Speed estimate for openvpn on the SG-3100



  • Hi all, just a quick question hopefully from someone who owns one. On a 120 mbps connection, what kind of openvpn speeds should one expect using the SG-3100?  PIA is the vpn in this case. Thanks


  • Netgate Administrator

    I've seen close to 100Mbps in local testing. It does depend on a large number of variables though.

    Steve



  • @stephenw10:

    I've seen close to 100Mbps in local testing. It does depend on a large number of variables though.

    Steve

    Oh ok. That’s s bit low. Do you know of another solution that is the same price or less?  It should have at least 4 lan ports, wifi and have hardware decryption in order to make it capable of maximum speeds now, and in case I ever get faster internet.

    Thanks


  • Netgate Administrator

    Hard for me recommend anything other than our own hardware.  ;)

    OpenVPN doesn't really exploit the hardware crypto on the SG-3100 very well. IPsec can get >300Mbps. I've never tested it but it looks like PIA supports IPSec:
    https://forum.pfsense.org/index.php?topic=110834.msg617061#msg617061

    Steve



  • @stephenw10:

    Hard for me recommend anything other than our own hardware.  ;)

    OpenVPN doesn't really exploit the hardware crypto on the SG-3100 very well. IPsec can get >300Mbps. I've never tested it but it looks like PIA supports IPSec:
    https://forum.pfsense.org/index.php?topic=110834.msg617061#msg617061

    Steve

    I wish you had some more consumer-friendly stuff compared to that asian minisys/qotom stuff. The SG-3100 is simply a bad deal for most home users. It's not a bad device, but for the price point and reduced reliability requirements (in both device, operation and supply chain) for home users, it doesn't get you a lot of bang for the buck :-( If only you could use one of the ODM/OEM suppliers for non-commercial-grade boxes, you'd get a lot of more sales and I could just point pretty much 100% of questions to the netgate store. Also, general numbers on what to expect (IPSec speeds, OpenVPN speeds, Wan-Lan NAT speeds of IPv4 traffic, maybe a table with some variations in packet size and amounts) would help a lot of newbies.



  • @johnkeates:

    @stephenw10:

    Hard for me recommend anything other than our own hardware.  ;)

    OpenVPN doesn't really exploit the hardware crypto on the SG-3100 very well. IPsec can get >300Mbps. I've never tested it but it looks like PIA supports IPSec:
    https://forum.pfsense.org/index.php?topic=110834.msg617061#msg617061

    Steve

    I wish you had some more consumer-friendly stuff compared to that asian minisys/qotom stuff. The SG-3100 is simply a bad deal for most home users. It's not a bad device, but for the price point and reduced reliability requirements (in both device, operation and supply chain) for home users, it doesn't get you a lot of bang for the buck :-( If only you could use one of the ODM/OEM suppliers for non-commercial-grade boxes, you'd get a lot of more sales and I could just point pretty much 100% of questions to the netgate store. Also, general numbers on what to expect (IPSec speeds, OpenVPN speeds, Wan-Lan NAT speeds of IPv4 traffic, maybe a table with some variations in packet size and amounts) would help a lot of newbies.

    Would you say that the Asian stuff would be the best bet for me then?  Such as this:

    https://m.aliexpress.com/item/32825684280.html?spm=a2g0n.wishlist.0.0.3363b752xUhrNV

    I posted another thread on this forum asking about it and the SG-3100 was recommended. That’s when I posted this thread to ask about the SG-3100.


  • Galactic Empire

    @johnkeates:

    I wish you had some more consumer-friendly stuff compared to that asian minisys/qotom stuff. The SG-3100 is simply a bad deal for most home users. It's not a bad device, but for the price point and reduced reliability requirements (in both device, operation and supply chain) for home users, it doesn't get you a lot of bang for the buck :-( If only you could use one of the ODM/OEM suppliers for non-commercial-grade boxes, you'd get a lot of more sales and I could just point pretty much 100% of questions to the netgate store. Also, general numbers on what to expect (IPSec speeds, OpenVPN speeds, Wan-Lan NAT speeds of IPv4 traffic, maybe a table with some variations in packet size and amounts) would help a lot of newbies.

    Problem is, those ODM/OEM suppliers always sell their devices with pfSense pre-installed, directly hurting the project. DIY will always be cheaper, so I don't get the "bad deal" comment. If one wants a supported and complete solution, built for pfSense then SG-3100 is the way to go. We will have a lot cheaper options early summer.


Log in to reply