66 replies to this topic

[malakudi]

You can test maximum bandwidth between the two points with iperf. As other mentioned, lowering the encryption algorithm used could improve the performance. You could test the performance of your hardware with openssl speed -evp aes-128-cbc for example. Another issue with Linux ipsec is that it binds the encryption/decryption workload to the softirq of the ethernet card, so you cannot take advantage of multi-core cpus unless you use multiple tunnels and network card with multiple queues.

 

My Atom D525 1800MHz router can do 28MB/sec in openssl speed -evp aes-128-cbc while it can do 52MB/sec on aes-128-gcm. On the other hand, My VU+ Duo2 can do 10MB/sec on aes-128-gcm but 21MB/sec on aes-128-cbc. So choosing the crypto algo is important depending on what hardware you have.

 

If you want maximum IPsec AES performance, the new Atom C2550 is a great chipset, since it supports AES-NI. More than 400MB/sec in aes-128-cbc

[dolphs]

Hi malakudi,

 

 

Your response is appreciated!

 

Got a bit surprised regarding ipsec that it binds the encryption/decryption workload to the softirq, I did discover that while testing especially when the full HD stream gets requested the box ( one CPU ) flies thru the roof ..

 

iperf3 is not available from the packages, there was an attempt to add it to freetz, but what I can see from it it was never adopted.

Sure I can run that tool from a client, but preferably want to execute it from both fritzboxes ... The command " openssl speed -evp aes-128-cbc " I should be able to execute and will try later to see the performance

 

rgd VPN config - at this stage, with FRITZ!OS6.30 at least, there is not much of configuration/ tuning that can be done in the fritzbox.

You simply configure a LAN-LAN setup between both boxes and that is it, so you neither can pick an algorithm nor can change settings  ...

 

Will keep you posted once I am able to stream HD over the VPN ( thus without transcoding ).

Also it seems avm will release new firmwares for both the 7490 and 3370 ( shortly ), but I am a bit sceptic there will be satisfactory result ...

Edited by dolphs, 30 March 2016 - 14:56.

[WanWizard]

Tunnels on the Fritz is a disaster, it took me ages to get it up and running, but I never managed to get it stable, it disconnects at least once an hour. It connects on the Draytek using AES-SHA1 Auth btw...

[dolphs]

In reply to :

 

You could test the performance of your hardware with openssl speed -evp aes-128-cbc for example.

 

My Atom D525 1800MHz router can do 28MB/sec in openssl speed -evp aes-128-cbc while it can do 52MB/sec on aes-128-gcm.

On the other hand, My VU+ Duo2 can do 10MB/sec on aes-128-gcm but 21MB/sec on aes-128-cbc.

 

So choosing the crypto algo is important depending on what hardware you have.

 

If you want maximum IPsec AES performance, the new Atom C2550 is a great chipset, since it supports AES-NI. More than 400MB/sec in aes-128-cbc

 

Here is the result from the 7490:

root@fritz:/var/mod/root# openssl speed -evp aes-128-cbc
WARNING: can't open config file: /mod/etc/ssl/openssl.cnf
Doing aes-128-cbc for 3s on 16 size blocks: 932421 aes-128-cbc's in 2.96s
Doing aes-128-cbc for 3s on 64 size blocks: 269335 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 256 size blocks: 70101 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 17820 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 8192 size blocks: 2213 aes-128-cbc's in 2.98s
OpenSSL 1.0.1s  1 Mar 2016
built on: Thu Mar 24 06:07:27 2016
options:bn(64,32) rc4(ptr,char) des(idx,cisc,2,long) aes(partial) blowfish(ptr)
compiler: /home/dolphs/freetz/7490/toolchain/build/mips_gcc-4.8.5_uClibc-0.9.33.2-nptl/mips-linux-uclibc/bin/mips-linux-uclibc-gcc -I. -I.. -I../include  -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DOPENSSL_SMALL_FOOTPRINT -DOPENSSL_NO_ERR -DB_ENDIAN -DTERMIO -march=24kc -mtune=24kc -msoft-float -Os -pipe -Wa,--trap -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -ffunction-sections -fdata-sections -fomit-frame-pointer -Wall -DSHA1_ASM -DSHA256_ASM -DAES_ASM
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc       5040.11k     5784.38k     5981.95k     6082.56k     6083.52k

Rgd the 3370 I need to compile in support ( freetz ), thought it was available but apparently missed out the binary

Edited by dolphs, 30 March 2016 - 16:44.

