[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: IPsec and TCP

To: cmetz@inner.net (Craig Metz)
Subject: Re: IPsec and TCP
From: andrade@netcom.com (Andrade Software Andrade Networking)
Date: Thu, 9 Jan 1997 12:09:02 -0800 (PST)
Cc: ipsec@tis.com
In-Reply-To: <199701071332.NAA07888@inner.net> from "Craig Metz" at Jan 7, 97 08:32:27 am
Sender: owner-ipsec@ex.tis.com

Andrade Software & Networking
Andrad@Netcom.Com
X-Mailer: ELM [version 2.4 PL23]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Content-Length: 818       

> 
> 	In a *highly* unscientific experiment, I was able to move a 100MB
> file via FTP (TCP/IPv4) between a P120 and a P90 with both ESP DES-CBC and AH
> HMAC-SHA on every packet and got an average throughput of about 3.18Mb/s. This
> is with a software implementation that is unoptimized and has lots of debug
> code in place. It would not at all surprise me if a well-optimized
> implementation could at least double that. You want faster? Use hardware
> assists for the crypto.
> 


Do you mean 3.18 Mbits/s or 3.18 Mbytes/s? 

Unfortunately hardware assists are not  possible for economic or other
reasons. In particular if you wish to deliver shrinkwrap software to a
Win95/Intel type platform. 

- Alex

-- 

Alex Alten
7677 Chestnut Way
Pleasanton, CA  94588
USA

Andrade@Netcom.Com
(510) 417-0159   Fax/Voice

References:

Re: IPsec and TCP

From: Craig Metz <cmetz@inner.net>

Prev by Date: Re: IPsec and TCP
Next by Date: re: Delete (in John Burke's recent message)
Prev by thread: Re: IPsec and TCP
Next by thread: Re: IPsec and TCP
Index(es):
- Main
- Thread