3.  I have the Hifn VPN
>>> accelerators in each unit.  However, I am frustrated by the fact that
>>> I cannot seem to configure more than 3-4Mb/s of IPSEC throughput in
>>> any combination of OS or patches.
>>> 
>>> Does anyone actually have a pair of Soekris units routing packets to
>>> each other through an IPSEC tunnel at more than 4Mb/s?
>> 
>> That's about what I'm seeing with 3DES on FreeBSD-4.8.
>> 
>>> I have heard rumors of 20-30Mb/s IPSEC+Hifn but have not seen anything
>>> like it in any combination I have tried.
>> 
>> I have never seen anything over 5Mb/s, and that was with ipfw and IPv6,
>> etc. disabled and a heavily tuned kernel.
> 
> The spec sheet suggest 32Mbs at the chip level.  I don't know how that
> translates to real-world numbers.
> 
> http://www.hifn.com/docs/a/DS-0028-02-7951.pdf
> 
> Chris -)-----


Michael F. DeMan
Director of Technology
OpenAccess Network Services
360-647-0785 x204
michael at staff.openaccess.org




More information about the Soekris-tech mailing list