1 IPSec Crypto HW: IP4 Routed-Forwarding
2 ======================================
4 Following sections include summary graphs of VPP Phy-to-Phy performance with
5 IPSec encryption used in combination with IPv4 routed-forwarding,
6 including NDR throughput (zero packet loss) and PDR throughput (<0.5%
7 packet loss). VPP IPSec encryption is accelerated using DPDK cryptodev
8 library driving Intel Quick Assist (QAT) crypto PCIe hardware cards.
9 Performance is reported for VPP running in multiple configurations of
10 VPP worker thread(s), a.k.a. VPP data plane thread(s), and their
11 physical CPU core(s) placement.
13 Note: only 1,000 scale IPSec tunnel test cases are plotted. Single IPSec
14 tunnel test cases are listed in regex outputs, but marked {NOT PLOTTED}
15 due to the current limitation of auto-plotting scripts. For all test
16 result data please refere to **Detailed Test Results** section.
21 VPP NDR 64B packet throughput in 1t1c setup (1thread, 1core) is presented
26 <iframe width="700" height="1000" frameborder="0" scrolling="no" src="../../_static/vpp/64B-1t1c-ipsechw-ndrdisc.html"></iframe>
28 *Figure 1. VPP 1thread 1core - NDR Throughput for Phy-to-Phy IPSEC HW.*
30 CSIT source code for the test cases used for above plots can be found in CSIT
33 .. program-output:: cd ../../ && set -x && cd tests/vpp/perf/crypto && grep -E "64B-1t1c-.*ipsec.*-ndrdisc" *
36 VPP NDR 64B packet throughput in 2t2c setup (2thread, 2core) is presented
41 <iframe width="700" height="1000" frameborder="0" scrolling="no" src="../../_static/vpp/64B-2t2c-ipsechw-ndrdisc.html"></iframe>
43 *Figure 2. VPP 2threads 2cores - NDR Throughput for Phy-to-Phy IPSEC HW.*
45 CSIT source code for the test cases used for above plots can be found in CSIT
48 .. program-output:: cd ../../ && set -x && cd tests/vpp/perf/crypto && grep -E "64B-2t2c-.*ipsec.*-ndrdisc" *
54 VPP PDR 64B packet throughput in 1t1c setup (1thread, 1core) is presented
55 in the graph below. PDR measured for 0.5% packet loss ratio.
59 <iframe width="700" height="1000" frameborder="0" scrolling="no" src="../../_static/vpp/64B-1t1c-ipsechw-pdrdisc.html"></iframe>
61 *Figure 3. VPP 1thread 1core - PDR Throughput for Phy-to-Phy IPSEC HW.*
63 CSIT source code for the test cases used for above plots can be found in CSIT
66 .. program-output:: cd ../../ && set -x && cd tests/vpp/perf/crypto && grep -E "64B-1t1c-.*ipsec.*-pdrdisc" *
69 VPP PDR 64B packet throughput in 2t2c setup (2thread, 2core) is presented
70 in the graph below. PDR measured for 0.5% packet loss ratio.
74 <iframe width="700" height="1000" frameborder="0" scrolling="no" src="../../_static/vpp/64B-2t2c-ipsechw-pdrdisc.html"></iframe>
76 *Figure 4. VPP 2thread 2core - PDR Throughput for Phy-to-Phy IPSEC HW.*
78 CSIT source code for the test cases used for above plots can be found in CSIT
81 .. program-output:: cd ../../ && set -x && cd tests/vpp/perf/crypto && grep -E "64B-2t2c-.*ipsec.*-pdrdisc" *