New shiny hardware C2758 and poor OpenVPN performance. Don't know what to do.

[iorx]

Hi again!

Got some pictures of the SMB-transfers. It sure looks like the data is traveling, not cached. Or have got this backwards :o too?

Downloading from the server (black)

Uploading to the server (red, the black download still in the graph). Missed to show copy details. But copy speed was about 5-6MByte/s

[johnpoz]

So what was the SMB version used here, was it windows 10 to windows 10? This supports SMB 3.1.1, windows 8 and 2012? With over SMB 3 multichannel was introduced so you can get multiple streams and yes use way more of your pipe over a wan with latency..

[iorx]

Shuut! Missed that info.

For the above tests I used the following.

Client
OS Name:                  Microsoft Windows 7 Ultimate
OS Version:                6.1.7601 Service Pack 1 Build 7601

Server
OS Name:                  Microsoft Windows Server 2008 R2 Standard
OS Version:                6.1.7601 Service Pack 1 Build 7601

That gives SMB 2.1

In previous post the transfers shown was from a Windows 10 and 2012 R2
Cut and paste from previous post.

https://forum.pfsense.org/index.php?topic=100020.msg557355#msg557355
Site-to-site
C2758-to-Xeon E3-1265L(virtual)
AES-128-CBC, Windows Server 2008/2012 and Windows 7/10
130-150Mbit/s down
80-100Mbit/s up

Site-to-Client
C2758-to-i7-2640M
AES-128-CBC, Windows Server 2008/2012 and Windows 7/10, OpenVPN client, the latest export from pfSense.
140-160Mbit/s down
60-80Mbit/s up

Here is a Windows 10 and Windows 2012R2 involved. This should be SMB 3.0.2 then.
(I attached 2 pictures)


[diablo266]

I'm also running 2.2.4 (amd64) on very similar hardware (C2558) and getting very similar results to you before you had any improvement. Unfortunately i've been unable to make any headway with the suggestions in this thread. I have not tried a downgrade yet though. Does anyone know if this has any potential to be fixed in 2.3?

[Derelict]

Try a UDP iperf test across the tunnel increasing -b by about 100M per attempt until you start getting significant drops.

You can also temporarily open a source-limited port on the server side and iperf between the two sites outside the tunnel.

[johnpoz]

So your seeing 10+ MBytes in that transfer… And you have a 100Mbits per sec pipe.. Yeah that is going to be FULL then..

Where is this issue??

[Derelict]

He sez it's gig at each end.

[johnpoz]

Where does "diablo266" say he has 1ge, where does "diablo266" post anything about anything other than a chime in of ME TOO and what you did didn't work for me..

I didn't notice it was a different poster at first - I thought OP was still complaining, but as you see he is happy he got his 100mbps the thought he should be seeing..

[Derelict]

Both ends Internet connections are 1gbit/s and measures >800mbit from various speed-test-sites.

Post 1 - You didn't specify to whom you were speaking.

[johnpoz]

True as I stated I thought it was same poster when first read it.. My bad…