Might be tricky to actually get wire speed throughput (both in and out at the same time). A lot will depend on things such as the NUMA architecture, where is the encryption process(es) running, where are interrupts going to service the network cards, etc. There are some NICs that will support IPSec offload onto the NIC. Something like a Mellanox ConnectX-3 Pro VPI might do the trick (though the NICs are over $1000 each) and you might have to code your own encryption software, not sure.
Probably doable but you burn 2U of rack space for that Dell vs a half a slot in an MLX. If you are doing a lot of these sorts of connections, it probably pays to just buy the card for the MLX. If you have someone sitting around with a lot of cycles to spare and they have the expertise to duplicate the performance, sure, I guess the hardware cost might be less, but you are probably paying that person more than the card costs. On Mon, Aug 15, 2016 at 9:34 AM, Sarpreet Basi <[email protected]> wrote: > How about a > > > > Dell R730 w/ 4x 10GB bonded > > > > And something like pfsence, > > https://forum.pfsense.org/index.php?topic=87071.15 > > > > should be able to get that for under $3k-4k. > > > > Not 100% sure, haven’t looked into it, but at quick glance the hardware > seems to support, 7x PCIe 3.0 > > > > Sarpreet > > > > *From:* foundry-nsp [mailto:[email protected]] *On > Behalf Of *George B > *Sent:* Monday, August 15, 2016 8:00 AM > *To:* Eldon Koyle <[email protected]> > *Cc:* foundry-nsp <[email protected]> > *Subject:* Re: [f-nsp] Brocade IPSEC modules > > > > Well, how much would a firewall that can do over 40G of wire speed IPSec > cost you? A PA-7050 does 48G of IPSec throughput and starts at around > $300K > > > > > > > > On Mon, Aug 15, 2016 at 7:32 AM, Eldon Koyle < > [email protected]> wrote: > > I'm still trying to recover from the sticker shock. They only have one > option for ipsec, a 4-port 10g card that lists for $120k in the US. > > -- > Eldon > > > > On Aug 14, 2016 22:21, "Michael Gehrmann" <[email protected]> wrote: > > Has anyone experienced/used the IPSEC modules for MLX or the like? > > > > Good/Bad/Ugly? > > > > -- > > Michael Gehrmann > > > > > > _______________________________________________ > foundry-nsp mailing list > [email protected] > http://puck.nether.net/mailman/listinfo/foundry-nsp > > > _______________________________________________ > foundry-nsp mailing list > [email protected] > http://puck.nether.net/mailman/listinfo/foundry-nsp > > >
_______________________________________________ foundry-nsp mailing list [email protected] http://puck.nether.net/mailman/listinfo/foundry-nsp