[malakudi]

6082.56k is very low, you get maximum 40Mbps aes encoding. And you can't achieve this with ipsec because cpu is also used for many other things. Based to my experience, I can say that linux ipsec with aes can usually achieve 25% of the openssl performance for single tunnel, single connection. So I think you are maxing out around 10 Mbps with this performance.

Your ET10000 probably has much better performance on AES encoding.

Edited by malakudi, 30 March 2016 - 23:49.

[dolphs]

true - I tried to add those results yesterday already, but the edit session timed out.

Anyway find below its much better results :

root@et10000:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 3199680 aes-128-cbc's in 2.80s
Doing aes-128-cbc for 3s on 64 size blocks: 941705 aes-128-cbc's in 2.96s
Doing aes-128-cbc for 3s on 256 size blocks: 245717 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 62011 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 8192 size blocks: 7762 aes-128-cbc's in 3.00s
OpenSSL 1.0.1j 15 Oct 2014
built on: Sun Feb 15 11:34:40 CET 2015
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) blowfish(idx)
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysroot=/dreambox/oe.openpli-4/build/tmp/sysroots/et8000 -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN     -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc      18283.89k    20361.19k    20967.85k    21166.42k    21195.43k

[malakudi]

And what box you have on the other end? Or you are just streaming to a pc/laptop/tablet?

[dolphs]

the vusolo does not look too much promising:

root@vusolo:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 610095 aes-128-cbc's in 2.72s
Doing aes-128-cbc for 3s on 64 size blocks: 181304 aes-128-cbc's in 2.78s
Doing aes-128-cbc for 3s on 256 size blocks: 47376 aes-128-cbc's in 2.80s
Doing aes-128-cbc for 3s on 1024 size blocks: 11976 aes-128-cbc's in 2.81s
Doing aes-128-cbc for 3s on 8192 size blocks: 1498 aes-128-cbc's in 2.79s
OpenSSL 1.0.1j 15 Oct 2014
built on: Sun Feb 15 11:34:40 CET 2015
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) blowfish(idx)
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysroot=/dreambox/oe.openpli-4/build/tmp/sysroots/et8000 -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN   -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc       3588.79k     4173.91k     4331.52k     4364.21k     4398.43k

idea is the vusolo is being used as my stb that pciks a stream from my et10000

[WanWizard]

Quite a slow CPU. Compare that to the ET10K

root@et10000:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 3254497 aes-128-cbc's in 2.94s
Doing aes-128-cbc for 3s on 64 size blocks: 891140 aes-128-cbc's in 2.99s
Doing aes-128-cbc for 3s on 256 size blocks: 221181 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 61022 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 8192 size blocks: 7612 aes-128-cbc's in 3.00s
OpenSSL 1.0.1j 15 Oct 2014
built on: Sun Feb 15 11:34:40 CET 2015
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) blowfish(idx)
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysroot=/dreambox/oe.openpli-4/build/tmp/sysroots/et8000 -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN     -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc      17711.55k    19074.57k    18874.11k    20828.84k    20785.83k

[theparasol]

root@gbquadplus:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 3040450 aes-128-cbc's in 2.96s
Doing aes-128-cbc for 3s on 64 size blocks: 909021 aes-128-cbc's in 2.97s
Doing aes-128-cbc for 3s on 256 size blocks: 239922 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 1024 size blocks: 60830 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 8192 size blocks: 7619 aes-128-cbc's in 2.98s
OpenSSL 1.0.2g  1 Mar 2016
built on: reproducible build, date unspecified
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) blowfish(idx)
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysroot=/home/buildserver/openmips52/build-enviroment/builds/openmips/release/gb7356/tmp/sysroots/gb7356 -I. -I.. -I../include  -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN       -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -fdebug-prefix-map=/home/buildserver/openmips52/build-enviroment/builds/openmips/release/gb7356/tmp/work/mips32el-oe-linux/openssl/1.0.2g-r0/openssl-1.0.2g=/usr/src/openssl -fdebug-prefix-map=/home/buildserver/openmips52/build-enviroment/builds/openmips/release/gb7356/tmp/work/mips32el-oe-linux/openssl/1.0.2g-r0/openssl-1.0.2g=/usr/src/openssl -fdebug-prefix-map=/home/buildserver/openmips52/build-enviroment/builds/openmips/release/gb7356/tmp/sysroots/x86_64-linux= -fdebug-prefix-map=/home/buildserver/openmips52/build-enviroment/builds/openmips/release/gb7356/tmp/sysroots/gb7356=  -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc      16434.86k    19588.33k    20610.75k    20902.66k    20944.58k

