[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: IPSec still too slow?
the point is: without paying a fortune, it is not possible to
deploy a system which can take full 3 digit remote users at the general
speed todays i'net connections are.
architectural suggestion with some numbers backing them, if
possible, to change this facts are anticipated in response of this post.
- pravin
At 12:04 PM 10/5/01 -0700, Christopher Gripp wrote:
>Those numbers would be vendor implementation specific not related to
>IPSec in general.
>
>-----Original Message-----
>From: Alex Alten [mailto:Alten@home.com]
>Sent: Friday, October 05, 2001 9:50 AM
>To: ipsec@lists.tislabs.com
>Subject: IPSec still too slow?
>
>
>
>Does anyone have any real-world numbers for IPSec performance?
>
>I just saw an article up on Network World Fusion that states
>the performance drops off dramatically with large numbers of
>SA's (500 in this case), basically down to simple Ethernet II
>speeds (<10Mbps). Even with 6 SA's full duplex fast Ethernet
>doesn't seem possible yet (at least not cheaply, under $200/NIC).
>
>Here's the URL for the latest Network Fusion IPSec VPN review.
>http://www.nwfusion.com/reviews/2001/1001rev.html
>
>I excerpted the preformance part of the review below.
>
>- Alex
References: