Cisco GRE/IPSec performance, 3845 ISR/3945 ISR G2

Christopher J. Pilkington cjp at 0x1.net
Fri Nov 19 09:00:22 CST 2010


On Thu, Nov 18, 2010 at 02:47:35PM -0800, Seth Mattinen wrote:
> The ISR series do have onboard hardware crypto, but I don't know offhand
> if it can handle a full DS3 worth.
> 
> My first guess is fragment reassembly would probably kill it fast.

We're not seeing fragmentation. The MTU of the physical DS3 is
arbitrarily large (over 9000) to intentionally avoid this.

-cjp




More information about the NANOG mailing list