HP-UX IPFilter Version 16 Performance White Paper

ManualsBrandsHP ManualsSoftwareHP-UX IPFilter Software

Introduction......................................................................................................................................... 2

Configuration...................................................................................................................................... 2

10 GigE Configuration ..................................................................................................................... 2

1GigE Configuration ........................................................................................................................ 2

IPFilter Configuration ........................................................................................................................ 3

Configuration of netperf.................................................................................................................... 3

Inbound TCP (Streams) Tests .......................................................................................................... 3

Outbound TCP (MAERTS) Tests....................................................................................................... 4

TCP Connect, Request, and Response (CRR) Transaction Tests............................................................ 4

Summary of Test Results........................................................................................................................ 4

10GigE Test Results.............................................................................................................................. 6

10GigE Throughput with 64KB Packets............................................................................................... 6

10GigE CPU Utilization Rates with 64KB Packets ................................................................................ 7

10GigE CRR Transaction Rates.......................................................................................................... 8

10GigE CRR CPU Utilization Rates..................................................................................................... 9

1GigE Test Results.............................................................................................................................. 10

1GigE Throughput with 8KB Packets................................................................................................. 10

1GigE CPU Utilization Rates with 8KB Packets .................................................................................. 11

1GigE Throughput with 1KB Packets................................................................................................. 12

1GigE CPU Utilization with 1KB Packets........................................................................................... 13

1GigE CRR Transaction Rates.......................................................................................................... 14

1GigE CRR CPU Utilization ............................................................................................................. 15

For More Information ......................................................................................................................... 16

Summary of content (16 pages)

