NSX Advanced Load Balancer Performance Datasheet
Overview
The purpose of this guide is to provide general information about the data path performance of NSX Advanced Load Balancer (Avi Networks) based on configuration examples and different measured metrics from lab tests.
This guide does not include a formal performance study and the outcome can vary if different configurations are used, but the information is valuable for anyone to understand Avi’s performance.
The tests were performed with NSX Advanced Load Balancer version 20.1.6 with full access vCenter cloud. The information found within this document remains valid through the current versions and for current operating versions.
Avi Performance on vCenter Cloud
vCenter Cloud | 1 Core/ 2 GB RAM | 2 Core/ 2 GB RAM | 4 Core/ 4 GB RAM | 6 Core/ 6 GB |
---|---|---|---|---|
SSL Transactions per sec (ECC) | 2900 | 5800 | 8700 | 12000 |
SSL Transactions per sec (RSA) | 950 | 1800 | 2600 | 4000 |
L7 Requests per sec | 58000 | 80000 | 150000 | 185000 |
L4 Connections per sec (TCP) | 42000 | 54000 | 100000 | 132000 |
L4 Open Connections* | 40000 | 80000 | 160000 | 320000 |
L4 Throughput** | 6 Gbps | 6 Gbps | 9.5 Gbps | 13 Gbps |
L7 Throughput | 5 Gbps | 5.6 Gbps | 11 Gbps | 12 Gbps |
L7 SSL Throughput | 2.6 Gbps | 3.8 Gbps | 7.2 Gbps | 10 Gbps |
SE CPU Cores | 1 | 2 | 4 | 6 |
SE Memory | 2 GB | 2 GB | 4 GB | 6 GB |
SE Disk | 15 GB | 20 GB | 30 GB | 40 GB |
Notes:
-
Tested on Intel(R) Xeon(R) Gold 6148 CPU @ 2.40GHz, supermicro, 32 CPUs x 2.4 GHz, 256 GB memory with NSX Advanced Load Balancer 20.1.6.
-
The Service Engines were deployed on VMware vCenter, using Avi’s VMware Cloud Connector and Write Access automation.
-
Core = Service Engine VM Core (Service Cores)
-
Throughput measurements are virtual service throughput, calculated by aggregating the client-facing traffic only. Total throughput on the Service Engine is approximately double.
-
SSL Tests were performed with:
-
EC (SECP2 56R1) and RSA (2048 Bits)
-
Cipher used:
-
EC —
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
-
RSA —
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
-
-
PFS enabled, TLS version 1.2
-
-
The above data is per Service Engine VM. Avi’s L3-based Active-Active scaling capability allows customers to scale out based on application requirements on-demand.
-
The performed tests are done with CPU limit set to ‘unlimited’ for Service Engine VM. This is the default setting for bringing up the Service Engine VM.
-
*Open Connections capacity (also known as Concurrent Connections) can be increased by adding more memory to the Service Engine.
-
**L4 Throughput on SEs with 4 core or more tested with 2 dispatcher cores.
-
SE dispatcher/ proxy cores configuration:
- 1 Core and 2 Core SE — Dedicated dispatcher set to False
- 4 Core and 6 Core SE — Dedicated dispatcher set to True
- 4 Core SE — 1 dispatcher core, 3 proxy cores
- 2 Dispatcher and 2 proxy cores for L4-throughput tests
- 6 Core SE— 2 Dispatcher cores, 4 proxy cores
Document Revision History
Date | Change Summary |
---|---|
September 23, 2021 | New guide |