IPv6 readyNote: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

Re: [Users] CPU usage / bandwidth

From: Sandy Harris (sandy_at_storm.ca)
Date: Mon May 13 2002 - 16:29:43 CEST


Narancs v1 wrote:

> We are planning a firewall that will encrypt 3mbit/sec ...

> the question is what CPU can encrypt this bandwidth with
> linux-2.4.18-ipsec (freeswan)

Have you read doc/performance.html? It attempts to
answer this question.
 
> currently we have a sun ultra-5 233Mhz, this I guess cannot handle this
> task.
>
> So that's why I'm asking for experts advise that I can proove for my
> bosses what hardware to buy.
>
> Preferred hw is sun, but we may also talk about i386.
>
> another question is that which algorithm is the fastest and which is
> safest of those freeswan supports?

The only encryption currently supported is 3DES. It
is usually fast enough. With a user-contributed
[atch (doc/web.html#patch) you can change to AES
which is faster.

The supported hashes are MD5 and SHA-1. I think
the AES patch adds SHA-256, I'm not certain. I
don't know if there are significant speed differences
there. My guess would be it doesn't matter much,
since encryption is the larger overhead.
 
> on the other side, vpn2-firewall is a gauntlet 6 vpn firewall,
> do you have any specific info about how to connect freeswan and gauntlet?

See doc/interop.html, then search the mailing list
archive for more recent info.
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:58 CEST