To answer your question, the 5580 ASA (PIX is EoS if you didnât
know) is capable of 10G âHTTPâ traffic and 20G âjumbo frameâ packets.Â However,
64-byte packet rate is âlimitedâ to 4,000,000pps.Â And yes, you will pay for
that performance.Â You get a lot more than just a packet filter with the ASA
Fred Reimer, CISSP, CCNP, CQS-VPN, CQS-ISS
Senior Network Engineer
Coleman Technologies, Inc.
interesting study I had not seen, and a bummer. That really puts a cramp in my
advocation of our CARP+pf load balancers/firewalls/gateways. Than again, what's
a PIX box capable of?
I also had to switch to OpenBSD as there was a fatal crash with the bridge
device in FreeBSD when used with my paticular OpenVPN/CARP/pf combination.
AFAIK pf/forwarding only takes place on one core and wouldn't take advantage of
the other 3 cores, correct?
----- Original Message -----
From: "Adrian Chadd" <[email protected]>
To: "Chris Grundemann" <[email protected]>
Cc: "William Herrin" <[email protected]>,
Sent: Tuesday, March 25, 2008 6:02:03 PM (GMT-0800) America/Los_Angeles
Subject: Re: 10GE router resource
On Tue, Mar 25, 2008, Chris Grundemann wrote:
> To Ann's question on resources; I have only used Linux routers with 1G
> ports but have surpassed 10G total throughput (up+ down) using various
> dual proc set ups, most often Intel Xeon in Dell servers. A
> by the name of Martin Pels wrote a good paper on the subject early
> last year that can be found here:
> http://docs.rodecker.nl/10-GE_Routing_on_Linux.pdf. He hit a wall at
> 700K pps and was using two dual core Intel Xeon 64bit 2.33GHz CPUs and
> 2GB of RAM in a Dell PowerEdge 1950.
Mike Tancsa did some benchmarking in late 2006:
I think things are slightly faster now but not because of a massive
change in software architecture.