deny tcp any eq 443 any
deny tcp any any eq 443
Luan M Nguyen wrote:
For 512 packet size, we also see ~60M. If you could force the packet to be
~1200-1300 in size, then performance will be better...not that much though.
You should give the VSA a try, throughput could be up to ~160M :)
-luan
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Steve Wright
Sent: Monday, July 14, 2008 11:30 AM
To: [email protected]
Subject: [c-nsp] SA-VAM2+ Getting the best performance
Hi everyone,
I'm currently working on some testing for a potential project that would
involve a number of remote sites that require encrypted traffic to flow
between them, as well as them performing BGP with a number of upstreams, and
IX's.
The current router of choice (before the IPSec VPN's were thrown in) was the
7[23]00 with the NPE-G2.
The current design encompases running GRE tunnels (for the IGP to work as we
wish). With no hardware acceleration, the routers processors max out about
25Mbps. With the SA-VAM2+ this increases to about 60Mbps, however is no
where near the level I would have expected unfortunately.
Can anyone with any experience of using the SA-VAM2+/ anyone who has any
extra thoughts on how to improve the throughput?
These routers aren't running any ACL's at present, have a couple of OSPF
processes, and a couple of BGP sessions with only a few routes.
Any thoughts much appreciated,
Thanks,
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
No virus found in this incoming message.
Checked by AVG - http://www.avg.com
Version: 8.0.138 / Virus Database: 270.4.10/1551 - Release Date: 7/14/2008 6:49 AM
No virus found in this outgoing message.
Checked by AVG - http://www.avg.com
Version: 8.0.138 / Virus Database: 270.4.10/1551 - Release Date: 7/14/2008 6:49 AM
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
