IPSEC is insanely slow, Less that 1/10th speed
-
I have 2 offices with an IPSEC VPN tunnel between the 2 PFsense boxes using the latest version at both ends. Both Running 2.6.0
Office A has 5Gb/5Gb fiber
CPU Type Intel(R) Core(TM) i5 CPU 650 @ 3.20GHz
4 CPUs: 1 package(s) x 2 core(s) x 2 hardware threads
AES-NI CPU Crypto: Yes (active)
QAT Crypto: NoOffice B has 1Gb/35Mb Cable
CPU Type Intel(R) Core(TM) i5-9400 CPU @ 2.90GHz
6 CPUs: 1 package(s) x 6 core(s)
AES-NI CPU Crypto: Yes (active)
QAT Crypto: NoSends 1GB of data from Office A to Office B sends at about 8MB/sec, which is about 64Mb/sec and far from the 1000Mb/sec that should be the theoretical limit.
Sending 1GB of data from Office B to Office A sends at about 3MB/sec, and while less than the advertised speed it isn't totally out of line and is within about 15% or so of what I would expect max capability to be.
AES-NI "is" enabled on both machines.
CPU usage never goes above 4-5%Where can I start to find out why it is so slow when going over the tunnel?
-
@calmasacow said in IPSEC is insanely slow, Less that 1/10th speed:
Office B has 1Gb/35Mb Cable
This should be the bottleneck as I see it right.
What data you are using? Small files, one big file,..
What is the MTU on all devices including the PC?
You are using PPPoE? So all went over one WAN and not over multiple onesqueue! -
@Dobby_ said in IPSEC is insanely slow, Less that 1/10th speed:
This should be the bottleneck
At least, from B to A. 35 Mbps is about 4 MBps max, but OP says that's 3 so OK.
@calmasacow How is this test transfer happening? SMB is slow over VPNs unless it's using SMB 3, as I recall. Try FTP or another method if possible. (also Windows 11 has a bug in the May update causing very slow VPN performance but I'm pretty sure that's with Windows 11 itself as the VPN client)
