Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Slow Performance ipsec

    Scheduled Pinned Locked Moved IPsec
    3 Posts 1 Posters 625 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D
      digitalcomposer
      last edited by digitalcomposer

      Hi guys

      Ipsec Site to Site with same Hardware and same ISP, Site A 1Gbit and Site B 1Gbit.

      My best performance is only using AES in Phase 1 and 2, but steel slow Performance.

      Hardware crypto is activated on both site

      CPU Type Intel(R) Xeon(R) CPU D-1518 @ 2.20GHz
      8 CPUs: 1 package(s) x 4 core(s) x 2 hardware threads
      AES-NI CPU Crypto: Yes (active)
      QAT Crypto: No
      Hardware crypto AES-CBC,AES-CCM,AES-GCM,AES-ICM,AES-XTS.

      [ ID] Interval Transfer Bitrate Retr Cwnd
      [ 5] 0.00-1.04 sec 23.8 MBytes 191 Mbits/sec 0 177 KBytes
      [ 5] 1.04-2.01 sec 23.1 MBytes 200 Mbits/sec 2 176 KBytes
      [ 5] 2.01-3.00 sec 28.0 MBytes 237 Mbits/sec 0 192 KBytes
      [ 5] 3.00-4.01 sec 27.2 MBytes 226 Mbits/sec 2 156 KBytes
      [ 5] 4.01-5.01 sec 29.5 MBytes 247 Mbits/sec 0 208 KBytes
      [ 5] 5.01-6.01 sec 29.3 MBytes 247 Mbits/sec 0 208 KBytes
      [ 5] 6.01-7.00 sec 30.0 MBytes 254 Mbits/sec 0 208 KBytes
      [ 5] 7.00-8.00 sec 30.3 MBytes 254 Mbits/sec 0 208 KBytes
      [ 5] 8.00-9.00 sec 30.3 MBytes 254 Mbits/sec 0 208 KBytes
      [ 5] 9.00-10.02 sec 31.3 MBytes 258 Mbits/sec 0 208 KBytes


      [ ID] Interval Transfer Bitrate Retr
      [ 5] 0.00-10.02 sec 283 MBytes 237 Mbits/sec 4 sender
      [ 5] 0.00-10.02 sec 283 MBytes 237 Mbits/sec receiver

      D 1 Reply Last reply Reply Quote 0
      • D
        digitalcomposer @digitalcomposer
        last edited by

        Nobody ?

        D 1 Reply Last reply Reply Quote 0
        • D
          digitalcomposer @digitalcomposer
          last edited by digitalcomposer

          @digitalcomposer

          So what is the problem with IPSEC and Crypto AES-GCM??

          I try with WireGuard and the SITE TO SITE speed is 800Mbit/s and with IPSEC 23Mbit/s.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.