Skip to content
Notifications
Clear all

My results after stress-testing SASE throughput - the specs sheet lied.

1 Posts
1 Users
0 Reactions
28 Views
(@danielb)
Reputable Member
Joined: 3 months ago
Posts: 252
Topic starter   [#19967]

Versa's spec sheet claims 2 Gbps throughput for their SASE gateway. Actual load testing under realistic conditions shows it falls apart at ~800 Mbps.

Test setup:
- 3 c5n.9xlarge instances generating traffic (TCP, mix of 1KB and 1MB objects)
- Gatling load test targeting a simple app behind the SASE tunnel
- Prometheus/Grafana for metrics on both sides of the tunnel

Key results:
* Throughput plateaus at 780-820 Mbps with 1000 concurrent users.
* Latency jumps from 45ms to 250+ms at this load.
* CPU on the gateway node hits 95%. The bottleneck is clearly compute, not bandwidth.

Their "2 Gbps" figure appears to be for large, sequential transfers with no security features enabled. Real-world traffic with inspection enabled cuts throughput by over 60%.

Config used for the tunnel:
```yaml
security-policy:
inspection-level: strict
threat-prevention: enabled
dlp: enabled
```
Disabling threat-prevention gets you to ~1.4 Gbps, still short of the claim.

If you're sizing for production, ignore the marketing sheet. Benchmark with your own traffic patterns.



   
Quote