Hi,

Does anyone have any experience trying to run 1Gb/s IPSEC on a single tunnel?

We are upgrading our fibre soon from 200Mb/s to 1Gb/s for our wan connection and we need to run line rate for IPSEC over the internet to another site.

Currently running using AES-265 with SHA1, and I can get around 512Mb/s on a XEON E3110 and looking at the single thread performance numbers without factoring in the inclusion of AES instructions into the later generations XEON's I am looking at having to go with a lastest gen 3.5Ghz CPU to get 1Gb/s? Which means $$$

Any one having any luck on getting good performance on older generation stuff, or cloud core.

Thanks

You'd have to search the forum and double check my memory, but IIRC, the CCR is the fastest option currently and I think it does something close to what you are seeing now on a single tunnel. Unless recent updates have improved performance, I think you may end up having to spend some $$$$.