Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Openvpn extrem slow even without Excryption on 2 1GB/s connections

    OpenVPN
    2
    3
    428
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      gtrdriver last edited by

      Hello

      Here i have 2 Servers within 2 Datacenters  (Storage place) with 1 1GB Connectsions to the net.

      When i do i Iperf (without VPN betwenn this 2 PFsense Devices i get: arround 700-800Mbit/s

      Wen i do same tests with iperf within the openVPN of this 2 Devices i get arround 130-150Mbit/s

      Even when i disable Excryption for testing i dont get much more then 170Mbit/s

      I played arround with some Settings found on the Net

      I played with different MTU Sices Fragmentation, Rx/TX Buffer  but nothing realy speed up the connection.

      I can  understand that i dont get the max rate (700-800Mbits/s) but 150Mbit´s seem to much too low…

      I played with some advanced settings as i wrote for hours but nothing realy speed up VPN dramaticaly - also if i disable Encryption

      I dont undertand this issue ...

      Can anyone help me ?

      Best regards

      CU
      GTR

      1 Reply Last reply Reply Quote 0
      • jimp
        jimp Rebel Alliance Developer Netgate last edited by

        OpenVPN, by its nature, is slow. There is a lot of context switching and using tun the way it does takes it along a very inefficient path compared to IPsec.

        You'll need to be specific about exactly which options you have in use on the VPN on both sides or nobody can offer better suggestions than what you may have already tried.

        One thing you didn't mention, though, assuming it's pfSense (or at least UNIX) on both sites, and using UDP, you should try "fast-io" in the advanced options.

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • G
          gtrdriver last edited by

          Hi

          First of all - Thanks for your Post and your Information.

          I made some more Tests with your Hint "FastIO" and Buffer Settings then i get over 82Mbit on a 100Mbit Connection and over 280Mbit on a 1Gbs Connection - so thats not bad.

          I also figured out that IPSEC is a little Bit Faster (site 2 site with Pfsense - same hardware same Wan same NET) - i did some tests and on the 1GBps WAN Connection i get with ipsec arround 380Mbps.

          But i can live with the Speed of openvpn and it s more easy to configure and forward…

          I have a additional Question:  Can i do "Routing" between different Subnets on different Openvpn Site2Site Connections ?

          So for example:

          Client Network1:  192,168,10,1/24
          Client Network2:  192,168,11,1/24
          Client Network3:  192,168,12,1/24

          All This Networks have its own pfsense and all are connected to a Server Pfsense - Network: 192.168.100.0/24

          All is done with Site2Site so: every Device in every Client Network (1-3) can ping each device on the Server Network
          Also each device on the Server Network can ping each Device on each Client Network

          But i also want that each Device of Client Network1 can reach each device of Client Network3.

          Is there a way to  configure pfsense (ovpnclient and ovpnserver) that the server route the request from Client Network1 to Client Network3 and in the other direction ?

          Or do i have to make a extra VPN Connection betwen this 2 Networks ?

          1 Reply Last reply Reply Quote 0
          • First post
            Last post