[theparasol]

root@et5x00:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 740118 aes-128-cbc's in 2.97s
Doing aes-128-cbc for 3s on 64 size blocks: 219734 aes-128-cbc's in 2.97s
Doing aes-128-cbc for 3s on 256 size blocks: 57609 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 1024 size blocks: 14583 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 8192 size blocks: 1829 aes-128-cbc's in 2.99s
OpenSSL 1.0.1j 15 Oct 2014
built on: Sun Feb 15 11:34:40 CET 2015
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) blowfish(idx)
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysroot=/dreambox/oe.openpli-4/build/tmp/sysroots/et8000 -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN     -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc       3987.17k     4735.01k     4948.96k     5011.07k     5011.09k

[Erik Slagter]

And now someone on a Solo4k 

[40H3X]

root@vuduo:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 750612 aes-128-cbc's in 2.93s
Doing aes-128-cbc for 3s on 64 size blocks: 217230 aes-128-cbc's in 2.87s
Doing aes-128-cbc for 3s on 256 size blocks: 56820 aes-128-cbc's in 2.90s
Doing aes-128-cbc for 3s on 1024 size blocks: 14342 aes-128-cbc's in 2.87s
Doing aes-128-cbc for 3s on 8192 size blocks: 1804 aes-128-cbc's in 2.88s
OpenSSL 1.0.1j 15 Oct 2014
built on: Thu Mar  3 14:56:02 CET 2016
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) blowfish(idx)
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysroot=/media/data2/openpli-oe-core/build/tmp/sysroots/sh1 -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN  -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc       4098.91k     4844.15k     5015.83k     5117.15k     5131.38k
 

[40H3X]

root@vuzero:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 1280902 aes-128-cbc's in 2.94s
Doing aes-128-cbc for 3s on 64 size blocks: 379421 aes-128-cbc's in 2.96s
Doing aes-128-cbc for 3s on 256 size blocks: 96522 aes-128-cbc's in 2.93s
Doing aes-128-cbc for 3s on 1024 size blocks: 25058 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 8192 size blocks: 3131 aes-128-cbc's in 2.98s
OpenSSL 1.0.1j 15 Oct 2014
built on: Sun Feb 15 11:34:40 CET 2015
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) blowfish(idx)
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysroot=/dreambox/oe.openpli-4/build/tmp/sysroots/et8000 -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN     -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc       6970.90k     8203.70k     8433.32k     8610.53k     8607.10k
 

[WanWizard]

And now someone on a Solo4k 

 

You're one of the few who has one.

[kalehrl]

root@et6x00:~# openssl speed -evp aes-128-cbc                                  
Doing aes-128-cbc for 3s on 16 size blocks: 759163 aes-128-cbc's in 2.99s      
Doing aes-128-cbc for 3s on 64 size blocks: 225507 aes-128-cbc's in 3.00s      
Doing aes-128-cbc for 3s on 256 size blocks: 58971 aes-128-cbc's in 3.00s      
Doing aes-128-cbc for 3s on 1024 size blocks: 14937 aes-128-cbc's in 3.00s     
Doing aes-128-cbc for 3s on 8192 size blocks: 1875 aes-128-cbc's in 3.00s      
OpenSSL 1.0.1j 15 Oct 2014                                                     
built on: Sun Feb 15 11:34:40 CET 2015                                         
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) bl
wfish(idx)                                                                     
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysro
t=/dreambox/oe.openpli-4/build/tmp/sysroots/et8000 -fPIC -DOPENSSL_PIC -DOPENSS
_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN     -DTERMIO  -Os -
ipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV
DUSE_CRYPTODEV_DIGESTS                                                         
The 'numbers' are in 1000s of bytes per second processed.                      
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  
aes-128-cbc       4062.41k     4810.82k     5032.19k     5098.50k     5120.00k
root@et6x00:~#

[Erik Slagter]

 

And now someone on a Solo4k 

 

You're one of the few who has one.

