[c-nsp] Pix performance

[Kris Amy]

Hi,

It could be this. I notice that the doc's on cisco.com point to ipsec having
a 56byte/packet overhead. Is this correct? Also does anyone know what the
overhead for an SSH tunnel is?

Kind Regards,
Kris Amy
Network Engineer
Instant Communications
Australia's Favourite ISP
Tel: 07 3018 8402
Fax: 07 3278 5666
Email: kamy at in.com.au

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Dan Shalinsky
Sent: Tuesday, 31 January 2006 2:57 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] Pix performance

Hi,

I believe that ESP adds around 20 bytes to the standard TCP header.  That
being said, it won't significantly affect throughput by increasing
overhead.  The throughput limitation is more due to the encryption process
being CPU intensive.

I can't find any pps specs on a 501, but I would think it should be able to
push more than 1200pps and 0.5 mbps.  For sure, it's not an overhead
problem.  HTH.

Regards,
~Dan
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/