Rev 1.2
14
Mellanox Technologies
Step 3.
Check the IPsec counters after processing the offloaded traffic on both gateways:
4.1.5 Running Throughput Test
Step 1.
Run iperf3 servers on server B machine:
Step 2.
Run iperf3 clients on server A machine:
Note the throughput achieved.
Step 3.
While traffic is flowing, check the total traffic on both gateways:
Step 4.
Check CPU usage on both gateways:
Press '1' inside 'top' user interface to see individual CPU usage. Note the usage pattern on each
gateway server is different.
4.2
Transport Mode
4.2.1 Loading Kernel and Driver
The following steps should be performed on both servers A and B.
Step 1.
Make sure the correct kernel version is running:
[root@gateway-c ~]# ethtool -S ens2 | grep ipsec
ipsec_dec_in_packets: 8
ipsec_dec_out_packets: 8
ipsec_dec_bypass_packets: 6
ipsec_enc_in_packets: 8
ipsec_enc_out_packets: 8
ipsec_enc_bypass_packets: 6
ipsec_dec_drop_packets: 0
ipsec_dec_auth_fail_packets: 0
ipsec_enc_drop_packets: 0
ipsec_add_sa_success: 0
ipsec_add_sa_fail: 0
ipsec_del_sa_success: 0
ipsec_del_sa_fail: 0
ipsec_cmd_drop: 0
[root@gateway-d ~]# ethtool -S ens2 | grep ipsec
[root@server-b ~]# iperf3 -s -B 192.168.9.2 &
[root@server-b ~]# iperf3 -s -B 192.168.9.3 &
[root@server-b ~]# iperf3 -s -B 192.168.9.4 &
[root@server-a ~]# iperf3 -c 192.168.9.2 -B 192.168.8.2 -t 1000 -i 1 &
[root@server-a ~]# iperf3 -c 192.168.9.3 -B 192.168.8.3 -t 1000 -i 1 &
[root@server-a ~]# iperf3 -c 192.168.9.4 -B 192.168.8.4 -t 1000 -i 1 &
[root@gateway-c ~]# nload ens2
[root@gateway-d ~]# nload ens2
[root@gateway-c ~]# top
[root@gateway-d ~]# top
[root@server-a ~]# uname -r
