Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 17 replies
  • Subscribers 1 subscriber
  • Views 7672 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

CPU test IPsec, rare result

Marcelo Mujica
Hi (excuse my english):
I have accomplished a CPU test conecting 1 for 1 ipsec client and measured de CPU utilization, but since 4 client, CPU utilization decrease rarely. Again same test, again same rare result,

Any ideas

Saludos  


This thread was automatically locked due to age.
Parents
  • 0
    [ QUOTE ]
    Hi (excuse my english):
    I have accomplished a CPU test conecting 1 for 1 ipsec client and measured de CPU utilization when download a bulk fahion (600MB file), but since 4 client, CPU utilization decrease rarely. Again same test, again same rare result,

    Any ideas

    Saludos   

    [/ QUOTE ]  
  • 0 in reply to Marcelo Mujica
    4 percent?  is that the amount of hte increase or the total usage?  if it is the total usage i would not worry..if that is the percentage increase as long as your cpu does not hang around over 60 or so percent i would not worry about it either.. 

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    My doubt is:
    If cpu overhead is directly proportional to ipsec client amount transfering bulk data, why my test delivered other result?...
    1 IPsec client----->cpu=61%
    2 IPsec client----->cpu=85%
    3 IPsec client----->cpu=91%
    4 IPsec client----->cpu=93%
    5 IPsec client----->cpu=92%
    6 IPsec client----->cpu=88%
    7 IPsec client----->cpu=83%
    8 IPsec client----->cpu=81%
    the test was realized two times and similar results
    I am wrong???
    Thank!  
  • 0 in reply to Marcelo Mujica
    it is not neccessairly going to be linear since there are other things going in the background...what class of machine is this(cpu/ram..etc)? 

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    CPU PIII 800, 256 RAM, HDD 20 IDE,2 3com 905tx. Network isolate, 2 catalyst 2950.
    no packet filter, only autopacketfilter option on, left services disabled (ssh, pptp,ike debugging, etc).
    running ipsec service moreover top.

    Thank  
  • 0 in reply to Marcelo Mujica
    what do things look like when ipsec is off?  does the cpu usage drop a whole bunch or does it hover in the 60-90% range?  i am assuming you are using it for firewalling?  how about e-amil filtering/forwarding/anti-virus..etc??

     

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    No service running, no firewalling neither smtp proxy, neither NAT,neither antivirus,etc.
    The network is isolate, to prevent virus,broadcast,etc.
    When IPSec no work (VPN enables but no work) the CPU usage is lower 2%
      
  • 0 in reply to Marcelo Mujica
    how about when vpn is completly shut down?
      

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0 in reply to William Warren
    I don´t probe shutdown freeswan service , but service idle (no client connected)  
  • 0 in reply to Marcelo Mujica
    you are running freeswan on the Astaro box?  if nothing esle is running then either you ahve a hardware problem or something is chewing up your cpu cycles..go into webmin..under reporting click hardware..scroll down to the process list and copy and paste the list here..[:)] 

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Reply
  • 0 in reply to Marcelo Mujica
    you are running freeswan on the Astaro box?  if nothing esle is running then either you ahve a hardware problem or something is chewing up your cpu cycles..go into webmin..under reporting click hardware..scroll down to the process list and copy and paste the list here..[:)] 

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Children
Cookie Information Banner