1 Tbps IPSec!

This document is intended as a guide to show how IPsec throughput may be significantly increased and how 1 Tbps of IPsec throughput may be achieved with the setup detailed in this document2. The document describes the technologies used for this test setup and how the test system was set up and deployed to achieve over 1 Tbps of No Drop Rate (NDR) IPsec AES-GCM-128 tunnel encryption throughput. For the purpose of this test setup, we deployed two Device Under Test (DUTs) each with Dual Socket Xeon® Scalable processors. The hardware and software used in this test setup include: • A system with two of the latest Intel® Xeon® Scalable processors • Six Intel® Ethernet Network Adapter E810-2CQDA2 PCIe 4.0 NICs that deliver 200 Gbps total bandwidth populated with two Intel® Ethernet Controller E810-CAM1 chips, providing for a total of 12x 100 GbE interfaces • Fast Data Input/Output ( Vector Packet Processing (VPP) open source high performance, packet-processing stack • Intel® AVX-512 and Intel® AES-NI instructions for packet encryption/decryption While this guide explains how the 1 Tbps figure was achieved, the system setup and technology enablement demonstrated in this guide are intended as a reference guide for anyone trying to improve their networking or IPsec performance at any level of throughput.

3 views0 comments

Recent Posts

See All