[c-nsp] SA-VAM2+ Getting the best performance

[Wink]

deny tcp any eq 443 any
deny tcp any any eq 443

Luan M Nguyen wrote:
> For 512 packet size, we also see ~60M.  If you could force the packet to be
> ~1200-1300 in size, then performance will be better...not that much though.
> You should give the VSA a try, throughput could be up to ~160M :)
>
> -luan
>
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Steve Wright
> Sent: Monday, July 14, 2008 11:30 AM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] SA-VAM2+ Getting the best performance
>
> Hi everyone,
>
> I'm currently working on some testing for a potential project that would
> involve a number of remote sites that require encrypted traffic to flow
> between them, as well as them performing BGP with a number of upstreams, and
> IX's.
>
> The current router of choice (before the IPSec VPN's were thrown in) was the
> 7[23]00 with the NPE-G2.
>
> The current design encompases running GRE tunnels (for the IGP to work as we
> wish). With no hardware acceleration, the routers processors max out about
> 25Mbps. With the SA-VAM2+ this increases to about 60Mbps, however is no
> where near the level I would have expected unfortunately.
>
> Can anyone with any experience of using the SA-VAM2+/ anyone who has any
> extra thoughts on how to improve the throughput?
>
> These routers aren't running any ACL's at present, have a couple of OSPF
> processes, and a couple of BGP sessions with only a few routes.
>
> Any thoughts much appreciated,
>
> Thanks,
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
> No virus found in this incoming message.
> Checked by AVG - http://www.avg.com 
> Version: 8.0.138 / Virus Database: 270.4.10/1551 - Release Date: 7/14/2008 6:49 AM
>
>
>
>   

No virus found in this outgoing message.
Checked by AVG - http://www.avg.com 
Version: 8.0.138 / Virus Database: 270.4.10/1551 - Release Date: 7/14/2008 6:49 AM