The hEX refresh E50UG is listed as having CPU EN7562CT and IPsec hardware acceleration, but:

• I cannot find the supported algorithms in the tables, neither old nor new, neither by product nor by CPU

• there are no test result for IPsec in the product page

Best regards,

Bergonz

Then you're not looking very well for the old model.
Open that old page and do CTRL-F "Hex".
New page: look for the processor: MT7621A
You'll see the line with the supported algorithms.

On the new model, that's true.
No info yet (and that processor seems to be so obscure it's not readily discoverable on the Big Wide Web either).
But where did you see it should have IPSEC HW offload ? Usually that takes a while before it's being added.

With "old" and "new" I was meaning the pages, in the "old wiki" and the "new wiki", not the model (for the old model the info is OK as you said).

IPsec hardware acceleration for this device is, now that you point it out, actually a bit dubious. No mention in the datasheet, the video talks about "VPN speed" but I cannot find an exact reference, the link to the list of hardware products supporting IPsec hardware acceleration in the "new" table is

https://mikrotik.com/products?filter&s= ... psec%22%5D

and the hEX refresh is there. But if I try to filter it myself from the web page, I am not able to have it show up (without manual GET parameter manipulation).

So maybe the first question is: does this device actually has IPsec hardware acceleration?

Thanks for your insights,

Bergonz

With "old" and "new" I was meaning the pages, in the "old wiki" and the "new wiki", not the model (for the old model the info is OK as you said).

I know. That was also how I responded.

IPsec hardware acceleration for this device is, now that you point it out, actually a bit dubious. No mention in the datasheet, the video talks about "VPN speed" but I cannot find an exact reference, the link to the list of hardware products supporting IPsec hardware acceleration in the "new" table is

I don't see the same as you.
When I start from ethernet routers and apply IPSEC as feature, there is no Hex refresh.
https://mikrotik.com/products/group/eth ... ter&s=c&f=[%22ipsec%22]#!

So it's most likely not there (yet). As expected for new models.

HW acceleration is not supported yet.
I got 110Mbps throughput(Tx+Rx) with CCR2116 and CPU usage is quite high('encrypting' takes most of cpu usage from profiling tool) for now.
MikroTik support said they are working on that.

Expecting nice performance improvements in the near future.

HW acceleration is not supported yet. ... MikroTik support said they are working on that.

Thank you for sharing the info.

Regards,

Bergonz

HW acceleration is not supported yet.
I got 110Mbps throughput(Tx+Rx) with CCR2116 and CPU usage is quite high('encrypting' takes most of cpu usage from profiling tool) for now.
MikroTik support said they are working on that.

Expecting nice performance improvements in the near future.

yeah is common for new devices to not support ipsec HW offload at prime time, specially in cases like this where is a totally new (at least in routeros ecosystem), SoC (System of chip) we can expect to take several months for ipsec HW offload to be available, as well as other functions like L2 Bridge Hw offloading

Hello.
HW acceleration will be done on the software level?
I mean if I buy E50UG now without IPSec HW acceleration, will router get acceleration when Mikrotik implement it for this model?
Thank you.

It always has been like this in the past, provided the CPU supports IPSEC acceleration (there is not that much to be found about this specific CPU).

since some days ago documentation shows signs of hope:

Hardware acceleration
https://help.mikrotik.com/docs/spaces/R ... celeration

No AES-GCM.. bummer

Old Hex couldn't either. So nothing lost there.

HW acceleration works now.

RB5009UG+S+IN (Btest) -- E50UG (IPSec AES128-CBC, SHA1, modp1024, single tunnel) -- Switch -- CCR2116-12G-4S+ -- RB5009UG+S+IN(Btest server)

I got 123.5Mbps(Tx)+121.8Mbps(Rx) while CPU usage is around 72%.
(about 2x throughput w/o HW acceleration)

I got 123.5Mbps(Tx)+121.8Mbps(Rx) while CPU usage is around 72%.

thanks for the work!
but this once again proves that hex is dead

IPsec test results are finally published on the E50UG's page.