On Fri, 9 Jan 2015, Muenz, Michael wrote:
So in this test it was:
ike=aes256-sha1;modp2048
phase2alg=aes256-sha1;modp2048
This is the output with NETKEY (huge gain with tcp / window 512):
TCP tests
[ 3] 0.0-10.0 sec 1.05 GBytes 902 Mbits/sec
This system is only AES-NI capable
Here's ethtool output:
Settings for eth0:
Speed: 1000Mb/s
So using phase2alg=aes_gcm128-null will be interesting. It might get you
a little closer to 1Gbps provided you are CPU bound. If it remains at
902 Mbit/s your CPU is not your limiting factor.
Sure, put it on your wiki! :)
Thanks, will do!
Paul
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan
