OpenVPN >200Mbps

[synforge]

Hi,

I'm wondering if anyone would be able to give me some idea of what CPU I would require to push between 200-500Mbps of traffic over OpenVPN. I live in the UK and with the recent changes to the law I'm wanting to push the majority of my traffic over a VPN for obvious reasons! I have a 200Mbps down, 12Mbps up connection but this is likely to be upgraded in the near future so I'd like some overhead.

I've looked at some hardware, namely the N3150 in the form of the Gigabyte N3150N-D3V along with a Intel Pro 1000 Quad NIC, however after reading around some people seem to suggest that they're only able to push around 120-150Mbps, after that it seems to be the bottleneck.

So from there I've started looking at something like the Intel i3-6100 but this also seems fairly overkill for what I want. The SG devices don't seem to offer any benchmarks for VPN performance so I'm not sure what I should be looking at there.

Does anyone have any ballpark figures of what's required to push 200-500Mbps of traffic over OpenVPN or any suggestions of hardware that would be capable of doing this?

Thanks.

[Guest]

Does anyone have any ballpark figures of what's required to push 200-500Mbps of traffic over OpenVPN or any suggestions of hardware that would be capable of doing this?

Intel core i3, Intel Core i5 or i7 or Xeon E3 Intel Core Duo @3,0GHz will do that job for you.

[mauroman33]

You could take a look here
https://forum.pfsense.org/index.php?topic=115673.0

Because OpenVPN is not scalable, those scores are single core related. That means you could increase them by using more OpenVPN process, one per CPU core.

In my experience with the N3150 I can say it's easy to overcome 200Mbps if the VPN provider allows two or more concurrent connection (I'm using PIA) by grouping them into a gateway group.

[synforge]

Ah that's great to see some actual real world figures across different hardware.

I also wasn't aware that you could group multiple openvpn tunnels into one group, that's great information thanks. It would be great to see this information graphed somewhere as a guide, especially now with some of the bills being passed in the UK for those that want to push all traffic via a VPN and the high prevalence of OpenVPN providers.

In the end I just bought a cheap second hand Xeon E3-1220 box and I'll be happy to post some metrics about my hardware once I've gotten my hands on it.