Le Sun, 22 Jun 2008 21:20:02 +0200, "Ivan Voras" <[EMAIL PROTECTED]> a écrit :
Hi, > The 'numbers' are in 1000s of bytes per second processed. > type 16 bytes 64 bytes 256 bytes 1024 bytes > 8192 bytes aes-128 cbc 5359.57k 5577.49k 5654.53k > 5639.81k 5679.65k aes-128-cbc 394.62k 1471.97k > 5457.89k 15097.21k 25895.72k I've got the same results. The encryption of a file of 360 MBytes takes around 20s with the hardware and 1m10s by software. I am playing to overload my box (a soekris net5501) with ping floods on ipsec (hmac-md5 and rijndael) by a modern computer. With four 'ping -f -s 3000', 'top' reports CPU "0.4% user 0.0 nice 1.6% system, 90.3% interrupt, 7.8% idle". With five 'ping', top does not run, and the kernel does not display the message 'limiting icmp ping response to 300 to 200' anymore too (on the serial console). With the hardware, i can use 8 flood pings without any problem. Top shows CPU: 0.0% user, 0.0% nice, 33.5% system, 12.5% interrupt, 54.1% idle And the kernel displays "limiting icmp ping response from 900 to 200 packets/s.", instead '300 to 200'. So it seems there is a real improvement. Regards. _______________________________________________ freebsd-stable@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-stable To unsubscribe, send any mail to "[EMAIL PROTECTED]"