MACsec performance on 5520 series / LRM/MACsec

[mkluge]

Hi there,

we are planning to use encryption of some of our new uplinks with 10GBe and wonder how stable and fast the links will be with MACsec enabled.

Is there any analysis on how the performance on 5520 (5520-VIM-4YE) or LRM/MACsec will be? Further we are wondering if MACsec is a software or a hardware feature. We expect it to perform differently on the several plattform if it is a software feature as the performance will then be limited by the switch’es CPU.

Would be nice if someone can shed some light on it :).

Thanks and Greetings,

Michael

[Raley16]

Thank you for updating us with the outcome.

My Balance Now

[Stefan_K_]

Additional and not overwhelming information can be found here:

https://www.trueneutral.eu/2017/macsec-perf.html

[OscarK · Accepted solution]

Macsec on 5520 is done in hardware and line-rate.

Throughput is a little bit less than 10Gb due to the extra macsec headers.