Hi Mike, Devin Thanks for your replies.
Mike, Do you have the CP running in dedicated mode ? What packet size did you use for testing? kmd is quite useful in identifying which SPC will be used for the specific tunnel. Is there a way we can force an IPSEC to terminate on a required SPC to load balance better? Thanks again. On Sun, Sep 16, 2012 at 12:49 PM, Mike Devlin <[email protected]> wrote: > So i have personally achieved 1.6G throughput per SPC on and SRX3600 on > 10.4R9.2 code line. > > I was required to push 3.5G from a single source, which required the use > of a hidden command in what i remember being the gateway config. > > i also had to pop out to the shell, and use "kmd -T ip1:ip2" > > The ips required here are those of the IKE association. We in the end, > needed 2 IPs on both sides to split the traffic across 3 SPCs, and it > required substantial planning to get these numbers. > > Going to 12 code, which i never got to test, i had an elaborate plan to > attempt equal cost load balancing across multiple IPSEC VPNs on 5800s, but > was unfortunately laid off before i got to work out the finer details of it. > > > > > On Fri, Sep 14, 2012 at 8:49 AM, Devin Kennedy < > [email protected]> wrote: > >> Hi Ashish: >> >> I recently tested the SRX3400 for IPsec tunnel setup rates and was able to >> setup 3600 tunnels using IxVPN testing tool. I only sent traffic across >> the >> tunnels for 1 minute but the testing was successful. We were running 4x >> SPC >> and 2xNPC in our configuration. We were using one GE WAN interface as >> well. >> Our primary purpose was just to test that number of IPsec tunnels that we >> needed for a future implementation. >> >> >> Devin >> >> >> -----Original Message----- >> From: [email protected] >> [mailto:[email protected]] On Behalf Of ashish verma >> Sent: Thursday, September 13, 2012 5:35 PM >> To: juniper-nsp >> Subject: [j-nsp] SRX IPSEC performance >> >> Hi All, >> >> Has anyone here done IPSEC performance tests for SRX3k and share your >> results? >> Juniper claims that with 1400bytes of packet with 2SPC and 1NPC VPN >> throughput is 3Gbps. How much have you achieved? >> >> Ashish >> _______________________________________________ >> juniper-nsp mailing list [email protected] >> https://puck.nether.net/mailman/listinfo/juniper-nsp >> >> _______________________________________________ >> juniper-nsp mailing list [email protected] >> https://puck.nether.net/mailman/listinfo/juniper-nsp >> > > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
