Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    VPN IpSec bandwith limited

    IPsec
    1
    2
    46
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • T
      tof last edited by

      Hello,
      I use Pfense, and one of the use is a VPN IPsec.

      A week a go I had a Pfsense with 300Mb/s of bandwidth and another with 50Mb/s (Personal Dsl box).
      In the Vpn I was able to use 50mb/s, so no problem.

      The personal link was upgraded to fiber with 400mb/s.
      And I'm still at 50mb/s.

      this is my architecture :
      home : internet <---> Internet box (DMZ nat to pfense) <---> Fw pfense with vpn ipsec <---> lan
      Server in DC : internet <---> Fw pfense with vpn ipsec.

      I tested with iperf :
      from home to Dc using the VPN :
      [ 3] 5.0- 6.0 sec 6.22 MBytes 52.2 Mbits/sec 0.334 ms 15/ 4452 (0.34%)
      But not more

      I tested from home to DC by public (with nat) :
      [ 3] 4.0- 5.0 sec 48.5 MBytes 407 Mbits/sec 0.030 ms 1033/35616 (2.9%)

      And cpu and am are quiet.

      For information pfsense on both are installed on vmware.
      pfsense version : 2.4.4-RELEASE-p3(amd64), the latest.
      All are working well but the bandwith in Vpn.

      Do someone had already see it, solved it ?

      Thanks.
      Christophe.

      1 Reply Last reply Reply Quote 0
      • T
        tof last edited by

        The tests I made was using UDP.

        I did the same with TCP ans it seems there is a mimitation at 25mb/s

        udp test with public :

        root@client ~ # iperf -c public_ip -b 400M -u
        ------------------------------------------------------------
        Client connecting to public_ip, UDP port 5001
        Sending 1470 byte datagrams, IPG target: 28.04 us (kalman adjust)
        UDP buffer size: 8.00 MByte (default)
        ------------------------------------------------------------
        [  3] local private_ip port 10012 connected with public_ip port 5001
        [ ID] Interval       Transfer     Bandwidth
        [  3]  0.0-10.0 sec   500 MBytes   419 Mbits/sec
        [  3] Sent 356661 datagrams
        [  3] Server Report:
        [  3]  0.0-10.0 sec   485 MBytes   406 Mbits/sec   0.064 ms 10375/356661 (2.9%)
        [  3] 0.00-10.02 sec  18 datagrams received out-of-order
        root@client ~ #
        

        udp test with private ip :

        root@client ~ # iperf -c private_ip -b 400M -u
        ------------------------------------------------------------
        Client connecting to private_ip, UDP port 5001
        Sending 1470 byte datagrams, IPG target: 28.04 us (kalman adjust)
        UDP buffer size: 8.00 MByte (default)
        ------------------------------------------------------------
        [  3] local private_ip port 33804 connected with 192.168.1.3 port 5001
        [ ID] Interval       Transfer     Bandwidth
        [  3]  0.0-10.0 sec   500 MBytes   419 Mbits/sec
        [  3] Sent 356660 datagrams
        [  3] Server Report:
        [  3]  0.0-10.3 sec   283 KBytes   226 Kbits/sec  611.953 ms 356462/356659 (1e+02%)
        root@client ~ #
        

        tcp test with public ip :

        root@client ~ # iperf -c public_ip -b 400M
        ------------------------------------------------------------
        Client connecting to public_ip, TCP port 5001
        TCP window size: 85.0 KByte (default)
        ------------------------------------------------------------
        [  3] local private_ip port 52622 connected with public_ip port 5001
        [ ID] Interval       Transfer     Bandwidth
        [  3]  0.0-10.0 sec  30.4 MBytes  25.4 Mbits/sec
        root@client ~ #
        

        tcp test with private ip :

        root@client ~ # iperf -c private_ip -b 400M
        ------------------------------------------------------------
        Client connecting to private_ip, TCP port 5001
        TCP window size: 64.0 KByte (default)
        ------------------------------------------------------------
        [  3] local private_ip port 12658 connected with private_ip port 5001
        [ ID] Interval       Transfer     Bandwidth
        [  3]  0.0-10.0 sec  29.5 MBytes  24.7 Mbits/sec
        root@client ~ #
        

        Very strange.
        Any idea ?

        1 Reply Last reply Reply Quote 0
        • First post
          Last post