HP-UX IPSec vA.03.00 Performance and Sizing White Paper

Appendix B: Test methodology
The netperf utility was used to measure HP-UX IPSec performance. The netperf utility can
measure the per-crypto-type throughput and per-crypto-type CPU utilization for two-way and four-way
systems. It can then use the data collected to estimate future performance demand and provide a
platform that can scale appropriately for the customer's future demand expectations.
Methods of measurement
The SA measurement is based on the protocol analyzer timestamp. The IKE protocol is implemented in
user space by the ikmpd daemon. The timestamps for ikmpd activity have a granularity of seconds,
and the timestamps in the kernel space have a granularity of milliseconds. The resolution for SA
measurement in milliseconds is sufficient.
© 2009 Hewlett-Packard Development Company, L.P. The information contained
herein is subject to change without notice. The only warranties for HP products and
services are set forth in the express warranty statements accompanying such
products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or
omissions contained herein.
UNIX is a registered trademark of The Open Group.
J
4256-90049, October 2009
15