On a modern intel system, the intel chip itself (or AMD) has AES128 or better
implemented in hardware. I get ~700Mb on sftp on my macbook air 2012 like
that, so those numbers are exactly where I’d expect the CPU to be maxed out
doing AES128 or AES256 encryption. That’s what hardware acceleration feels
like. You should see the CPU (or one core at least) on the IPSec tunnel ends
being fully occupied at that throughput.
ED.
> On 2016, Apr 29, at 1:52 PM, Olivier Mascia <[email protected]> wrote:
>
> Seeing throughput I did not expected with an IPsec tunnel compared to what I
> was seeing using OpenVPN (which I always used up to the perf discrepancy I
> discovered today on a new link), I wonder if it really encrypts anything.
>
> Phase 1 is set for AES256, SHA256 DH group 2.
> Phase 2 is set for ESP AES256-GCM 128 bits and SHA256.
>
> No other encryption / hash is checked as alternatives on Phase 2.
>
> I'd say I'm good to go that way, but I'm driving between 500 and 750 Mbps
> through the tunnel (transfer rate of ~45 to ~80 MB/sec in Windows File
> explorer between filesystems on each side of the tunnel), and I quite
> couldn't believe it.
>
> Could something be wrong?
>
> --
> Meilleures salutations, Met vriendelijke groeten, Best Regards,
> Olivier Mascia, integral.be/om
>
>
> _______________________________________________
> pfSense mailing list
> https://lists.pfsense.org/mailman/listinfo/list
> Support the project with Gold! https://pfsense.org/gold
_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold
