Where is net.inet.ip.fastforwarding tune-able in pfSense 2.3?

toysareforboys · Apr 28, 2016, 1:20 AM

I'm getting slow OpenVPN performance (3mbps over a 60mbps connection). In the previous versions of pfSense I would set net.inet.ip.fastforwarding=1 and that would usually correct the issue right away but I can't seem to find the option in pfSense 2.3.

Anyone know where the option is or how to tune up my OpenVPN speeds?

-Jamie M.

Nullity · Apr 28, 2016, 1:35 AM

https://blog.pfsense.org/?cat=58

toysareforboys · Apr 28, 2016, 1:41 AM

So assuming that net.inet.ip.fastforwarding is not causing my performance problems, is there a good OpenVPN performance tuning guide you would recommend?

-Jamie M.

Apr 28, 2016, 3:22 AM

I'm getting slow OpenVPN performance (3mbps over a 60mbps connection).

Could it perhaps be that this might be a result of a negotiation issue betwen the LAN ports of the modem
and the pfsense firewall? This would be more coming near to those problems often.

Anyone know where the option is or how to tune up my OpenVPN speeds?

If encryption comes in the game often lower end or very old hardware is not really so nice
to play with it. Would you tell us oerhaps at first something about your hardware setup?
Board, CPU, RAM, 32Bit or 64Bit, etc…...

performance tuning guide you would recommend?

Go with pfSense 2.3 64Bit and A CPU that comes together with AES-NI.
Dual or Quad core CPU at around ~2,0GHz would be nice too and the fastest RAM you would be able to install.

toysareforboys · Apr 28, 2016, 3:30 AM

@BlueKobold:

If encryption comes in the game often lower end or very old hardware is not really so nice
to play with it. Would you tell us oerhaps at first something about your hardware setup?
Board, CPU, RAM, 32Bit or 64Bit, etc…...

Do you know how to disable encryption on OpenVPN? I tried:

auth none
cipher none

But then OpenVPN fails to start with "tls-auth enabled" something or other.

I'm not really sure how many cores pfSense has access to:

-Jamie M.

Nullity · Apr 28, 2016, 4:19 AM

@toysareforboys:

@BlueKobold:

If encryption comes in the game often lower end or very old hardware is not really so nice
to play with it. Would you tell us oerhaps at first something about your hardware setup?
Board, CPU, RAM, 32Bit or 64Bit, etc…...

Do you know how to disable encryption on OpenVPN?

VPN implies encryption. To lessen the load you can choose AES-128 rather than AES-192 or AES-256, but you cannot disable encryption completely.