Rev 1.2
16
Mellanox Technologies
Step 2.
Verify connectivity between the two servers. At this point, traffic should be encrypted:
Step 3.
Check the IPsec counters after processing the offloaded traffic on both servers:
4.2.4 Running Throughput Test
Step 1.
Run iperf3 servers on server B machine:
Step 2.
Run iperf3 clients on server A machine:
Note the throughput achieved.
Step 3.
While traffic is flowing, check the total traffic on both servers:
Step 4.
Check CPU usage on both servers:
Press '1' inside 'top' user interface to see individual CPU usage.
[root@server-a ~]# ping 192.168.8.22
[root@server-b ~]# ping 192.168.8.12
[root@server-a ~]# ethtool -S ens1 | grep ipsec
ipsec_dec_in_packets: 8
ipsec_dec_out_packets: 8
ipsec_dec_bypass_packets: 6
ipsec_enc_in_packets: 8
ipsec_enc_out_packets: 8
ipsec_enc_bypass_packets: 6
ipsec_dec_drop_packets: 0
ipsec_dec_auth_fail_packets: 0
ipsec_enc_drop_packets: 0
ipsec_add_sa_success: 0
ipsec_add_sa_fail: 0
ipsec_del_sa_success: 0
ipsec_del_sa_fail: 0
ipsec_cmd_drop: 0
[root@server-b ~]# ethtool -S ens1 | grep ipsec
[root@server-b ~]# iperf3 -s -B 192.168.8.22 &
[root@server-b ~]# iperf3 -s -B 192.168.8.23 &
[root@server-b ~]# iperf3 -s -B 192.168.8.24 &
[root@server-a ~]# iperf3 -c 192.168.8.22 -B 192.168.8.12 -t 1000 -i 1 &
[root@server-a ~]# iperf3 -c 192.168.8.23 -B 192.168.8.13 -t 1000 -i 1 &
[root@server-a ~]# iperf3 -c 192.168.8.24 -B 192.168.8.14 -t 1000 -i 1 &
[root@server-a ~]# nload ens1
[root@server-b ~]# nload ens1
[root@server-a ~]# top
[root@server-b ~]# top
