Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    XG-7100 AES-NI + IPsec performance

    Scheduled Pinned Locked Moved
    Official Netgate® Hardware
    1
    1
    936
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bpalmer
      last edited by

      I deployed an XG-7100 today and am having quite a bit of trouble exceeding 50Mbps in either direction over IPsec.

      I have 1 VM running pfSense in Azure @ 100Mbps, 1 at home @ 300Mbps, XG-7100 here at office @ 300Mbps.

      While I can saturate 100Mbps both ways on the Azure VM <-IPsec-> Home pfSense

      I cannot get over 50Mbps on Azure VM <-IPsec-> XG-7100.
      I cannot get over 50Mbps on Home <- IPsec -> XG-7100.

      I have confirmed that without IPsec I can hit 100Mbps easily.

      Currently I have the following configuration for all IPsec links:

      P1 and P2
      AES128-GCM 128Bit
      AES-XCBC

      AES-NI enabled in System Settings

      Am I missing something crucial here for trying to get ~100Mbps IPsec?

      1 Reply Last reply Reply Quote 0
      • First post
        Last post