[Soekris] Screams of frustration were heard...

Michael DeMan michael at staff.openaccess.org
Tue May 6 20:23:40 UTC 2003

I have 7-8Mbit as follows:

FreeBSD 4.8
FAST_IPSEC w/HiFN driver

We are hoping for improvements in the BSD HiFN drivers to speed things up.
Don't know if it is possible or will happen or when.

On 5/6/03 12:54 PM, "Christopher R. Hertel" <crh at ubiqx.mn.org> wrote:

> On Tue, May 06, 2003 at 12:33:11PM -0700, Lars Eggert wrote:
>> Stephen Milton wrote:
>>> I have now run my Soekris 4521s through complete speed testing under
>>> Debian Linux, FreeBSD 4.8, and OpenBSD 3.3.  I have the Hifn VPN
>>> accelerators in each unit.  However, I am frustrated by the fact that
>>> I cannot seem to configure more than 3-4Mb/s of IPSEC throughput in
>>> any combination of OS or patches.
>>> Does anyone actually have a pair of Soekris units routing packets to
>>> each other through an IPSEC tunnel at more than 4Mb/s?
>> That's about what I'm seeing with 3DES on FreeBSD-4.8.
>>> I have heard rumors of 20-30Mb/s IPSEC+Hifn but have not seen anything
>>> like it in any combination I have tried.
>> I have never seen anything over 5Mb/s, and that was with ipfw and IPv6,
>> etc. disabled and a heavily tuned kernel.
> The spec sheet suggest 32Mbs at the chip level.  I don't know how that
> translates to real-world numbers.
> http://www.hifn.com/docs/a/DS-0028-02-7951.pdf
> Chris -)-----

Michael F. DeMan
Director of Technology
OpenAccess Network Services
360-647-0785 x204
michael at staff.openaccess.org

More information about the Soekris-tech mailing list