Navigation

    Netgate Discussion Forum
    • Register
    • Login
    • Search
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search

    Nanobsd version for vpn

    Hardware
    5
    9
    1811
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • N
      newbieuser1234 last edited by

      I don't know much about hardware acceleration, but I was reading the pfsense website of an alix board that had an immense boost from a vpn1411.  If I just need openvpn & pfblocker, is a 500 mhz alix board better than a quad core full install system.  I have a dual core, 4gb system with no accelerator and i only get 23k with aes-128.  The pfsense post showed 22M with aes-128 on an old alix board.  Or would I get similar performance by just installing the vpn1411 in my quad core 8gb system with a PCI / Mini PCI adapter?  Thanks for the input.  I know jimp knows a lot about this topic.

      http://doc.pfsense.org/index.php/Are_cryptographic_accelerators_supported

      1 Reply Last reply Reply Quote 0
      • D
        Dr_Drache last edited by

        Acually, I'd like to know how these work as well, might want to try to retrofit one in my firebox.
        (or are there PCI-e ones that work?)

        1 Reply Last reply Reply Quote 0
        • R
          robi last edited by

          @newbieuser1234:

          I have a dual core, 4gb system with no accelerator and i only get 23k with aes-128.

          There must be something wrong with that setup.

          I used to have a VIA C7 cpu-based box (search this forum for Igel 4210 LX Winestra), which also has accelerator built-in, that one with olny 15-20% CPU usage was able to max out my 30Mbit WAN by transferring big files from Samba shares though OpenVPN.

          Now I use an Atom D525 CPU with no acceleration at all. I've never seen anything above 60% CPU usage either OpenVPN-ing fully at 30Mbit/sec…

          1 Reply Last reply Reply Quote 0
          • stephenw10
            stephenw10 Netgate Administrator last edited by

            What dual core CPU is that? You should be getting much better than 23kbps.
            I forget the exact numbers but the Alix, with the accelerator, will give you 30Mbps. An Atom will give around 50Mbps.

            Steve

            1 Reply Last reply Reply Quote 0
            • N
              newbieuser1234 last edited by

              Let me clarify. I don't see any CPU usage at all normally (1-2%). but when I run the command line test in pfsense

              openssl speed -evp aes-128-cbc -engine cryptodev

              I only get 27k. It seems low compared to what I see with other people's setups.  When I am connected to the VPN, i only get 5 up / 5 down on a 20MB connection at the router.  Whether I use UDP or TCP the speed is still the same.

              1 Reply Last reply Reply Quote 0
              • N
                newbieuser1234 last edited by

                i have an atom d525 i think. dual core 1.86 ghz with 4gb ram.  Maybe I am doing something wrong? Could it be a snort issue inspecting my traffic?

                1 Reply Last reply Reply Quote 0
                • T
                  tirsojrp last edited by

                  @newbieuser1234:

                  Let me clarify. I don't see any CPU usage at all normally (1-2%). but when I run the command line test in pfsense

                  openssl speed -evp aes-128-cbc

                  I only get 27k. It seems low compared to what I see with other people's setups.  When I am connected to the VPN, i only get 5 up / 5 down on a 20MB connection at the router.  Whether I use UDP or TCP the speed is still the same.

                  Remove  -engine cryptodev and try again.

                  1 Reply Last reply Reply Quote 0
                  • N
                    newbieuser1234 last edited by

                    no change.  it's still the same 23k.

                    1 Reply Last reply Reply Quote 0
                    • N
                      newbieuser1234 last edited by

                      This is running a magnetic 5400 rpm HD.  I did notice I put it on a quad core 8gb ram machine with a HD and I got about 400k.  Then I tried it on my junky neoware ca22 running nanobsd with 512ram and got 4MB.  Can anyone explain?  Is it because the nanobsd version is reading instructions from ram and not disk?

                      1 Reply Last reply Reply Quote 0
                      • First post
                        Last post