Ixia Introduces Gigabit Line Rate Encryption Test Solution

Enterprise Networks & Servers, Aug 2004

Ixia has stated that its new Encryption Load Module (ELM) is the first in the industry to offer sustainable gigabit line rate performance testing capabilities for benchmarking the performance of IPSec devices and networks.

The Ixia ELM contains security co-processors that perform the encryption and decryption, along with a RISC CPU running Linux, on each of two network ports. This architecture, combined with Ixia's IxVPN software test application, provides the industry with a test platform that sets records for validating the operation of IPSec VPN gateways. The performance gains offered by embedded hardware acceleration make it possible for the Ixia test solution to emulate VPN devices and networks under real-world conditions.

"Customers deploying next generation VPN gateways must test encryption and decryption throughput, latency, and loss, with multiple sessions and at sustainable Gigabit Ethernet speeds," said Alan Amrod, vice president of marketing for Ixia. "Our new hardware platform with security co-processors, coupled with Ixia's easy to use IxVPN software solution, create a true test solution that is unique to Ixia."

The integration of a security co-processor and dedicated RISC processor per port enable the ELM to measure gigabit line-rate IPSec encryption and decryption throughput, latency, and loss per RFC 2544.

In addition, the ELM and IxVPN combine to emulate the key functional requirements of today's VPN networks.

These include IPSec security features such as data encryption, device authentication and credential, data integrity, address hiding, and security-association (SA) key aging - all at higher speeds than before. This means that companies currently deploying and implementing VPNs, such as Cisco Systems, NTT, and Morgan Stanley, will be able to perform testing for encryption and decryption throughput and latency tests under realistic load conditions.

The Ixia IxVPN application supports several encryption algorithms, including DES (Data Encryption Standard), 3DES (Data Encryption Standard 3) and AES (Advanced Encryption Standard), IPSec tunnel and transport modes, IKE (Internet Key Exchange) main mode and aggressive modes, as well as support for a certificate authority (CA) and pre-shared keys.

IxVPN provides a set of statistics and diagnostics in real time, on a per-tunnel and aggregate basis. The ELM offers two Dual-PHY (copper and fiber) 10/100/1000 Mbps Ethernet ports and is compatible with the IXlA 1600T, IXIA 400T and IXIA 250 hardware platforms.

www.ixiacom.com