Intro

Performance data is always a key criteria for selection of network solutions. But performance data is easily misconstrued, making vendor comparisons challenging, if not impossible. While Netgate is not in a position to vet other vendors' claims, we try to be 100% transparent with our performance test results. Packet traffic conditions, hardware vintage, software release, and test methodology can independently affect test results let alone en masse. So, we invite readers to remember the following when viewing TNSR^® software test data:

• Not all packets are created equal
• Not all CPUs are created equal
• The packet processing “tax” on the CPU varies dramatically by application
• Flow type (unidirectional vs. bidirectional) yields different results
• The level of encryption and availability of hardware assist matters
• Software-based packet processing technology is evolving rapidly
• Performance evolves with product software releases

Last, it should be understood that these numbers were generated in a controlled test laboratory and, therefore, cannot be guaranteed for "in the wild" environments.

Test Setup

Stated results are based on these specific test conditions:

Results

Using the same test setup, here are single core IPsec testing results using both AES-GCM-128 with CPU-integrated AES-NI, as well as AES-GCM-128 with QAT: