IPSec performances

[PPCM]

Hello there,

I mount 2 pfSense through a 100Mb link with 2 differents Netgate

File transfer between the 2 sites is about 350kb/s
I found this file as performance refence with traffic indications and used encryption:
https://info.netgate.com/hubfs/website-assets/netgate-hardware-comparison-doc.pdf

The config is like that:

• Site A
  ** Netgate 7100
  ** Cryptographic Hardware : QAT
  ** Asynchronous Cryptography : yes
• Site B
  ** Netgate 2100
  ** Cryptographic Hardware : safexcel, cryptodev
  ** Asynchronous Cryptography : yes
• Phase 1
  ** IKEv2
  ** Algorithm : AES128-GCM
  ** Key length : 128 bits
  ** Hash : SHA256
  ** DH Group : 14
• Phase 2
  ** Protocol : ESP
  ** Algorithm : AES128-GCM / 128 bits
  ** PFS Key group : 14

The quality of the internet link was tested and it seems good

A test was made with OpenVPN for only one user and the same file transfer runs with a speed of 2,5Mb/s

Do you have an idea how to have better performances between the 2 sites?
Thanks a lot

[michmoor]

@ppcm are we testing with SMB? What’s the latency for each site?