Cisco GRE/IPSec performance, 3845 ISR/3945 ISR G2

Christopher J. Pilkington cjp at
Fri Nov 19 09:00:22 CST 2010

On Thu, Nov 18, 2010 at 02:47:35PM -0800, Seth Mattinen wrote:
> The ISR series do have onboard hardware crypto, but I don't know offhand
> if it can handle a full DS3 worth.
> My first guess is fragment reassembly would probably kill it fast.

We're not seeing fragmentation. The MTU of the physical DS3 is
arbitrarily large (over 9000) to intentionally avoid this.


More information about the NANOG mailing list