In April 2017, Ixia used its CloudStorm 100GE Application and Security Test Load Module to run an SSL performance test on an F5 VIPRION B4450 Application Delivery Controller blade in a VIPRION C4480 chassis. The C4480 chassis can hold up to four blades (and the C4800 chassis holds up to eight), but two blades were sufficient for testing purposes. F5’s VIPRION chassis can scale linearly, so with a full chassis of B4450 blades, the test results would scale to 8x the following results.
Additional details can also be found in Ixia’s blog post, Understanding Factors That Impact Encryption Performance.
When testing was complete, Ixia reported the results below:
VIPRION B4450 ADC
The products went through the following multi-phase testing process:
In total, more than 120 test runs were conducted in order to produce these results.
Ixia’s CloudStorm Application and Security Test Load Module delivers an architecture that allows concurrent emulation of complex applications, SSL encrypted applications, and a large volume of DDoS traffic to validate that network infrastructure is high performing and secure. CloudStorm supports up to 12 blades in a chassis, and is driven by Ixia’s BreakingPoint and IxLoad test solutions for application delivery and security resiliency testing. With a single blade in the chassis, CloudStorm is capable of achieving 90 Gbps of encrypted throughput and 160 k connections per second with not any session reuse with strong ciphers and key sizes.
Ixia tested a F5 VIPRION B4450 Application Delivery Controller (ADC) blade running in a C4480 chassis.
Max Connections per Second Performance Test (CPS)
To measure the maximum number of SSL handshakes per second, Ixia used an HTTP GET requesting a page size of 1024 bytes. Ixia selected HTTP 1.0 to ensure the connection would be terminated as soon as the transfer was completed, and a new connection opened for the next transaction.
Max Encrypted Bandwidth Test (Throughput)
To measure the maximum number of SSL handshakes per second, Ixia used an HTTP GET requesting a page size of 1 MB. Ixia selected HTTP 1.1; a single SSL connection saw multiple Get requests of 1 MB page size, and the response from the server with a 1 MB page.
Each session comprised an SSL handshake with unique public-private key pairs for the asymmetric key exchange that led to the unique key used to encrypt the data transfer.
As more businesses move to ECC cipher suites for perfect forward secrecy, the need for solutions that ensure application performance will grow. In a previous article (SSL Performance Results: F5 BIG-IP iSeries vs. Citrix and A10) F5 showed the results from internal testing. Now an independent third-party source, Ixia, has demonstrated that F5’s VIPRION 4450 blade provides an unparalleled platform to stay in front of existing trends, and prepare for unforeseen changes and fundamental shifts—positioning the enterprise for future security, scalability, and reliability.
Back to the Newsroom Home Page