Cisco GRE/IPSec performance, 3845 ISR/3945 ISR G2
Christopher J. Pilkington
cjp at 0x1.net
Fri Nov 19 09:00:22 CST 2010
On Thu, Nov 18, 2010 at 02:47:35PM -0800, Seth Mattinen wrote:
> The ISR series do have onboard hardware crypto, but I don't know offhand
> if it can handle a full DS3 worth.
> My first guess is fragment reassembly would probably kill it fast.
We're not seeing fragmentation. The MTU of the physical DS3 is
arbitrarily large (over 9000) to intentionally avoid this.
More information about the NANOG