[c-nsp] VAM2+ Performance

[Antonio Soares]

Thanks. This document has something interesting i also received off-line:

"Testing was conducted without fragmentation occurring in the network by setting the MTU to 1300 bytes on the test endpoints." 

I have the default values so most likely i will have better values after changing the MTU on the tunnel interface.

In the meanwhile, i found another design guide that fits more closely my scenario:

Point-to-Point GRE over IPsec Design Guide

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/P2P_GRE_IPSec/P2P_GRE.html


Regards,
 
Antonio Soares, CCIE #18473 (R&S/SP)
amsoares at netcabo.pt

-----Original Message-----
From: Luan Nguyen [mailto:luan at netcraftsmen.net] 
Sent: quarta-feira, 17 de Março de 2010 18:21
To: 'Antonio Soares'; cisco-nsp at puck.nether.net
Subject: RE: [c-nsp] VAM2+ Performance

The DMVPN design guide has better numbers:
http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/DMVPN_4_Pha
se2.html
Yours sounds about right if you meant 40Mbps of encrypted traffic.
Typically, not sure about the G1, but with the G2/VAM2+ combination, IMIX
would get you ~80Mbps GRE/IPSEC with ~90%CPU
The VSA has much better performance BTW.

Regards,

---------------------------------
Luan Nguyen
Chesapeake NetCraftsmen, LLC.
---------------------------------


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Antonio Soares
Sent: Wednesday, March 17, 2010 2:05 PM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] VAM2+ Performance

Hello group,

Does anyone have access to real world performance values for the VAM2+ ? I
have a router hitting the 50% with 40 Mbps of traffic. It
has a NPE-G1 an it is running 12.4M. I also have ACLs and QOS.

The VAM2+ data sheet mentions "up to 280 Mbps":

http://www.cisco.com/en/US/prod/collateral/routers/ps341/prod_bulletin0900ae
cd80205255.html

I have about 8 kpps being encrypted. It's a P2P GREoIPSEC scenario.


Thanks.

Regards,
 
Antonio Soares, CCIE #18473 (R&S/SP)
amsoares at netcabo.pt

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

__________ Information from ESET NOD32 Antivirus, version of virus signature
database 4952 (20100317) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com