Skip to main content
Aviatrix High Performance Encryption is available on AWS, Azure, GCP, and OCI.

AWS Performance Test Results

Aviatrix ActiveMesh HPE achieves line rate performance with encryption in AWS when Jumbo Frames are deployed (the default setting for AWS instances). The test benchmark baseline is the native AWS peering where no Aviatrix Gateways are deployed in the VPCs. Adding 500 stateful firewall rules have little impact to the performance. The test topologies are shown below. test_topologies The test is conducted by using iperf3 tool with TCP 128 streams. The two VPCs are in the same region.

MTU = 9000 Bytes (AWS default setting)

jumbo

MTU = 1500 Bytes

1500

Single Gateway in AWS Performance Test Results

This test is done without HA enabled in either Spoke or Transit Gateways. The traffic is end-to-end from user instance > Spoke Gateway > Multi-Cloud Transit Gateway > Spoke Gateway> Instance. For MTU = 9000 Bytes, the result is shown in the diagram below. single_gateway_jumbo For MTU = 350 Bytes, the result is shown in the diagram below. single_gateway_350B

T3 Instance Series Performance

Spoke GatewayThroughput Gbps (MTU 1500B)Throughput Gbps (MTU 9600B)
t3a.xlarge6.129.82
t3a.medium2.338.85
t3a.small2.78.52
t3.large3.349.5
t3.medium3.039.6
t3.small3.359.96

Azure Performance Test Results

The performance results below are from tests conducted with the topology of Test VMs > Spoke > Transit > Spoke > Test VMs in the same region with active-mesh deployment. Test VMs’ route tables are load balanced to point to either primary Spoke Gateways or HA Spoke Gateways to take advantage of the active-mesh deployment. The test topology is shown below. azure_test_topology
Transit GatewayThroughput with MTU 1500B
Standard_F48s_v224.52Gbps
Standard_F32s_v221.56Gbps
Standard_D32_v320.47Gbps
Standard_D5_v220.56Gbps

GCP Performance Test Results

The test topology is shown below with the following conditions:
  • VM - Spoke - Transit - Spoke - VM
  • HA enabled
  • HPE mode enabled
gcp_test_topology

N1 Series Performance

Transit GatewayThroughput Gbps (MTU 1500B)
n1-highcpu-43.12
n1-highcpu-86.54
n1-highcpu-1611.58
n1-highcpu-3219.97

N2 Series Performance

Transit GatewayThroughput Gbps (MTU 1500B)
n2-highcpu-45.063
n2-highcpu-810.2
n2-highcpu-1614.98
n2-highcpu-3225.549

C2 Series Performance

Transit GatewayThroughput Gbps (MTU 1500B)
c2-standard-45.792
c2-standard-89.44
c2-standard-1618.48
c2-standard-3025.52
c2-standard-6032
To deploy Aviatrix Gateways with N2 or C2 series successfully, you need to apply CPU Quota Increase request to GCP support first.

OCI Performance Test Results

The performance results below are from tests conducted with the topology of Test VMs > Spoke > Transit > Spoke > Test VMs in the same region with active-mesh deployment. Test VMs’ route tables are load balanced to point to either primary Spoke Gateways or HA Spoke Gateways to take advantage of the active-mesh deployment.
Transit GatewayThroughput with MTU 1500B
VM.Standard2.20.5092Gbps
VM.Standard2.41.057Gbps
VM.Standard2.82.471Gbps
VM.Standard2.164.99Gbps
VM.Standard2.246.039Gbps
Transit GatewayThroughput with MTU 9000
VM.Standard2.22.584Gbps
VM.Standard2.44.878Gbps
VM.Standard2.810.75Gbps
VM.Standard2.1620.1199bps
VM.Standard2.2424.65Gbps

How to Tune Performance

Check MTU size

To check MTU size, use Trace Path.
  1. In Aviatrix Controller, go to Troubleshoot > Diagnostics > Network.
  2. In Gateway Utility, select a gateway and specify a destination host name or IP address.
  3. Click Trace Path. The MTU of the devices along the path is shown.

Tune TCP window size

For Linux machine, follow the instructions here to tune TCP window size.