topic Re: MACsec performance on 5520 series / LRM/MACsec in ExtremeSwitching (EXOS/Switch Engine)

MACsec performance on 5520 series / LRM/MACsec

mkluge — Wed, 17 Mar 2021 17:00:51 GMT

Hi there,

we are planning to use encryption of some of our new uplinks with 10GBe and wonder how stable and fast the links will be with MACsec enabled.

Is there any analysis on how the performance on 5520 (5520-VIM-4YE) or LRM/MACsec will be? Further we are wondering if MACsec is a software or a hardware feature. We expect it to perform differently on the several plattform if it is a software feature as the performance will then be limited by the switch’es CPU.

Would be nice if someone can shed some light on it :).

Thanks and Greetings,

Michael

Re: MACsec performance on 5520 series / LRM/MACsec

OscarK — Wed, 17 Mar 2021 17:32:20 GMT

Macsec on 5520 is done in hardware and line-rate.

Throughput is a little bit less than 10Gb due to the extra macsec headers.

Re: MACsec performance on 5520 series / LRM/MACsec

Stefan_K_ — Wed, 17 Mar 2021 18:03:13 GMT

Additional and not overwhelming information can be found here:

https://www.trueneutral.eu/2017/macsec-perf.html

Re: MACsec performance on 5520 series / LRM/MACsec

Raley16 — Wed, 17 Mar 2021 19:11:08 GMT

Thank you for updating us with the outcome.

My Balance Now