PAGE 1
HP-UX IPFilter Version 16 Performance White Paper Introduction......................................................................................................................................... 2 Configuration ...................................................................................................................................... 2 10 GigE Configuration .....................................................................................................................
PAGE 2
Introduction IPFilter filters IP packets by reading the network protocol headers and comparing the values to a set of user-configured rules. Based on these rules, IPFilter either passes or drops the packet. Because IPFilter only reads the protocol headers, the size of an IP packet does not affect the speed at which IPFilter processes the packet, and IPFilter incurs the same overhead for an IP packet regardless of packet size.
PAGE 3
IPFilter Configuration The IPFilter version was A.11.31.16. HP performed the performance tests on systems with the following IPFilter configurations:  No IPFilter No IPFilter installed  No rules IPFilter installed and enabled (the IPFilter modules are added to the network interface stream), but no IPFilter rules are configured  Stateless rules IPFilter installed with stateless rules configured.
PAGE 4
Outbound TCP (MAERTS) Tests The netperf TCP MAERTS tests also measure unidirectional transmission of TCP data without connection establishment time. The measurements indicate performance for processing outbound packets. IPFilter is installed and configured on the sending system. This document includes the following data from TCP MAERTS tests:  Outbound TCP Throughput The data transfer rate, expressed in Mb/s.  Outbound TCP CPU Utilization The percentage of CPU capacity used.
PAGE 5
those generated by netperf, and the actual increase in CPU utilization rates is also likely to be lower.
PAGE 6
10GigE Test Results This section contains test results for 10GigE links. 10GigE Throughput with 64KB Packets Figure 1 and Table 1 show throughput rates using a 10GigE link with 64KB packets. Figure 1 10GigE Throughput with 64KB Packets 10GigE Throughput with 64KB Packets 9000 8000 7000 7617.02 7635.34 7641.08 7617.59 6878.36 6779.99 6000 Throughput (Mb/s) 7151.53 7140.2 7133.45 6923.26 6013.04 5000 No IPFilter No Rules Stateless Rules Stateful Rules 4651.
PAGE 7
10GigE CPU Utilization Rates with 64KB Packets Figure 2 and Table 2 show CPU utilization rates using a 10GigE link with 64KB packets. Figure 2 10GigE CPU Utilization Rates with 64KB Packets 10GigE CPU Utilization with 64KB Packets 100 90.47 90 84.85 80 73.82 CPU Utilization (%) 70 60 66.02 60.1 56.75 50 46.56 No IPFilter No Rules Stateless Rules Stateful Rules 48.63 40 30 19.07 20 20.92 15.48 15.
PAGE 8
10GigE CRR Transaction Rates Figure 3 and Table 3 show transaction rates for CRR tests using a 10GigE link with 1-byte packets. Figure 3 10GigE CRR Transaction Rates 10GigE CRR Transaction Rates 30000 27333.69 26991.77 25556.22 25000 24782.21 Transactions/Second 20000 15000 10000 5000 0 No IPFilter No Rules Stateless Rules Stateful Rules Table 3 10GigE CRR Transaction Rates No IPFilter Transactions/s 27333.69 No Rules Transactions/s 26991.77 (1.
PAGE 9
10GigE CRR CPU Utilization Rates Figure 4 and Table 4 show CPU utilization rates for CRR tests using a 10GigE link with 1-byte packets. Figure 4 10GigE CRR CPU Utilization Rates 10GigE CRR CPU Utilization with 64KB Packets 100 90 80 CPU Utilization (%) 70 60 50 40 30 20 11.05 11.18 12.02 12.31 No IPFilter No Rules Stateless Rules Stateful Rules 10 0 Table 4 10GigE CRR CPU Utilization Rates No IPFilter No Rules % CPU % CPU 11.05 11.18 (1.17% difference) Stateless Rules % CPU 12.02(8.
PAGE 10
1GigE Test Results This section contains test results for 1GigE links. 1GigE Throughput with 8KB Packets Figure 5 and Table 5 show throughput rates using a 1GigE link and 8KB packets. Figure 5 1GigE Throughput with 8KB Packets 1GigE Throughput with 8KB Packets 1000 942.18 941.75 941.77 941.77 941.27 941.65 940.78 943.
PAGE 11
1GigE CPU Utilization Rates with 8KB Packets Figure 6 and Table 6 show CPU utilization rates using a 1GigE link and 8KB packets. Figure 6 1GigE CPU Utilization Rates with 8KB Packets 1GigE CPU Utilization with 8KB Packets 100 90 80 CPU Utilization (%) 70 60 No IPFilter No Rules Stateless Rules Stateful Rules 50 40 30 20 19.02 15.26 20.57 16.01 11.2 7.5 10 12.92 8.
PAGE 12
1GigE Throughput with 1KB Packets Figure 7 and Table 7 show throughput rates using a 1GigE link and 1KB packets. Figure 7 1GigE Throughput Rates with 1KB Packets 1GigE Throughput with 1KB Packets 1000 924.89 924.74 925.18 924.95 925.46 924.66 925.33 925.53 900 800 Throughput (Mb/s) 700 600 No IPFilter No Rules Stateless Rules Stateful Rules 500 400 300 200 100 0 Inbound Table 7 1GigE Throughput with 1KB Packets Traffic Type No IPFilter No Rules Mb/s Mb/s Inbound 1KB 924.89 924.
PAGE 13
1GigE CPU Utilization with 1KB Packets Figure 8 and Table 8 show CPU utilization rates using a 1GigE link and 1KB packets. Figure 8 1GigE CPU Utilization Rates with 1KB Packets 1GigE CPU Utilization with 1KB Packets 100 90 80 CPU Utilization (%) 70 60 No IPFilter No Rules Stateless Rules Stateful Rules 50 40 28.99 30 24.09 30.37 24.68 20.2 20 15.69 22.37 16.
PAGE 14
1GigE CRR Transaction Rates Figure 9 and Table 9 show transaction rates for CRR tests using a 1GigE link and 1-byte packets. Figure 9 1GigE CRR Transaction Rates 1GigE CRR Transaction Rates 25000 Transactions/Second 20000 19914.01 19712.19 18996.44 18568.09 15000 10000 5000 0 No IPFilter No Rules Table 9 1GigE CRR Transaction Rates No IPFilter No Rules Transactions/s Transactions/s 19914.01 19712.19 (1.01% difference) Stateless Rules Stateless Rules Transactions/s 18996.44 (4.
PAGE 15
1GigE CRR CPU Utilization Figure 9 and Table 9 show transaction rates for CRR tests using a 1GigE link and 1-byte packets. Figure 10 1GigE CRR CPU Utilization Rates 1GigE CRR CPU Utilization 100 90 80 CPU Utilization (%) 70 60 50 40 30 20 10 8.13 8.27 8.99 9.35 No IPFilter No Rules Stateless Rules Stateful Rules 0 Table 10 1GigE CRR CPU Utilization Rates No IPFilter No Rules % CPU % CPU 8.13 8.27 (1.72% difference) Stateless Rules % CPU 8.99 (10.58% difference) Stateful Rules % CPU 9.
PAGE 16
For More Information HP-UX IPFilter Version 16 Administrator's Guide www.docs.hp.com/en/internet.html#IPFilter www.software.hp.com © 2008 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty.