02-17-2012 08:45 AM
I am using FR4-18i blades for an extended distance replication solution using FCIP. I want to enable IPsec on each FCIP tunnel, but I am concerned about the performance impact it may have.
Is there any documented impact on enabling IPsec? it is hardware based encryption? Anyone with good/bad experiences??
02-17-2012 10:29 AM
The solution is not implemented yet. I am just asking if activating IPsec on the FCIP tunnel can have a negative impact on performance.
I would also like to know if the IPsec encrytption on FR4-18i blades uses hardware based or software based encryption. That's usually an indicator of how it affects performance.
02-20-2012 05:02 AM
Not very used to Brocade FCIP and IPsec, but according to the admin guide, when using IPsec with FCIP, Jumbo frames are not suppported. So if Jumbo frames are used in the network; this could mean a big difference, performancewise.
02-21-2012 06:02 AM
We are not going to use jumbo frames, but good to know anyway.
I read in the "SAN Design Best Practices" document that:
"IPsec operates at line rate and is HW-based. There are no additional licenses or costs to use IPsec on Brocade. It adds an insignificant amount of
latency at 5 μs"
This applies to AP-7800B switches, but I don't know if the same statement applies to FR4-18i blades. Does anybody have any insight on this?
02-21-2012 08:19 AM
--->>>I want to enable IPsec on each FCIP tunnel,...
In short form, IPsec required High Performance Extension License.
High Performance Extension over FCIP/FC (formerly known as ―FC-IP Services‖) (For the FR4-18i blade and Brocade 7500) — This license key also includes the FC-FastWrite feature and IPsec capabilities.
I hope this answer you question/problem
02-21-2012 08:46 AM
You ask in native post "i want to enable....." that sound really you have at the moment this features not enabled or configured.
according you question, as mention you must have High Performance Extension over FCIP/FC License before you can enable FCIP over IPsec
Now my question, do you have the License?