How we did it

We conducted our throughput tests using an Ixia 1600 traffic generator. Traffic load was delivered first in one direction, then in both directions simultaneously. Throughput tests were run with the device configured for straightforward IP routing, and then when set-up for high-security processing - including Triple-DES encryption - through VPN tunnels.

Since the Intel Express 8205 supports only site-to-site VPN tunnels, we needed two units to fully exercise the product's VPN capabilities. These were connected via an intermediate IP network, which simulated the Internet. To ascertain the maximum encrypted-data throughput the network, bandwidth between the routers was 10M bit/sec, full duplex. In actuality, though, the routers would be connected via dedicated connections to an ISP, typically at up to T-1 speed - 1.544M bit/sec, full duplex. The Ixia also clocked the latency added to passing data. Encryption and traffic load were confirmed using Network Associates' Sniffer and Agilent's Network Advisor traffic analyzers.

Throughput for straightforward IP routing was at wire-speed, 10M bit/sec. With high-security processing and encryption, throughput varied considerably with packet size and bidirectionality. Maximum bidirectional throughput with all 64-byte packets was 185K bit/sec per direction, 370K bit/sec total. Maximum bidirectional throughput with all 1,462-byte packets was 747K bit/sec per direction, 1,494K bit/sec total. When high-security processing, the product adds 4.566 msec of latency to forwarded data packets.

Send this article to a colleague