New shiny hardware C2758 and poor OpenVPN performance. Don't know what to do.

johnpoz

If your iperf test is inside your tunnel sure looks like your doing 101Mbps

[SUM] 0.0-10.1 sec 122 MBytes 101 Mbits/sec

If find it unlikely that you were doing SMB file copy over 17ms latency at 100mbps, with default 64k window size.. Did you change the window size? Something was chached your using smb 3.1.1 with multiple streams?

maximum throughput with a TCP window of 64 KByte and RTT of 17.0 ms <= 30.84 Mbit/sec.

iorx

Hi again!

Got some pictures of the SMB-transfers. It sure looks like the data is traveling, not cached. Or have got this backwards :o too?

Downloading from the server (black)

Uploading to the server (red, the black download still in the graph). Missed to show copy details. But copy speed was about 5-6MByte/s

johnpoz

So what was the SMB version used here, was it windows 10 to windows 10? This supports SMB 3.1.1, windows 8 and 2012? With over SMB 3 multichannel was introduced so you can get multiple streams and yes use way more of your pipe over a wan with latency..

smbver.png_thumb

iorx

Shuut! Missed that info.

For the above tests I used the following.

Client
OS Name: Microsoft Windows 7 Ultimate
OS Version: 6.1.7601 Service Pack 1 Build 7601

Server
OS Name: Microsoft Windows Server 2008 R2 Standard
OS Version: 6.1.7601 Service Pack 1 Build 7601

That gives SMB 2.1

In previous post the transfers shown was from a Windows 10 and 2012 R2
Cut and paste from previous post.

https://forum.pfsense.org/index.php?topic=100020.msg557355#msg557355
Site-to-site
C2758-to-Xeon E3-1265L(virtual)
AES-128-CBC, Windows Server 2008/2012 and Windows 7/10
130-150Mbit/s down
80-100Mbit/s up

Site-to-Client
C2758-to-i7-2640M
AES-128-CBC, Windows Server 2008/2012 and Windows 7/10, OpenVPN client, the latest export from pfSense.
140-160Mbit/s down
60-80Mbit/s up

Here is a Windows 10 and Windows 2012R2 involved. This should be SMB 3.0.2 then.
(I attached 2 pictures)

![windows 10 2012r2 up down.jpg](/public/imported_attachments/1/windows 10 2012r2 up down.jpg)
![windows 10 2012r2 up down.jpg_thumb](/public/imported_attachments/1/windows 10 2012r2 up down.jpg_thumb)
Namnlös10-2012r2.png
Namnlös10-2012r2.png_thumb

diablo266

I'm also running 2.2.4 (amd64) on very similar hardware (C2558) and getting very similar results to you before you had any improvement. Unfortunately i've been unable to make any headway with the suggestions in this thread. I have not tried a downgrade yet though. Does anyone know if this has any potential to be fixed in 2.3?

Derelict

Try a UDP iperf test across the tunnel increasing -b by about 100M per attempt until you start getting significant drops.

You can also temporarily open a source-limited port on the server side and iperf between the two sites outside the tunnel.

johnpoz

So your seeing 10+ MBytes in that transfer… And you have a 100Mbits per sec pipe.. Yeah that is going to be FULL then..

Where is this issue??

Derelict

He sez it's gig at each end.

johnpoz

Where does "diablo266" say he has 1ge, where does "diablo266" post anything about anything other than a chime in of ME TOO and what you did didn't work for me..

I didn't notice it was a different poster at first - I thought OP was still complaining, but as you see he is happy he got his 100mbps the thought he should be seeing..

Derelict

Both ends Internet connections are 1gbit/s and measures >800mbit from various speed-test-sites.

Post 1 - You didn't specify to whom you were speaking.

johnpoz

True as I stated I thought it was same poster when first read it.. My bad…