Speed estimate for openvpn on the SG-3100
-
Hi all, just a quick question hopefully from someone who owns one. On a 120 mbps connection, what kind of openvpn speeds should one expect using the SG-3100? PIA is the vpn in this case. Thanks
-
I've seen close to 100Mbps in local testing. It does depend on a large number of variables though.
Steve
-
I've seen close to 100Mbps in local testing. It does depend on a large number of variables though.
Steve
Oh ok. That’s s bit low. Do you know of another solution that is the same price or less? It should have at least 4 lan ports, wifi and have hardware decryption in order to make it capable of maximum speeds now, and in case I ever get faster internet.
Thanks
-
Hard for me recommend anything other than our own hardware. ;)
OpenVPN doesn't really exploit the hardware crypto on the SG-3100 very well. IPsec can get >300Mbps. I've never tested it but it looks like PIA supports IPSec:
https://forum.pfsense.org/index.php?topic=110834.msg617061#msg617061Steve
-
Hard for me recommend anything other than our own hardware. ;)
OpenVPN doesn't really exploit the hardware crypto on the SG-3100 very well. IPsec can get >300Mbps. I've never tested it but it looks like PIA supports IPSec:
https://forum.pfsense.org/index.php?topic=110834.msg617061#msg617061Steve
I wish you had some more consumer-friendly stuff compared to that asian minisys/qotom stuff. The SG-3100 is simply a bad deal for most home users. It's not a bad device, but for the price point and reduced reliability requirements (in both device, operation and supply chain) for home users, it doesn't get you a lot of bang for the buck :-( If only you could use one of the ODM/OEM suppliers for non-commercial-grade boxes, you'd get a lot of more sales and I could just point pretty much 100% of questions to the netgate store. Also, general numbers on what to expect (IPSec speeds, OpenVPN speeds, Wan-Lan NAT speeds of IPv4 traffic, maybe a table with some variations in packet size and amounts) would help a lot of newbies.
-
@johnkeates:
Hard for me recommend anything other than our own hardware. ;)
OpenVPN doesn't really exploit the hardware crypto on the SG-3100 very well. IPsec can get >300Mbps. I've never tested it but it looks like PIA supports IPSec:
https://forum.pfsense.org/index.php?topic=110834.msg617061#msg617061Steve
I wish you had some more consumer-friendly stuff compared to that asian minisys/qotom stuff. The SG-3100 is simply a bad deal for most home users. It's not a bad device, but for the price point and reduced reliability requirements (in both device, operation and supply chain) for home users, it doesn't get you a lot of bang for the buck :-( If only you could use one of the ODM/OEM suppliers for non-commercial-grade boxes, you'd get a lot of more sales and I could just point pretty much 100% of questions to the netgate store. Also, general numbers on what to expect (IPSec speeds, OpenVPN speeds, Wan-Lan NAT speeds of IPv4 traffic, maybe a table with some variations in packet size and amounts) would help a lot of newbies.
Would you say that the Asian stuff would be the best bet for me then? Such as this:
https://m.aliexpress.com/item/32825684280.html?spm=a2g0n.wishlist.0.0.3363b752xUhrNV
I posted another thread on this forum asking about it and the SG-3100 was recommended. That’s when I posted this thread to ask about the SG-3100.
-
@johnkeates:
I wish you had some more consumer-friendly stuff compared to that asian minisys/qotom stuff. The SG-3100 is simply a bad deal for most home users. It's not a bad device, but for the price point and reduced reliability requirements (in both device, operation and supply chain) for home users, it doesn't get you a lot of bang for the buck :-( If only you could use one of the ODM/OEM suppliers for non-commercial-grade boxes, you'd get a lot of more sales and I could just point pretty much 100% of questions to the netgate store. Also, general numbers on what to expect (IPSec speeds, OpenVPN speeds, Wan-Lan NAT speeds of IPv4 traffic, maybe a table with some variations in packet size and amounts) would help a lot of newbies.
Problem is, those ODM/OEM suppliers always sell their devices with pfSense pre-installed, directly hurting the project. DIY will always be cheaper, so I don't get the "bad deal" comment. If one wants a supported and complete solution, built for pfSense then SG-3100 is the way to go. We will have a lot cheaper options early summer.
