Page 1 of 1

Hardware for 1 gbit/s ipsec

Posted: Tue May 21, 2013 11:56 pm
by woifili
Hey guys!


I've a dark fiber connection to my backup-datacenter. Currently I have two simple CWDM-converters on both sides. Since I'm transfering sensitive data over this line, I'd like to secure it with IPSEC.

Has anyone experience with IPSEC-Tunnels on MT-devices >= 1 Gbit/s?

Is the MikroTik CloudRouter CCR-1036-12G-4S suitable for this challenge? I'd also like to use the MikroTik S-35/53LC20D instead of the simple CWDM-converters.

Regards,

Wolfgang

Re: Hardware for 1 gbit/s ipsec

Posted: Wed May 22, 2013 3:29 am
by wulfgard
good question

i will try tomorrow and give feed back

Hardware for 1 gbit/s ipsec

Posted: Wed May 22, 2013 3:56 am
by cbrown
I'm not sure if they have implemented the hardware acceleration on the CCR yet. Maybe someone from Mikrotik will respond to let us know or even an ETA.

Re: Hardware for 1 gbit/s ipsec

Posted: Wed May 22, 2013 2:12 pm
by wulfgard
Hello

with SHA1 - MODP2048 - AES256 : max 30000 pps per port

a+
Thierry

Re: Hardware for 1 gbit/s ipsec

Posted: Wed May 22, 2013 3:44 pm
by woifili
Hello

with SHA1 - MODP2048 - AES256 : max 30000 pps per port

a+
Thierry
Thanks wulfgard!

so thats about 345 Mbit/s?


have you monitored the cpu load?