[j-nsp] SRX IPSEC performance

[Mike Devlin]

So i have personally achieved 1.6G throughput per SPC on and SRX3600 on
10.4R9.2 code line.

I was required to push 3.5G from a single source, which required the use of
a hidden command in what i remember being the gateway config.

i also had to pop out to the shell, and use "kmd -T ip1:ip2"

The ips required here are those of the IKE association.  We in the end,
needed 2 IPs on both sides to split the traffic across 3 SPCs, and it
required substantial planning to get these numbers.

Going to 12 code, which i never got to test, i had an elaborate plan to
attempt equal cost load balancing across multiple IPSEC VPNs on 5800s, but
was unfortunately laid off before i got to work out the finer details of it.



On Fri, Sep 14, 2012 at 8:49 AM, Devin Kennedy
<devinkennedy415 at hotmail.com>wrote:

> Hi Ashish:
>
> I recently tested the SRX3400 for IPsec tunnel setup rates and was able to
> setup 3600 tunnels using IxVPN testing tool.  I only sent traffic across
> the
> tunnels for 1 minute but the testing was successful.  We were running 4x
> SPC
> and 2xNPC in our configuration.  We were using one GE WAN interface as
> well.
> Our primary purpose was just to test that number of IPsec tunnels that we
> needed for a future implementation.
>
>
> Devin
>
>
> -----Original Message-----
> From: juniper-nsp-bounces at puck.nether.net
> [mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of ashish verma
> Sent: Thursday, September 13, 2012 5:35 PM
> To: juniper-nsp
> Subject: [j-nsp] SRX IPSEC performance
>
> Hi All,
>
> Has anyone here done IPSEC performance tests for SRX3k and share your
> results?
> Juniper claims that with 1400bytes of packet with 2SPC and 1NPC VPN
> throughput is 3Gbps. How much have you achieved?
>
> Ashish
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>