[Soekris] Good ethernet != cheap ethernet (Warning, wandering OT..)

[Wim Vandeputte]

On Tue, Aug 17, 2004 at 03:06:16PM -1000, Jim Thompson wrote:
> So, Chuck, it may be that very soon, all that extra GigE stuff is just 
> part of the mobo.  No external cards required.

Yes, some of these solutions are depending heavy on CPU side calculations.
I'd rather have a better 100 Mbit chipset like an fxp one instead of a
Realtek-like GigE interupt drainer.

Anyways...

As for performance issues, has anybody ever tested how much bandwidth you
can expect from a 4526-30 + a prism 2.5 11b card (in this case the 2511MP
from Senao)? A vpn1411 has been added to accellerate the IPsec tunnel
Host OS is OpenBSD.

I was expecting an IPsec tunnel from one access point to another to be
able to get up to 11 Mbit but the people testing it can't get more then
2.4 Mbit from it.

I'm wondering where the bottleneck is, either bad wifi performance 
from a routing perspective, or just not enough CPU power and interupts
to deal with the IPsec part? 

openssl without hifn
type              16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
des-ede3-cbc       351.33k      370.68k      375.81k      376.78k      372.23k

disabled with sysctl -w kern.usercrypto=0
(this works not for isakmpd)

openssl with hifn
type              16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
des-ede3-cbc        32.76k      128.64k      470.02k     1585.84k     4538.26k


Wim.