Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    XG-7100 AES-NI + IPsec performance

    Official Netgate® Hardware
    1
    1
    781
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • B
      bpalmer last edited by

      I deployed an XG-7100 today and am having quite a bit of trouble exceeding 50Mbps in either direction over IPsec.

      I have 1 VM running pfSense in Azure @ 100Mbps, 1 at home @ 300Mbps, XG-7100 here at office @ 300Mbps.

      While I can saturate 100Mbps both ways on the Azure VM <-IPsec-> Home pfSense

      I cannot get over 50Mbps on Azure VM <-IPsec-> XG-7100.
      I cannot get over 50Mbps on Home <- IPsec -> XG-7100.

      I have confirmed that without IPsec I can hit 100Mbps easily.

      Currently I have the following configuration for all IPsec links:

      P1 and P2
      AES128-GCM 128Bit
      AES-XCBC

      AES-NI enabled in System Settings

      Am I missing something crucial here for trying to get ~100Mbps IPsec?

      1 Reply Last reply Reply Quote 0
      • First post
        Last post

      Products

      • Platform Overview
      • TNSR
      • pfSense Plus
      • Appliances

      Services

      • Training
      • Professional Services

      Support

      • Subscription Plans
      • Contact Support
      • Product Lifecycle
      • Documentation

      News

      • Media Coverage
      • Press
      • Events

      Resources

      • Blog
      • FAQ
      • Find a Partner
      • Resource Library
      • Security Information

      Company

      • About Us
      • Careers
      • Partners
      • Contact Us
      • Legal
      Our Mission

      We provide leading-edge network security at a fair price - regardless of organizational size or network sophistication. We believe that an open-source security model offers disruptive pricing along with the agility required to quickly address emerging threats.

      Subscribe to our Newsletter

      Product information, software announcements, and special offers. See our newsletter archive to sign up for future newsletters and to read past announcements.

      © 2021 Rubicon Communications, LLC | Privacy Policy