[nsp] IPSEC throughput impact?

[Jon Lewis]

On Tue, 6 Jul 2004, Streiner, Justin wrote:

> I pretty much have to use a per-packet load-sharing method because the
> traffic is all between one specific source and destination address.
> Per-flow doesn't handle that too well.  IIRC, CEF will normally pick
> one interface in each direction and send the traffic over that, so one T1
> would get maxed out while the others sit idle.

I hate to suggest it since I've never had much luck with it, but have you
considered converting the NxT1 with per-packet into an MLPPP bundle?
AFAIK, MLPPP can be configured to preserve input/output packet order.

----------------------------------------------------------------------
 Jon Lewis                   |  I route
 Senior Network Engineer     |  therefore you are
 Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________