|
> I think you get the best throughput with OpenSWAN because IPsec uses
> symmetric
> ciphers like AES. A quite old performance estimation link is:
>
Agreed! We have been using AES for years because a long time ago I read
that it is a lighter weight algorithm, so it provides strong encryption
using fewer CPU cycles. That saves us on hardware because we can stack
more tunnels on the same device than we could if we were using 3DES.
>
http://www.freeswan.org/freeswan_trees/freeswan-2.06/doc/performance.htm
l
>
I saw that benchmark not long ago. Still very good information.
--Eric
Disclaimer - August 10, 2011
This email and any files transmitted with it are confidential and intended
solely for misch@xxxxxxxxxxxxxxxxx,LinuxVirtualServer.org users mailing list..
If you are not the named addressee you should not disseminate, distribute, copy
or alter this email. Any views or opinions presented in this email are solely
those of the author and might not represent those of Physicians' Managed Care
or Physician Select Management. Warning: Although Physicians' Managed Care or
Physician Select Management has taken reasonable precautions to ensure no
viruses are present in this email, the company cannot accept responsibility for
any loss or damage arising from the use of this email or attachments.
This disclaimer was added by Policy Patrol: http://www.policypatrol.com/
_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
|
