docs/report/vpp_performance_tests/packet_latency_graphs/ipsec.rst

   1 IPSec Crypto HW: IP4 Routed-Forwarding
   2 ======================================
   3
   4 This section includes summary graphs of VPP Phy-to-Phy packet latency
   5 with IPSec encryption used in combination with IPv4 routed-forwarding,
   6 with latency measured at 50% of discovered NDR throughput rate. VPP
   7 IPSec encryption is accelerated using DPDK cryptodev library driving
   8 Intel Quick Assist (QAT) crypto PCIe hardware cards. Latency is reported
   9 for VPP running in multiple configurations of VPP worker thread(s),
  10 a.k.a. VPP data plane thread(s), and their physical CPU core(s)
  11 placement.
  12
  13 Results are generated from a single execution of CSIT NDR discovery
  14 test. Box plots are used to show the Minimum, Average and Maximum packet
  15 latency per test.
  16
  17 *Title of each graph* is a regex (regular expression) matching all
  18 throughput test cases plotted on this graph, *X-axis labels* are indices
  19 of individual test suites executed by csit-vpp-perf-1704-all job that
  20 created result output file used as data source for the graph, *Y-axis
  21 labels* are measured packet Latency [uSec] values, and the *Graph
  22 legend* lists the plotted test suites and their indices. Latency is
  23 reported for concurrent symmetric bi-directional flows, separately for
  24 each direction: i) West-to-East: TGint1-to-SUT1-to-SUT2-to-TGint2, and
  25 ii) East-to-West: TGint2-to-SUT2-to-SUT1-to-TGint1.
  26
  27 .. note::
  28
  29     Test results have been generated by FD.io test executor jobs
  30     `csit-vpp-perf-1704-all
  31     <https://jenkins.fd.io/view/csit/job/csit-vpp-perf-1704-all/>`_,
  32     with Robot Framework result files csit-vpp-perf-1704-all-<id>.zip
  33     `archived here <../../_static/archive/>`_.
  34
  35 VPP packet latency in 1t1c setup (1thread, 1core) is presented in the graph below.
  36
  37 .. raw:: html
  38
  39     <iframe width="700" height="1000" frameborder="0" scrolling="no" src="../../_static/vpp/64B-1t1c-ipsechw-ndrdisc-lat50.html"></iframe>
  40
  41 *Figure 1. VPP 1thread 1core - packet latency for Phy-to-Phy IPSec HW with IPv4 Routed-Forwarding.*
  42
  43 CSIT source code for the test cases used for above plots can be found in CSIT
  44 git repository:
  45
  46 .. code-block:: bash
  47
  48     $ cd $CSIT/tests/perf
  49     $ grep -E "64B-1t1c-.*ipsec.*-ndrdisc" *
  50
  51     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-interfaces-aes-gcm-ndrpdrdisc.robot:| tc01-64B-1t1c-ethip4ipsecscale1ip4-ip4base-interfaces-aes-gcm-ndrdisc
  52     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-interfaces-aes-gcm-ndrpdrdisc.robot:| tc03-64B-1t1c-ethip4ipsecscale1000ip4-ip4base-interfaces-aes-gcm-ndrdisc
  53     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-interfaces-cbc-sha1-ndrpdrdisc.robot:| tc01-64B-1t1c-ethip4ipsecscale1ip4-ip4base-interfaces-cbc-sha1-ndrdisc
  54     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-interfaces-cbc-sha1-ndrpdrdisc.robot:| tc03-64B-1t1c-ethip4ipsecscale1000ip4-ip4base-interfaces-cbc-sha1-ndrdisc
  55     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-tunnels-aes-gcm-ndrpdrdisc.robot:| tc01-64B-1t1c-ethip4ipsecscale1ip4-ip4base-tunnels-aes-gcm-ndrdisc
  56     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-tunnels-aes-gcm-ndrpdrdisc.robot:| tc03-64B-1t1c-ethip4ipsecscale1000ip4-ip4base-tunnels-aes-gcm-ndrdisc
  57     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-tunnels-cbc-sha1-ndrpdrdisc.robot:| tc01-64B-1t1c-ethip4ipsecscale1ip4-ip4base-tunnels-cbc-sha1-ndrdisc
  58     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-tunnels-cbc-sha1-ndrpdrdisc.robot:| tc03-64B-1t1c-ethip4ipsecscale1000ip4-ip4base-tunnels-cbc-sha1-ndrdisc
  59     40ge2p1xl710-ethip4ipsectptlispgpe-ip4base-cbc-sha1-ndrpdrdisc.robot:| tc01-64B-1t1c-ethip4ipsectptlispgpe-ip4base-cbc-sha1-ndrdisc
  60
  61
  62 VPP packet latency in 2t2c setup (2thread, 2core) is presented in the graph below.
  63
  64 .. raw:: html
  65
  66     <iframe width="700" height="1000" frameborder="0" scrolling="no" src="../../_static/vpp/64B-2t2c-ipsechw-ndrdisc-lat50.html"></iframe>
  67
  68 *Figure 2. VPP 2threads 2cores - packet latency for Phy-to-Phy IPSec HW with IPv4 Routed-Forwarding.*
  69
  70 CSIT source code for the test cases used for above plots can be found in CSIT
  71 git repository:
  72
  73 .. code-block:: bash
  74
  75     $ cd $CSIT/tests/perf
  76     $ grep -E "64B-2t2c-.*ipsec.*-ndrdisc" *
  77
  78     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-interfaces-aes-gcm-ndrpdrdisc.robot:| tc13-64B-2t2c-ethip4ipsecscale1ip4-ip4base-interfaces-aes-gcm-ndrdisc
  79     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-interfaces-aes-gcm-ndrpdrdisc.robot:| tc15-64B-2t2c-ethip4ipsecscale1000ip4-ip4base-interfaces-aes-gcm-ndrdisc
  80     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-interfaces-cbc-sha1-ndrpdrdisc.robot:| tc13-64B-2t2c-ethip4ipsecscale1ip4-ip4base-interfaces-cbc-sha1-ndrdisc
  81     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-interfaces-cbc-sha1-ndrpdrdisc.robot:| tc15-64B-2t2c-ethip4ipsecscale1000ip4-ip4base-interfaces-cbc-sha1-ndrdisc
  82     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-tunnels-aes-gcm-ndrpdrdisc.robot:| tc13-64B-2t2c-ethip4ipsecscale1ip4-ip4base-tunnels-aes-gcm-ndrdisc
  83     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-tunnels-aes-gcm-ndrpdrdisc.robot:| tc15-64B-2t2c-ethip4ipsecscale1000ip4-ip4base-tunnels-aes-gcm-ndrdisc
  84     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-tunnels-cbc-sha1-ndrpdrdisc.robot:| tc13-64B-2t2c-ethip4ipsecscale1ip4-ip4base-tunnels-cbc-sha1-ndrdisc
  85     40ge2p1xl710-ethip4ipsecscaleip4-ip4base-tunnels-cbc-sha1-ndrpdrdisc.robot:| tc15-64B-2t2c-ethip4ipsecscale1000ip4-ip4base-tunnels-cbc-sha1-ndrdisc
  86     40ge2p1xl710-ethip4ipsectptlispgpe-ip4base-cbc-sha1-ndrpdrdisc.robot:| tc07-64B-2t2c-ethip4ipsectptlispgpe-ip4base-cbc-sha1-ndrdisc
  87