cancel
Showing results for 
Search instead for 
Did you mean: 

Extreme universal switch 802.1AE (macsec) question

Extreme universal switch 802.1AE (macsec) question

Terry_Yang
New Contributor III

Hi Sirs

I search the EXOS user guide for MacSec

It shows "hardware level, line-rate traffic passes with low latency, but due to additional MACsec headers, some throughput drop occurs. MACsec operates on a hop-by-hop basis, allowing for deep packet inspection."

I want to know "but due to additional MACsec headers, some throughput drop occurs." the mean is if I use 10G port and run Macsec , can't it run 10G speed ? if it can't , How much will the rate be decreased by?

2 ACCEPTED SOLUTIONS

HarrySo
New Contributor III

Ludovico_Steven
Extreme Employee

MACsec usually adds some 32 bytes between MACsec header and ICV fields:

Ludovico_Steven_0-1684326439312.png

So it depends on your frame sizes. The overhead will be greater for small frame sizes rather than on large frame sizes.

If you inject only 64 bytes frames, MACsec will turn them into 96 byte frames, with an 50% overhead..

If you inject 1518 byte frames, then the MACsec overhead is just 2.1%

 

View solution in original post

2 REPLIES 2

Ludovico_Steven
Extreme Employee

MACsec usually adds some 32 bytes between MACsec header and ICV fields:

Ludovico_Steven_0-1684326439312.png

So it depends on your frame sizes. The overhead will be greater for small frame sizes rather than on large frame sizes.

If you inject only 64 bytes frames, MACsec will turn them into 96 byte frames, with an 50% overhead..

If you inject 1518 byte frames, then the MACsec overhead is just 2.1%

 

HarrySo
New Contributor III

Hi, recently if found this. Hope it helps

MACsec performance - Cristian Sirbu (trueneutral.eu)

 

GTM-P2G8KFN