[c-nsp] SA-VAM2+ Getting the best performance

[Luan M Nguyen]

For 512 packet size, we also see ~60M.  If you could force the packet to be
~1200-1300 in size, then performance will be better...not that much though.
You should give the VSA a try, throughput could be up to ~160M :)

-luan

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Steve Wright
Sent: Monday, July 14, 2008 11:30 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] SA-VAM2+ Getting the best performance

Hi everyone,

I'm currently working on some testing for a potential project that would
involve a number of remote sites that require encrypted traffic to flow
between them, as well as them performing BGP with a number of upstreams, and
IX's.

The current router of choice (before the IPSec VPN's were thrown in) was the
7[23]00 with the NPE-G2.

The current design encompases running GRE tunnels (for the IGP to work as we
wish). With no hardware acceleration, the routers processors max out about
25Mbps. With the SA-VAM2+ this increases to about 60Mbps, however is no
where near the level I would have expected unfortunately.

Can anyone with any experience of using the SA-VAM2+/ anyone who has any
extra thoughts on how to improve the throughput?

These routers aren't running any ACL's at present, have a couple of OSPF
processes, and a couple of BGP sessions with only a few routes.

Any thoughts much appreciated,

Thanks,
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/