Tunnel connections in the XGS 136's flow table. Measured, 2026-10-20¶
A connection that runs through an IPsec tunnel now leaves the XGS 136's host for its direction that leaves encrypted: the fast path forwards it and encrypts it on the engine itself, as it forwards a plain connection. Through the lab tunnel, one stream held 916 Mbit/s either way; with the setting on, the host handed the engine no frame of it to encrypt where it had handed it some 333,000 every four seconds, the host's CPUs went from 23 % to 11 % busy, and not one frame of it reached the far end in the clear. A rekey in the middle took the connection out of the table before its association went, the host carried it for a few seconds, and the flow maker made it again with the new one.
The whole page, with how it was taken and what it does not show: Tunnel connections in the XGS 136's flow table. Measured, 2026-10-20.
The discussion of this page is held in the project's GitHub Discussions. Showing it here loads giscus from giscus.app and GitHub, and writing in it needs a GitHub account - what that means.