In a few hours again, if everything went well. I managed to break it...

[dolphs]

nah herewith for you boys and girls I present the et7x00 results ( et7000 ):

root@et7x00:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 1410363 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 64 size blocks: 417444 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 256 size blocks: 109181 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 27656 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 8192 size blocks: 3469 aes-128-cbc's in 3.00s
OpenSSL 1.0.1j 15 Oct 2014
built on: Sun Feb 15 11:34:40 CET 2015
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) blowfish(idx)
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysroot=/dreambox/oe.openpli-4/build/tmp/sysroots/et8000 -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN  -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc       7521.94k     8905.47k     9316.78k     9439.91k     9472.68k

[dolphs]

encore vu-ultimo!!!

root@vuultimo:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 749322 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 64 size blocks: 221309 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 256 size blocks: 58657 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 14841 aes-128-cbc's in 2.99s
Doing aes-128-cbc for 3s on 8192 size blocks: 1862 aes-128-cbc's in 2.99s
OpenSSL 1.0.1j 15 Oct 2014
built on: Sun Feb 15 11:34:40 CET 2015
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) blowfish(idx)
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysroot=/dreambox/oe.openpli-4/build/tmp/sysroots/et8000 -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN     -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc       4023.21k     4752.94k     5005.40k     5082.67k     5101.51k

Edited by dolphs, 1 April 2016 - 15:59.

[athoik]

Here few more.

vusolo4k:

root@vusolo4k:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 11202284 aes-128-cbc's in 2.99s
Doing aes-128-cbc for 3s on 64 size blocks: 3183887 aes-128-cbc's in 2.99s
Doing aes-128-cbc for 3s on 256 size blocks: 842601 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 213774 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 8192 size blocks: 26835 aes-128-cbc's in 3.00s
OpenSSL 1.0.1j 15 Oct 2014
built on: Thu Mar  3 09:34:14 EET 2016
options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) idea(int) blowfish(ptr)
compiler: arm-oe-linux-gnueabi-gcc  -march=armv7-a -mfloat-abi=hard -mfpu=neon --sysroot=/.../build/tmp/sysroots/vusolo4k -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN         -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DGHASH_ASM
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc      59945.33k    68150.09k    71901.95k    72968.19k    73277.44k

osmini:

root@osmini:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 1417513 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 64 size blocks: 418443 aes-128-cbc's in 2.99s
Doing aes-128-cbc for 3s on 256 size blocks: 108409 aes-128-cbc's in 2.98s
Doing aes-128-cbc for 3s on 1024 size blocks: 27648 aes-128-cbc's in 2.97s
Doing aes-128-cbc for 3s on 8192 size blocks: 3449 aes-128-cbc's in 2.97s
OpenSSL 1.0.1j 15 Oct 2014
built on: Thu Nov  5 22:41:34 EET 2015
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) blowfish(idx)
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysroot=/.../build/tmp/sysroots/dm500hd -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN         -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc       7610.81k     8956.64k     9312.99k     9532.51k     9513.20k

xpeedc:

root@xpeedc:~# openssl speed -evp aes-128-cbc
Doing aes-128-cbc for 3s on 16 size blocks: 1354013 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 64 size blocks: 403835 aes-128-cbc's in 2.99s
Doing aes-128-cbc for 3s on 256 size blocks: 105926 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 26818 aes-128-cbc's in 2.99s
Doing aes-128-cbc for 3s on 8192 size blocks: 3358 aes-128-cbc's in 3.00s
OpenSSL 1.0.1j 15 Oct 2014
built on: Wed Feb  3 17:58:23 CET 2016
options:bn(64,32) rc4(idx,int) des(idx,risc2,16,long) aes(partial) idea(int) blowfish(idx)
compiler: mipsel-oe-linux-gcc  -mel -mabi=32 -mhard-float -march=mips32 --sysroot=/.../build/tmp/sysroots/hd1200 -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN     -DTERMIO  -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-128-cbc       7221.40k     8643.96k     9039.02k     9184.49k     9169.58k