topic Extreme universal switch 802.1AE (macsec) question in ExtremeSwitching (EXOS/Switch Engine)

Extreme universal switch 802.1AE (macsec) question

Terry_Yang — Wed, 17 May 2023 10:45:35 GMT

Hi Sirs

I search the EXOS user guide for MacSec

It shows "hardware level, line-rate traffic passes with low latency, but due to additional MACsec headers, some throughput drop occurs. MACsec operates on a hop-by-hop basis, allowing for deep packet inspection."

I want to know "but due to additional MACsec headers, some throughput drop occurs." the mean is if I use 10G port and run Macsec , can't it run 10G speed ? if it can't , How much will the rate be decreased by?

Re: Extreme universal switch 802.1AE (macsec) question

HarrySo — Wed, 17 May 2023 12:28:31 GMT

Hi, recently if found this. Hope it helps

MACsec performance - Cristian Sirbu (trueneutral.eu)

Re: Extreme universal switch 802.1AE (macsec) question

Ludovico_Steven — Wed, 17 May 2023 12:34:32 GMT

MACsec usually adds some 32 bytes between MACsec header and ICV fields:

So it depends on your frame sizes. The overhead will be greater for small frame sizes rather than on large frame sizes.

If you inject only 64 bytes frames, MACsec will turn them into 96 byte frames, with an 50% overhead..

If you inject 1518 byte frames, then the MACsec overhead is just 2.1%