MASQUE vs IPsec

Both tunnels are tested in one session: forwarding rules in the Prisma Access agent send each test target through its own tunnel. "Test both tunnels" runs the UDP test and the file transfer for MASQUE, then for IPsec, and saves one run per tunnel.

MASQUE: masque-test.demo-lab.at · UDP 3478
IPsec: ipsec-test.demo-lab.at · UDP 3479

New test run

Run label

Duration

UDP profiles

Voice (50 pps × 172 B, ~70 kbit/s) Video (250 pps × 1200 B, ~2.4 Mbit/s)

Keep this tab in the foreground while the test runs; browsers throttle background tabs.

Current path

Egress IP: …
Location: …
Network: …
Seen by server: …

Live results

Profile	Sent	Received	RTT median	RTT p95	Jitter	Loss up	Loss down	MOS
No test running.

File transfer

Downloads and uploads random (incompressible) files over HTTPS to this server and measures throughput. "Test both tunnels" includes the selected sizes; "Start file test" runs only the file transfer for the current label and adds it to that run.

10 MB 100 MB 1000 MB

Tunnel	File	Direction	Throughput	Time	TTFB
No file test yet.

SaaS file transfer Checking extension…

Service

Test file

Download the test file (same size for every run).
Click "Start recording", then "Open service" and sign in as usual.
Upload the test file, wait until it finishes, then download it again.
Come back to this tab and click "Stop", then save the result to the run.

Command-line test (iperf3)

Real TCP throughput (4 parallel streams, both directions) and UDP jitter/loss against the iperf3 server next to this toolbox (port 5201). The result is attached to the newest run with the same label.

Install iperf3: brew install iperf3 (macOS), apt install iperf3 (Linux) or an iperf3 Windows build. Python 3.8+ is required.
Download pat-perf.py (server and toolbox address are preset).
Run it once per tunnel type:

python3 pat-perf.py --label MASQUE

Runs

	Label	Date	Egress IP	Location	Voice MOS	Voice RTT	Video loss	TCP ↓ / ↑	SaaS