Christian,
sure - you're so damn right :)
Just for the records, I've used
main auth hmac-sha1 enc aes-128 group modp1536
quick auth hmac-sha1 enc aes-128
and just a dumb
# iperf -c 172.16.2.1
------------------------------------------------------------
Client connecting to 172.16.2.1, TCP port 5001
TCP window size: 16.0 KByte (default)
------------------------------------------------------------
[ 3] local 172.16.1.1 port 8600 connected with 172.16.2.1 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0-10.0 sec 72.5 MBytes 60.7 Mbits/sec
#
Without any testing on UDP or different datagram payloads and so forth.
All on OpenBSD flashrd 5.5 build on stable (2014-04-05).
Regards,
Marco
Am 21.01.2015 um 18:01 schrieb Christian Weisgerber:
> On 2015-01-21, Marco Prause <[email protected]> wrote:
>
>> Also when using ipsec in this test-setup, iperf was able to push ~60Mbps
>> through the tunnel (ase-128).
> ^^^^^^^
> That's pretty useless without specifying which MAC algorithm you
> used.