Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    VPN Bonding

    Scheduled Pinned Locked Moved General pfSense Questions
    10 Posts 5 Posters 2.6k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Mike115
      last edited by

      Will VPN bonding ever be developed? VPNs are usually heavily bottlenecked at 1/10th of WAN speed due to a single socket. VPN bonding over multiple WAN links would allow for greater throughput.

      JKnottJ 1 Reply Last reply Reply Quote 0
      • JKnottJ
        JKnott @Mike115
        last edited by

        @Mike115

        Don't forget, many are also limited by the a asymmetrical bandwidth of many broadband connections. In my case, I get about 95 Mb down and 11 up. This means my VPN can never exceed 11 Mb and is often limited by lower bandwidth where I connect from.

        PfSense running on Qotom mini PC
        i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
        UniFi AC-Lite access point

        I haven't lost my mind. It's around here...somewhere...

        1 Reply Last reply Reply Quote 0
        • stephenw10S
          stephenw10 Netgate Administrator
          last edited by

          Ever? Hard to predict. 😉

          Also depends what you mean by bonding. True layer 2 style requires something over layer 3 I would think. There are a few companies out there claiming to have such things. I've never tried them myself.

          Steve

          JKnottJ 1 Reply Last reply Reply Quote 0
          • JKnottJ
            JKnott @stephenw10
            last edited by

            @stephenw10 said in VPN Bonding:

            Ever? Hard to predict.

            Were you referring to me? Yes, that's the max I'll ever see from my VPN, unless I get better bandwidth from my ISP. If I'm using my VPN to access the Internet via my home fireall, then all traffic will be limited to 11 Mb. Either download from the Internet and sent out the VPN, or from the remote computer and out to the Internet. Either way that 11 Mb limit will be there, no matter what the download bandwidth is. Of course, in this situation, all data will be passing both ways through my Internet connection.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • chpalmerC
              chpalmer
              last edited by

              MLPPP is a type of bonding but over PPP. VPN bonding is quite similar. In order to get your theoretical download you have to have a partner on the other end that has at least your download as their upload. You cannot go this alone.

              Triggering snowflakes one by one..
              Intel(R) Core(TM) i5-4590T CPU @ 2.00GHz on an M400 WG box.

              1 Reply Last reply Reply Quote 0
              • stephenw10S
                stephenw10 Netgate Administrator
                last edited by

                No sorry I meant ever as in "Will VPN bonding ever be developed?"

                In which case it probably will! But, yes, that sort of protocol requires co-operation at both ends.

                Steve

                1 Reply Last reply Reply Quote 0
                • M
                  Marv21
                  last edited by

                  Something like https://www.openmptcprouter.com/ would be nice to have in Pfsense.
                  I would think it is easy to implement, but iam no programmer myself...

                  1 Reply Last reply Reply Quote 0
                  • stephenw10S
                    stephenw10 Netgate Administrator
                    last edited by

                    Ah, well there you go. Perhaps unsurprisingly others have already done this:
                    https://mlvpn.readthedocs.io/en/latest/index.html

                    Steve

                    M 1 Reply Last reply Reply Quote 0
                    • M
                      Marv21 @stephenw10
                      last edited by

                      @stephenw10 said in VPN Bonding:

                      Ah, well there you go. Perhaps unsurprisingly others have already done this:
                      https://mlvpn.readthedocs.io/en/latest/index.html

                      Steve

                      Would be nice to have this in the Pfsense GUI, so its backed up and not overwritten after an big update.
                      New Gateway, apinger integration and so on. Maybe i should start a Bounty for a Package...

                      1 Reply Last reply Reply Quote 0
                      • stephenw10S
                        stephenw10 Netgate Administrator
                        last edited by

                        A manual install to prove it works and does what it says it should, maybe in FreeBSD, would be the first step here.

                        It would certainly be interesting though. ☺

                        Steve

                        1 Reply Last reply Reply Quote 0
                        • First post
                          Last post
                        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.