Anybody got benchmarks on how much a 2600 with crypto card can push?

[Buddha Bart]

We've got these videoconfrencing boxes (I think H.323 based, but don't hold me to it) being used across a relativly dedicated T1 (it runs 20 - 30% most of the time). When the traffic is just sent across the internet normal, the stream is fine, the conferencing works great. When its piped over a 3des gre tunnel, the video goes to slideshow sh!t. The wierd thing is this is on a 2600 with a crypto accelerator card, so it should have noooo problem whatsoever pushing the ~320Kbps stream through the vpn. I suspect the problem is more latency/jitter related, but does anyone know if those crypto cards introduce a great deal?

 

[spidey07]

Originally posted by: Buddha Bart
We've got these videoconfrencing boxes (I think H.323 based, but don't hold me to it) being used across a relativly dedicated T1 (it runs 20 - 30% most of the time). When the traffic is just sent across the internet normal, the stream is fine, the conferencing works great. When its piped over a 3des gre tunnel, the video goes to slideshow sh!t. The wierd thing is this is on a 2600 with a crypto accelerator card, so it should have noooo problem whatsoever pushing the ~320Kbps stream through the vpn. I suspect the problem is more latency/jitter related, but does anyone know if those crypto cards introduce a great deal?

while i don't have any benches a 2600 with a crypto card shouldn't have any trouble. without any QoS or shaping mechanisms video is going to suck.

try "show proc cpu"

 

[Buddha Bart]

So if I tweaked qos settings for it I should be ok? I've never mucked with QoS before, is it relativly easy to say "everything h.323 related going in or out of that tunnel is important"?

edit: I love this site, http://routergod.com/garycoleman

edit2: You say without QoS that video is going to suck, but it was working really really well when we took it out of the vpn/gre-tunnel.

 

[Pheran]

Hmm, what about fragmentation? If the encrypted tunnel has a lower MTU and is fragmenting every single packet from the video units, it could wreak havoc. Is the MTU configurable on the video units?

 

[spidey07]

Originally posted by: Pheran
Hmm, what about fragmentation? If the encrypted tunnel has a lower MTU and is fragmenting every single packet from the video units, it could wreak havoc. Is the MTU configurable on the video units?

super excellent point!