Extreme universal switch 802.1AE (macsec) question

[Terry_Yang]

Hi Sirs

I search the EXOS user guide for MacSec

It shows "hardware level, line-rate traffic passes with low latency, but due to additional MACsec headers, some throughput drop occurs. MACsec operates on a hop-by-hop basis, allowing for deep packet inspection."

I want to know "but due to additional MACsec headers, some throughput drop occurs." the mean is if I use 10G port and run Macsec , can't it run 10G speed ? if it can't , How much will the rate be decreased by?

[HarrySo · Accepted solution]

Hi, recently if found this. Hope it helps

MACsec performance - Cristian Sirbu (trueneutral.eu)

[Ludovico_Steven · Accepted solution]

MACsec usually adds some 32 bytes between MACsec header and ICV fields:

So it depends on your frame sizes. The overhead will be greater for small frame sizes rather than on large frame sizes.

If you inject only 64 bytes frames, MACsec will turn them into 96 byte frames, with an 50% overhead..

If you inject 1518 byte frames, then the MACsec overhead is just 2.1%

[HarrySo · Accepted solution]

Hi, recently if found this. Hope it helps

MACsec performance - Cristian Sirbu (trueneutral.eu)