HP-UX IPFilter Version 16 Performance White Paper

2
Introduction
IPFilter filters IP packets by reading the network protocol headers and comparing the values to a set of
user-configured rules. Based on these rules, IPFilter either passes or drops the packet. Because IPFilter
only reads the protocol headers, the size of an IP packet does not affect the speed at which IPFilter
processes the packet, and IPFilter incurs the same overhead for an IP packet regardless of packet size.
This white paper document HP-UX IPFilter version 16 performance on HP-UX 11i v3 systems using 10
Gigabit Ethernet (10GigE) and 1 Gigabit Ethernet (1GigE) links.
Configuration
This section describes the configuration for the performance tests.
10 GigE Configuration
For 10GigE input and output tests, one rx2660 server sent or received packets from six clients
simultaneously, and the results show the aggregate throughput.
The relevant configuration items for the server are as follows:
 HP Integrity rx2660 Server
 2-way architecture with dual-core1.59 GHz Itanium® processors
 6GB RAM
 HP-UX 11i version 3
 10GigE interface
The relevant client system specifications are as follows:
 One HP Integrity rx2660 Server with the same specifications as the server, including a10 Gigabit
Ethernet interface
 Two HP Integrity rx1600 Servers, 2-way architecture with a 1GigE interface
 Two HP Integrity rp 3440 Servers, 4-way architecture with a 1 GigE interface
 One HP Integrity rx2620 Server, 2-way architecture with a 1 GigE interface
For 10GigE connect, request, and response (CRR) tests, HP used the two rx2660 Servers as
previously described.
A private LAN with a ProCurve Switch 3400cl was used.
1GigE Configuration
To test 1GigE performance, HP used two Integrity rx2660 servers. The relevant configuration items for
the servers are as follows:
 HP Integrity rx2660 Server
 2-way architecture with dual-core1.59 GHz Itanium® processors
 6GB RAM
 HP-UX 11i version 3
 1GigE interface
A private LAN with a ProCurve Switch 3400cl was used.