PfSense hardware for home router - OpenVPN performance
-
Is that with FastIO enabled and send/rec buffers increased?
Steve
-
@stephenw10 Just FastIO. I have not done any buffer adjustments yet.
-
FastIO made the biggest difference in my testing. Setting the send and receive buffers to 512k did make some improvement. There was little to be gained setting them higher than that. In my test at least. More testing is always good.
Those numbers are pretty good already though.
Steve
-
@stephenw10 said in PfSense hardware for home router - OpenVPN performance:
FastIO made the biggest difference in my testing. Setting the send and receive buffers to 512k did make some improvement. There was little to be gained setting them higher than that. In my test at least. More testing is always good.
Those numbers are pretty good already though.
Steve
I am very impressed with the cpu. Motherboard not so much. Plenty of available PCIe lanes for dual Intel gigabit lan. And a pcie x1 slot instead of x16. The realtek gigabit lan couldn't muster over 600mbs. Gigabyte announced a J5005 board earlier this year, but they never released it.
-
i5-8250u
Tue Jul 17 17:06:17 2018 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
7.68 real 7.67 user 0.00 sys3200 / 7.68 = 416.67 mbit/s (aes-256-cbc)
-
Intel Atom E3950
AES-128-CBC, AES-NI enabled, OpenVPN compression disabled
319 Mbit/s -
Hi,
Here is my new results:
time openvpn --test-crypto --secret /tmp/secret --verb 0 --tun-mtu 20000 --cipher aes-256-gcmIntel i5-7400 4 x 3.0GHz - TDP 65W -CPU Mark 7382 - Single Thread 1957
3200/8,05 = 397 Mbps OpenVPN performance (estimate) -
AMD Ryzen 5 2600X (6 x 3.6GHz/4.2GHz)
3200/2.7=1185 -
3200/2.7=1185
Nice. Are you able to test a reality figure on there at all?
-
@stephenw10 said in PfSense hardware for home router - OpenVPN performance:
3200/2.7=1185
Nice. Are you able to test a reality figure on there at all?
In linux with a client running on the same machine in kvm, it hit 1100Mbps. (So, zero latency internal network, but with the load of being both client and server.) I'd not expect to see that on a real link, as I don't think OpenVPN will keep enough packets in flight to fill the pipe, but the hardware can do it. That said, I'd pick a newer i3 if I just wanted a firewall with openvpn; the ryzen is overkill for that, and an i3 should hit the same numbers for less money.
