Can SG-1100 handle this S2S VPN?

Cabledude

This is a question about SG-1100 VPN performance, which is a spin-off from a related topic that I did not want to pollute more than I already did.

The SG-1100 is my preferred option at this point as it is small, low cost and probably adequate for my needs. Would just like a confirmation on the VPN performance.

Our usage is for home use, the requirements for each mode are specified below as daytime and nighttime modes:

Day time mode:
From experience I know that the 1100 can easily handle IP TV, FTTH 200/200 and pfBlocker. No doubts here.

Night time mode:
Perform backups over a native pfSense OpenVPN S2S connection.
Site A: source for backup
SG-1100
500 down /40 up cable connection
Backup: Source data

Site B: destination for backup
SG-1100
60 down / 10 up cable connection
Backup: Destination data

Question:
When copying data from Site A (40 Mbps upload) to Site B (60 Mbps download) I am hoping to get 30-40 Mbps transfer speeds from Site A to Site B. Is this realistic? If not, what would be a better estimate?

Thanks!

Cabledude

Just to clarify why my search started in the other topic (which is about the SG-6100 power consumption):

I currently own the SG-1100 (Site A). Odds are that I am now in the process of deploying a new network at our parents home (Site B). This opens up new possibilities such as controlling their network (and security cams) remotely and off site backups.

So my thought is to move the SG-1100 from Site A to Site B, then at Site A install a higher specc'ed Netgate model for future scaleability. Actually I am not at all certain that I will need the 5100/6100 power/performance any time soon.

In the other topic member @keyser suggested the SG-2100 as a low power consuming step up model to the SG-1100.

My thoughts on the SG-2100 are that it may provide a good performance / ecological balance. However here in Europe the price difference is substantial: €188 (1100) and €344 (2100) for still a relatively low specc'ed device.

So hence this topic to get an estimate if the SG-1100 could prove to be adequate.

keyser

@cabledude I Had a SG-1100 before my current 2100, and doing IPSec VPN to that box I could easily get above 100Mbps throughput after I installed the new pfSense+ firmware with the Safexel encryption engine enabled.

So you will have no issues filling whatever you 40 - 60'ish Mbps lines will provide.

Cabledude

@keyser Thanks! This is pure and very helpful information. So I'll probably order a second 1100. Unless you can talk me into a 2100, like you did? Any chance you could tell me what use case you upgraded for and whether or not it met your expectations?
Also: is the power draw really that similar between 1100 and 2100?

NOCling

If you choose the SG-2100, the power consumption is almost the same.
But you have more power.
The SG-2100 has a dedicated WAN port instead of the SG-1100 and can achieve higher performance because 1 NIC can only use 1 CPU core.
And you have 4GB of RAM to do some things with no problem.

keyser

@nocling said in Can SG-1100 handle this S2S VPN?:

If you choose the SG-2100, the power consumption is almost the same.
But you have more power.
The SG-2100 has a dedicated WAN port instead of the SG-1100 and can achieve higher performance because 1 NIC can only use 1 CPU core.
And you have 4GB of RAM to do some things with no problem.

Exactly - and in My case also especially because it has a Dual personallity SFP WAN port which allowed me to terminate My fiber to home directly in My firewall (No ISP box to use power anymore).
I could do that because My ISP runs single strand Ethernet which is easy to get a SFP tranciever for