HP-UX IPSec vA.03.00 Performance and Sizing White Paper

CPU utilization
Figure 2 shows the percentage of the CPU used by the s
ending system. The percentages of CPU
utilization with AH-SHA1 and AH-MD5 are nearly identical even though the throughput rate of AH-
SHA1 is better than AH-MD5.
Figure 2. Single dual-core (2-way) CPU utilization for raw IP, AH-MD5, and AH-SHA1
Single dual-core (2-way) CPU utilization
0
10
20
30
40
50
60
128 256 512 1024 2048 4096 8192 16384 32768
Message size (bytes)
Percentage (%)
Raw
AH-MD5
AH-SHA1
Service demand
Figure 3 shows the service demand rates (the CPU time, mic
roseconds, required to send one kilobyte
of data) for AH-MD5 and AH-SHA1, which are much higher than those for raw IP.
Figure 3. Single dual-core (2-way) service demand rates for raw IP, AH-MD5, and AH-SHA1
Single dual-core (2-way) service demand
0
5
10
15
20
25
30
35
40
128 256 512 1024 2048 4096 8192 16384 32768
Message size (bytes)
Service demand
(microsec/KB)
Raw
AH-MD5
AH-SHA1
5