ExpressVPN speeds to expect on a SG-3100?

summerhilltech

Hi all. I'm planning to put a pfsense device behind my UniFi gateway in order to blanket my network with my VPN. I'm looking at the SG-3100 due to the reasonable price and not having to mess around with installing the os, etc. If I were to do that - what kind for percentage drop should I expect as far as bandwidth on my network goes? Thanks!

DaddyGo

@summerhilltech

Hi,

ExpVPN works with OpenVPN basis with AES-256-CBC.
(in the EU, but I think elsewhere)

OpenVPN handles one thread at once therefore, the CPU clock is a very important factor, to achieve high speed.

I can give examples of different hardware and their speeds (ExpVPN - pfSense config)
(All examples are true for 1000/500 ISPs)

APU4d4 - only OpenVPN (EXpVPN client) runs on it - the best maximum 68 / 57
(https://www.pcengines.ch/apu4d4.htm)
Supermicro Epyc3151 pfBlocker-devel - OpenVPN (ExpVPN) 320 / 210
Dell R210II (Xeon E3-1240 V2) pfBlocker-devel + Squid + OpenVPN (ExpVPN) 300 / 180 - 190

compare which one most closely resembles the SG-3100
are you going to use dual -NAT because you’re sure to lose speed even there?
why don't you put pfSense first?

++++edit:
we use these ExpVPN subscriptions in the following countries (no significant difference):
ES, PT, HU, UK, SI, NL

summerhilltech

@DaddyGo said in ExpressVPN speeds to expect on a SG-3100?:

@summerhilltech

Hi,

ExpVPN works with OpenVPN basis with AES-256-CBC.
(in the EU, but I think elsewhere)

OpenVPN handles one thread at once therefore, the CPU clock is a very important factor, to achieve high speed.

I can give examples of different hardware and their speeds (ExpVPN - pfSense config)
(All examples are true for 1000/500 ISPs)

APU4d4 - only OpenVPN (EXpVPN client) runs on it - the best maximum 68 / 57
(https://www.pcengines.ch/apu4d4.htm)

Supermicro Epyc3151 pfBlocker-devel - OpenVPN (ExpVPN) 320 / 210

Dell R210II (Xeon E3-1240 V2) pfBlocker-devel + Squid + OpenVPN (ExpVPN) 300 / 180 - 190

compare which one most closely resembles the SG-3100
are you going to use dual -NAT because you’re sure to lose speed even there?
why don't you put pfSense first?

++++edit:
we use these ExpVPN subscriptions in the following countries (no significant difference):
ES, PT, HU, UK, SI, NL

Thanks @DaddyGo !

stephenw10

I would expect to see ~100Mbps OpenVPN throughput from the SG-3100. About 3x that for IPSec using one of it's hardware accelerated ciphers.
That is very depended on latency, packet size etc.

Steve