[132283] in North American Network Operators' Group
Re: Cisco GRE/IPSec performance, 3845 ISR/3945 ISR G2
daemon@ATHENA.MIT.EDU (Christopher J. Pilkington)
Fri Nov 19 10:00:26 2010
Date: Fri, 19 Nov 2010 10:00:22 -0500
From: "Christopher J. Pilkington" <cjp@0x1.net>
To: Seth Mattinen <sethm@rollernet.us>
In-Reply-To: <4CE5AD07.1010303@rollernet.us>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Thu, Nov 18, 2010 at 02:47:35PM -0800, Seth Mattinen wrote:
> The ISR series do have onboard hardware crypto, but I don't know offhand
> if it can handle a full DS3 worth.
>
> My first guess is fragment reassembly would probably kill it fast.
We're not seeing fragmentation. The MTU of the physical DS3 is
arbitrarily large (over 9000) to intentionally avoid this.
-cjp
