Re: [lvs-users] [OT] High Performance Linux Firewall / VPN Device?

To: <misch@xxxxxxxxxxxxxxxxx>, " users mailing list." <lvs-users@xxxxxxxxxxxxxxxxxxxxxx>
Subject: Re: [lvs-users] [OT] High Performance Linux Firewall / VPN Device?
From: "Robinson, Eric" <eric.robinson@xxxxxxxxx>
Date: Wed, 10 Aug 2011 11:39:48 -0700
> I think you get the best throughput with OpenSWAN because IPsec uses
> symmetric
> ciphers like AES. A quite old performance estimation link is:

Agreed! We have been using AES for years because a long time ago I read
that it is a lighter weight algorithm, so it provides strong encryption
using fewer CPU cycles. That saves us on hardware because we can stack
more tunnels on the same device than we could if we were using 3DES. 


I saw that benchmark not long ago. Still very good information.


Disclaimer - August 10, 2011 
This email and any files transmitted with it are confidential and intended 
solely for misch@xxxxxxxxxxxxxxxxx, users mailing list.. 
If you are not the named addressee you should not disseminate, distribute, copy 
or alter this email. Any views or opinions presented in this email are solely 
those of the author and might not represent those of Physicians' Managed Care 
or Physician Select Management. Warning: Although Physicians' Managed Care or 
Physician Select Management has taken reasonable precautions to ensure no 
viruses are present in this email, the company cannot accept responsibility for 
any loss or damage arising from the use of this email or attachments. 
This disclaimer was added by Policy Patrol:

Please read the documentation before posting - it's available at: mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to

<Prev in Thread] Current Thread [Next in Thread>