Solaris 8 IPsec performance

From: Kent Hundley (kent.hundley@pobox.com)
Date: Thu Mar 27 2003 - 14:08:46 EST


I was doing some benchmark testing of IPSec on Solaris 8 and I noticed
that during my testing the kernel CPU percentage never rises above about
61-62% even though there are no other CPU intensive processes running.
The idle percentage numbers are consistently 38-39% throughout the
testing and when the test run is over the idle returns to 99-100%. I
have done many test runs of varying duration from a few seconds to a few
minutes and I see this behavior consistently.

Is this normal behavior for kernel processes and if so, is there a way
to devote more CPU to the kernel? I'm interested in seeing if I can
improve the IPSec performance numbers by having the boxes use more CPU
for the encryption/decryption processes.
  
The boxes used are 2 Netra X1's both running Solaris 8 with all current
patches applied. I am using ttcp for the throughput testing and top to
see the CPU stats.

(for anyone who is interested, I'm currently getting about 15Mbps
throughput with DES-MD5 and 6.7Mpbs with 3DES-MD5)

Thanks,
Kent
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:26:04 EDT