10g IPsec ?

[Muenz, Michael]

Am 06.11.2019 um 01:21 schrieb Eugene Grosbein:
> 06.11.2019 4:55, Muenz, Michael wrote:
>
>> These were my short results via OPNsense on 4 year old XEONs.
>> So its 11.2, mostly untuned and strongswan as IPsec implementation.
>> If you need more detailed specs just drop me a line.
>>
>> https://www.routerperformance.net/comparing-opnsense-vpn-performance/
> Was it strongswan in user-level IPsec processing mode or kernel-level?
>

Not really sure if I understand you right, encryption and ESP should run 
in kernel space, only IKE packets for SA handling run in user space.