#SPEEDMATTERS©6WIND 2016. All rights reserved. All brand names, trademarks and copyright information cited in this presentation shall remain the property of its registered owners.

#SPEEDMATTERS

Fill the Pipe Demo

#SPEEDMATTERS 2©6WIND 2016

6WIND Turbo IPsec

Ready to Use IPsec VPN Software for Commercial-

off-the-Shelf (COTS) Servers

Open Environment Capability: Easy Upgrade Path

From Bare Metal to Virtualization

Cost-effective Secure Connectivity for Your Cloud

#SPEEDMATTERS 3©6WIND 2016

6WIND Turbo IPsec throughput performance

Configuration scenarios

Bare metal

Virtual

SR-IOV

KVM (Ubuntu) hypervisor

Fill the Pipe Demo: DUT Configuration

• Intel(R) Xeon(R) CPU E5-2630 v3 @

2.40GHz (2x 8C/16T)

• 6C/12T for 6WIND data plane

• 4x10G ports

DUT

Bare metal/Virtual37

Gbps

Clear

40

Gbps

Encrypted

#SPEEDMATTERS 4©6WIND 2016

Bare Metal Performance Test

#SPEEDMATTERS 5©6WIND 2016

Fill the Pipe Demo: Bare Metal Test Setup

Traffic

Generator

Traffic

Generator

250 tunnels

IPsec

Encrypted

DUT

Bare Metal

IPsec Assist

250 tunnels

• Intel(R) Xeon(R) CPU E5-2630 v3

@ 2.40GHz (2x 8C/16T)

• 6C/12T for 6WIND data plane

• 4x10G ports

Clear

Traffic

Clear

Traffic

40 Gbps

ENCRYPTED

TRAFFIC=

#SPEEDMATTERS 6©6WIND 2016

Bare Metal Performance Test Results

6c/12t

40 Gbps Encrypted Traffic

6 Dedicated Cores

Simultaneous Encryption/Decryption

Fast Path Core Utilization @ 65 %

35% Available Capacity For More Interfaces

Linux Cores Utilization Is Low

Performing IPsec Control Task, Grafana, etc.

#SPEEDMATTERS 7©6WIND 2016

Virtual Performance Test

#SPEEDMATTERS 8©6WIND 2016

Fill the Pipe Demo: Virtual Test Setup

Traffic

Generator

Traffic

Generator

250 tunnels

DUT

Hypervisor

IPsec assist

250 tunnels

SR

-IO

V

SR

-IO

V

Virtual

Clear

Traffic

Clear

Traffic

• Intel(R) Xeon(R) CPU E5-2630 v3

@ 2.40GHz (2x 8C/16T)

• 6C/12T for 6WIND data plane

• 4x10G ports

=

40 Gbps

ENCRYPTED

TRAFFIC

IPsec

Encrypted

#SPEEDMATTERS 9©6WIND 2016

40 Gbps Encrypted Traffic

6 Dedicated Cores

Simultaneous Encryption/Decryption

Fast Path Core Utilization @ 65 %

35% Available Capacity For More Interfaces

Linux Cores Utilization Is Low

Performing Hypervisor Tasks, IPsec Control Task,

Grafana, etc.

Bare Metal Performance Test Results

6c/12t

#SPEEDMATTERS 10©6WIND 2016

6WIND Turbo IPsec

40 Gbps of Line Rate Encrypted Traffic on

COTS Servers Using Only Six Cores

Bare Metal Performance = Virtual Machine

Performance

Cost-effective Secure Connectivity for Your

Cloud

DUT

Bare metal/Virtual37

Gbps

Clear

40

Gbps

Encrypted