[132242] in North American Network Operators' Group
Re: Cisco GRE/IPSec performance, 3845 ISR/3945 ISR G2
daemon@ATHENA.MIT.EDU (Seth Mattinen)
Thu Nov 18 17:48:01 2010
Date: Thu, 18 Nov 2010 14:47:35 -0800
From: Seth Mattinen <sethm@rollernet.us>
To: nanog@nanog.org
In-Reply-To: <AANLkTinSJcBVpNYswXNjboGXytcfuW+Kf2iH30PfYniH@mail.gmail.com>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On 11/18/2010 14:39, Pete Lumbis wrote:
> This is probably more appropriate for the cisco-nsp list, but what
> process is taking up the CPU or is it due to interrupts?
> To the best of my knowledge the crypto should be hardware accelerated,
> while everything else is going to be done in software on the 3800.
>
The ISR series do have onboard hardware crypto, but I don't know offhand
if it can handle a full DS3 worth.
My first guess is fragment reassembly would probably kill it fast.
~Seth
