Hi, Recently, I did some performance test for IPsec/IPv4 using netperf. Share the results with you. OS Hardware Algorithm Key length IPSec config Performance degrade Linux kernel 2.5.72 P4 2G 256M RAM 3DES-cbc 192 bit ESP transport mode 48% Linux kernel 2.5.72 P4 2G 256M RAM blowfish-cbc 192 bit ESP transport mode 5% Linux kernel 2.5.72 P4 3G 512M RAM 3DES-cbc 192 bit ESP transport mode 21% Linux kernel 2.5.72 P4 3G 512M RAM blowfish-cbc 192 bit ESP transport mode 3% Brief conclusion: 1 more fast the CPU speed, the less performance degradation 2 blowfish has a better performance that 3DES Thanks, Forrest - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html