That sounds probable..  Freeswan may default to AES256, which would be
similar in performance to 3DES (based on my experience with some
commercial VPN solutions).

Unfortunately, I don't know the exact syntax.. I've been messing with
the KAME IPSec that is in the 2.6 kernel and MacOS X/BSD, rather than 
Freeswan.  But, a google search for Freeswan configs turned up 
statements like:

esp=aes128-sha1,aes128-md5



On Thu, Apr 15, 2004 at 01:54:04PM -0700, Peter Mueller wrote:
> > I did the test with the converted Bering-Contivity yesterday. 
> > I ran the 
> > VPN as AES then changed to 3DES and ran it again. AES was 6% 
> > slower. Any ideas why this would be the case?
> 
> AES should be faster.  I remember seeing a few posts about this.  For
> example, http://lists.freeswan.org/pipermail/users/2002-February/007771.html
> indicates 89mbps with AES as opposed to 44mpbs with 3DES.    Alternatively,
> the creater of the patch for FreeSWAN indicated 'expect 3 to 2 performance'.
> 
> Are you sure you're not using double the keysize with your setup?  There has
> to be some explanation.  AES _IS_ faster, at least on the 15 or so tunnels I
> have created.
> 
> P
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
> ------------------------------------------------------------------------
> leaf-user mailing list: [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to