Hello,
i have two CCR1036-8G-2S+ running 6.19 inter connected with 10gbit.
My setup
net-a -> net-b -> net-c
allows me to transfer 9.8Gbit/sec without encryption
If I added an ipsec-tunnel to net-b with a policy for net-a/c i ended up with a max
throughput of ~170mbit/sec.
Where could be key to get more speed with the encryption enabled.
Here the config of the left side
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip ipsec peer
add address=169.254.100.2/32 secret=test
/ip ipsec policy
add dst-address=169.254.102.0/24 sa-dst-address=169.254.100.2 sa-src-address=169.254.100.1 src-address=\
169.254.101.0/24 tunnel=yes
right side:
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des
/ip ipsec peer
add address=169.254.100.1/32 secret=test
/ip ipsec policy
add dst-address=169.254.101.0/24 sa-dst-address=169.254.100.1 sa-src-address=169.254.100.2 src-address=\
169.254.102.0/24 tunnel=yes
keep in mind if i disable the policy i get 9.8Gbit throughput
Thx in advance
meno
p.s. i played with the algorithms and there was no reasonable impact in performance terms.