HP-UX IPSec vA.02.00 Performance and Sizing White Paper

15
Forwarded Packets
HP measured the number of packets per second a Home Agent forwarded from a Correspondent
Node to a Mobile Node. (The data path is Correspondent Node -> Home Agent -> Mobile Node.)
The Home Agent and Correspondent Node are attached to the same 100Base-T network, and the
Mobile Node is attached to an adjacent 100Base-T network. An HP-UX IPSec tunnel is used to secure
the packets as they pass between the Home Agent and Mobile Node. Small (130-byte) UDP packets
are used to provide an approximation of Home Test Init and Home Test packets.
The end-to-end measurement of packets sent per second from the Correspondent Node to the Mobile
Node reflects the number of packets the Home Agent can forward. The results when using ESP-AES
and ESP-3DES for the IPsec tunnel between the Home Agent and Mobile Node are as follows:
Transfer Type Number of Packets Forwarded per Second
ESP-AES 28 – 33K
ESP-3DES 20 – 25K