IPSEC in GENERIC [was: Re: netmap in GENERIC, by default, on HEAD]

[Olivier Cochard-Labbé]

How to correctly bench IPSec performance ?

For benching forwarding performance I generate minimum-size packet (2000
flows: 100 different source IP * 20 different destination IP) like with
this netmap's pkt-gen example:
pkt-gen -i ix0 -f tx -n 1000000000 -l 60 -d 9.1.1.1:2000-9.1.1.100
-s 8.1.1.1:2000-8.1.1.20

=> This permit me to obtain the maximum PPS forwarded by the server.

But for benching IPSec: Is the PPS with minimum-size packet a useful value ?