[lvs-users] [OT] High Performance Linux Firewall / VPN Device?

[Robinson, Eric]

> I think you get the best throughput with OpenSWAN because IPsec uses
> symmetric
> ciphers like AES. A quite old performance estimation link is:
> 

Agreed! We have been using AES for years because a long time ago I read
that it is a lighter weight algorithm, so it provides strong encryption
using fewer CPU cycles. That saves us on hardware because we can stack
more tunnels on the same device than we could if we were using 3DES. 

>
http://www.freeswan.org/freeswan_trees/freeswan-2.06/doc/performance.htm
l
> 

I saw that benchmark not long ago. Still very good information.

--Eric





Disclaimer - August 10, 2011 
This email and any files transmitted with it are confidential and intended solely for misch at schwartzkopff.org,LinuxVirtualServer.org users mailing list.. If you are not the named addressee you should not disseminate, distribute, copy or alter this email. Any views or opinions presented in this email are solely those of the author and might not represent those of Physicians' Managed Care or Physician Select Management. Warning: Although Physicians' Managed Care or Physician Select Management has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments. 
This disclaimer was added by Policy Patrol: http://www.policypatrol.com/