On 2/24/2013 11:44 AM, Dave McGuire wrote: On 02/24/2013 08:28 AM, Brian Hechinger wrote: I'll be shipping a Cisco 1841 to Ian who will host it for us in his multi-gig datacenter. :) Sweet! Does that have the balls to do all that encapsulation/decapsulation? It can do 75,000 PPS (without ACLs) but I'm not sure how GRE will impact that. It has a 250Mhz MIPS R5000 CPU. Hmm, not too shabby. Not at all. The 2851 can do 220,000 PPS. But that will be staying at my house. :) How about encryption? (I just got a hardware encryption module for my 7200 =)) 1 Virtual Private Network (VPN) Module :) SWEET! Let's do this. This is at home on the 2851: 2 Virtual Private Network (VPN) Modules :) So what's the plan? Use IPsec in place of GRE if both ends have hardware crypto engines? I've already figured out how I'm going to code that, so we just need to come up with a config set for it. -brian