Celeron 1GHZ not enough for >8mbps OpenVPN Connections?

willi9999

Hy,
My firewall is a dedicated box (4 lan Ports with 100mbps realtek interfaces) with a "Intel(R) Celeron(R) M processor 1.00GHz". Obviously there is no hardware acceleration for the crypto (I tried the option BSD cryptodev engine, which doesnt change a thing).

I tried a Openvpn Connection to a server on my pc (core-duo) and achieved transfers of 50/10mbits. While using the firewall-box I only achieve 7/6mbits, what is ca the speed I achieve with the firewall to another openvpn server.

Is that normal for that processor or might there be a misconfiguration?
Which Hardware would be good for full speed - I only have like 10 clients on the firewall, which each just sometimes uses the net (home setup).

Thx!

Guest

pfSense Hardware Requirements would explain it at the best.

I tried a Openvpn Connection to a server on my pc (core-duo) and achieved transfers of 50/10mbits.

This is a LAN internal test and would not be matching connections through the Internet via VPN as I see it right.

Is that normal for that processor or might there be a misconfiguration?

We all don´t know your config.

what is ca the speed I achieve with the firewall to another openvpn server.

We can all only guess on this! You might try it up with a friend together.

Which Hardware would be good for full speed - I only have like 10 clients on the firewall, which each just sometimes uses the net (home setup).

Do you own a free miniPCI or PCI slot? Then you can gain the VPN throughput by
using a Soekris vpn14x1 card, for miniPCI and PCI one card is out, this would be
speeding it up a bit I really think. :o

Intel Celeron G3260 @3,1GHz 8)
mini ITX Board with Intel LAN Ports
or Soekirs vpn14x1 VPN card
or a Intel Quad Port NIC
mini ITX case M350
60/80 Watt PSU
4 - 8 GB RAM
mSATA or SSD
~$200 - $300

Jetway NF9HG-2930 Intel Celeron Quad Core Fanless PC w/ 4X Intel LAN, 2GB, M350 ~$299
Jetway Intel N2930 Network PC w/ 5X Intel LAN, 2GB, JBC200F9N-E4IN-B, ADE4INLANG ~$320

Alix Board complete bundle ~$180
Soekris vpn14x1 VPN cards ~$50
4 GB CF Card ~$30

Alix APU 1D4 ~$260 complete bundle
mSATA 60 Gb ~$50

The pfSense Shop hast also some new devices likes the
VK-T40E ~$?
mSATA 60 GB

SG-2220 ~$299
mSATA 60 GB
Netgear GS105Ev2 ~$40

Keljian

You are better off with an i3 (with aes-ni) than a celeron + hifn accelerator card, same sort of price range.

http://us.hardware.info/reviews/4993/26/intel-core-i3-4330–i5-4440-review-affordable-haswells-benchmarks-igpu-truecrypt-71-aes-+-aes-ni

While not OpenVPN or IPSec (which likely would be higher) - 2.1 Gigabytes/s worth of performance vs 250 megabytes/s