Why is there lower throughput with increased nconnect threads with IPsec enabled
Applies to
- ONTAP 9
- IPsec
- nconnect
Answer
- Testing shows that higher nconnect threads with IPsec equates to lower throughput.
- IPsec requires additional CPU resouces to decrypt incoming traffic, reducing resources available for network processing leading to lower throughput.
- With higher nconnect threads, the concurrency lowers due to the additional decrypting resources needed.
- Lowering the nconnect threads adds resources available to process network traffic, increasing throughput.
- Smaller OP sizes see the greatest degradation in throughput.
Example:
Additional Information
additionalInformation_text