1 IPSec Crypto HW: IP4 Routed-Forwarding
2 ======================================
4 Following sections include summary graphs of VPP Phy-to-Phy performance with
5 IPSec encryption used in combination with IPv4 routed-forwarding,
6 including NDR throughput (zero packet loss) and PDR throughput (<0.5%
7 packet loss). VPP IPSec encryption is accelerated using DPDK cryptodev
8 library driving Intel Quick Assist (QAT) crypto PCIe hardware cards.
9 Performance is reported for VPP running in multiple configurations of
10 VPP worker thread(s), a.k.a. VPP data plane thread(s), and their
11 physical CPU core(s) placement.
16 VPP NDR 64B packet throughput in 1t1c setup (1thread, 1core) is presented
21 <iframe width="700" height="1000" frameborder="0" scrolling="no" src="../../_static/vpp/64B-1t1c-ipsechw-ndrdisc.html"></iframe>
27 \graphicspath{{../_build/_static/vpp/}}
28 \includegraphics[clip, trim=0cm 8cm 5cm 0cm, width=0.70\textwidth]{64B-1t1c-ipsechw-ndrdisc}
29 \label{fig:64B-1t1c-ipsechw-ndrdisc}
32 *Figure 1. VPP 1thread 1core - NDR Throughput for Phy-to-Phy IPSEC HW.*
34 CSIT source code for the test cases used for above plots can be found in CSIT
39 .. program-output:: cd ../../../../../ && set +x && cd tests/vpp/perf/crypto && grep -E "64B-1t1c-.*ipsec.*-ndrdisc" *
46 $ cd tests/vpp/perf/crypto
47 $ grep -E "64B-1t1c-.*ipsec.*-ndrdisc" *
49 VPP NDR 64B packet throughput in 2t2c setup (2thread, 2core) is presented
54 <iframe width="700" height="1000" frameborder="0" scrolling="no" src="../../_static/vpp/64B-2t2c-ipsechw-ndrdisc.html"></iframe>
60 \graphicspath{{../_build/_static/vpp/}}
61 \includegraphics[clip, trim=0cm 8cm 5cm 0cm, width=0.70\textwidth]{64B-2t2c-ipsechw-ndrdisc}
62 \label{fig:64B-2t2c-ipsechw-ndrdisc}
65 *Figure 2. VPP 2threads 2cores - NDR Throughput for Phy-to-Phy IPSEC HW.*
67 CSIT source code for the test cases used for above plots can be found in CSIT
72 .. program-output:: cd ../../../../../ && set +x && cd tests/vpp/perf/crypto && grep -E "64B-2t2c-.*ipsec.*-ndrdisc" *
79 $ cd tests/vpp/perf/crypto
80 $ grep -E "64B-2t2c-.*ipsec.*-ndrdisc" *
85 VPP PDR 64B packet throughput in 1t1c setup (1thread, 1core) is presented
86 in the graph below. PDR measured for 0.5% packet loss ratio.
90 <iframe width="700" height="1000" frameborder="0" scrolling="no" src="../../_static/vpp/64B-1t1c-ipsechw-pdrdisc.html"></iframe>
96 \graphicspath{{../_build/_static/vpp/}}
97 \includegraphics[clip, trim=0cm 8cm 5cm 0cm, width=0.70\textwidth]{64B-1t1c-ipsechw-pdrdisc}
98 \label{fig:64B-1t1c-ipsechw-pdrdisc}
101 *Figure 3. VPP 1thread 1core - PDR Throughput for Phy-to-Phy IPSEC HW.*
103 CSIT source code for the test cases used for above plots can be found in CSIT
108 .. program-output:: cd ../../../../../ && set +x && cd tests/vpp/perf/crypto && grep -E "64B-1t1c-.*ipsec.*-pdrdisc" *
115 $ cd tests/vpp/perf/crypto
116 $ grep -E "64B-1t1c-.*ipsec.*-pdrdisc" *
118 VPP PDR 64B packet throughput in 2t2c setup (2thread, 2core) is presented
119 in the graph below. PDR measured for 0.5% packet loss ratio.
123 <iframe width="700" height="1000" frameborder="0" scrolling="no" src="../../_static/vpp/64B-2t2c-ipsechw-pdrdisc.html"></iframe>
129 \graphicspath{{../_build/_static/vpp/}}
130 \includegraphics[clip, trim=0cm 8cm 5cm 0cm, width=0.70\textwidth]{64B-2t2c-ipsechw-pdrdisc}
131 \label{fig:64B-2t2c-ipsechw-pdrdisc}
134 *Figure 4. VPP 2thread 2core - PDR Throughput for Phy-to-Phy IPSEC HW.*
136 CSIT source code for the test cases used for above plots can be found in CSIT
141 .. program-output:: cd ../../../../../ && set +x && cd tests/vpp/perf/crypto && grep -E "64B-2t2c-.*ipsec.*-pdrdisc" *
148 $ cd tests/vpp/perf/crypto
149 $ grep -E "64B-2t2c-.*ipsec.*-pdrdisc" *