Intel has introduced 6 new instruction for AES encryption. These instruction has hardware support in processor itself. The instructions AESENC, AESENCLAST, AESDEC, and AESDELAST support AES encryption and decryption operations. The instructions AESIMC and AESKEYGENASSIST support AES key expansion. Using these instructions your encryption throughput may increase significantly. I tested AESNI for IPSEC throughput between two gateways (One linux box other fortigate 3016B firewall) over 1 Gbps link using ipsec-tools 0.7.3.
System Requirements:-
presently it is uspported for 64 bit machine only.
Linux kernel 2.6.31 or above is required
Without IPSEC throughput comes around 900 Mbps
With IPSEC (withoutAESNI) throughput comes around 500 Mbps
With IPSEC (With AESNI ) throughput comes around 800 Mbps
So I got throughput enhancement about 1.6 times in my case. These result may vary depending on your applications and operating systems. But one thing is sure your throughput will increase.
System Requirements:-
presently it is uspported for 64 bit machine only.
Linux kernel 2.6.31 or above is required
Without IPSEC throughput comes around 900 Mbps
With IPSEC (withoutAESNI) throughput comes around 500 Mbps
With IPSEC (With AESNI ) throughput comes around 800 Mbps
So I got throughput enhancement about 1.6 times in my case. These result may vary depending on your applications and operating systems. But one thing is sure your throughput will increase.
No comments:
Post a Comment