Networking Forums

Networking Forums > Computer Networking > Windows Networking > IP-sec consuming way too much CPU (Gameserver hosting)

Reply
Thread Tools Display Modes

IP-sec consuming way too much CPU (Gameserver hosting)

 
 
=?Utf-8?B?TmVlZEhlbHA=?=
Guest
Posts: n/a

 
      08-25-2004, 10:27 PM
To secure our gameservers I have previously been using plain TCP/IP
filtering. Recently, I did however setup IPsec policies instead. My problem
is that they consume way to much cpu. According to Microsoft "The
implementation of IPSec policies should not have a noticeable impact on the
performance of the server".
I have basicly set only to allow all the UDP ports for the gameservers, as
well as ftp and remote desktop/vnc. But when i enable teh policy, i can
almost see a double cpu usage then before.

Should I expect this, or have I done something wrong?
 
Reply With Quote
 
 
 
 
Mark Swift [MSFT]
Guest
Posts: n/a

 
      09-07-2004, 09:57 PM
You may or may not expect that depending on some scenario specifics. It
sounds like you are using only Block/Permit filters, so no
encryption/authentication of traffic is being used, correct? Can you also
reply with your filters (IP sanitized if you wish)? I assume that you are
doing an "Any to Me: Block" filter and then a few "Any to Me, UDP Dest Port
X: Permit" filters, correct? In this case, the statement below is correct
and you shouldn't see a noticeable impact on performance.

If you reply, can you also share your unique IP's per minute and bandwidth
usage numbers?

--

Mark Swift
Software Test Engineer
IP Security
Windows Networking
Microsoft

This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

--

"NeedHelp" <(E-Mail Removed)> wrote in message
news:CA7E388B-C57F-4BD8-9724-(E-Mail Removed)...
> To secure our gameservers I have previously been using plain TCP/IP
> filtering. Recently, I did however setup IPsec policies instead. My
> problem
> is that they consume way to much cpu. According to Microsoft "The
> implementation of IPSec policies should not have a noticeable impact on
> the
> performance of the server".
> I have basicly set only to allow all the UDP ports for the gameservers, as
> well as ftp and remote desktop/vnc. But when i enable teh policy, i can
> almost see a double cpu usage then before.
>
> Should I expect this, or have I done something wrong?



 
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Vista machine consuming most of internet connectivity Galen Wireless Networks 3 10-23-2008 12:44 AM
sshd consuming 100% of cpu Unruh Linux Networking 2 06-12-2008 01:55 PM
AT&T Announces Hosting Agreement with SAP America; Named a PreferredSAP Hosting Provider kavitha.krishna.22@gmail.com Broadband 0 02-19-2008 09:31 AM
Re: hosting environment vs. shared hosting environments?? Matthew Louden Windows Networking 0 11-17-2003 06:35 PM
Webhosting options/broadband for hosting a website/hosting fro servlets and sql server Simon Harvey Broadband 2 07-12-2003 03:21 PM



1 2 3 4 5 6 7 8 9 10 11