Celeron 1GHZ not enough for >8mbps OpenVPN Connections?



  • Hy,
    My firewall is a dedicated box (4 lan Ports with 100mbps realtek interfaces) with a "Intel(R) Celeron(R) M processor 1.00GHz". Obviously there is no hardware acceleration for the crypto (I tried the option BSD cryptodev engine, which doesnt change a thing).

    I tried a Openvpn Connection to a server on my pc (core-duo) and achieved transfers of 50/10mbits. While using the firewall-box I only achieve 7/6mbits, what is ca the speed I achieve with the firewall to another openvpn server.

    Is that normal for that processor or might there be a misconfiguration?
    Which Hardware would be good for full speed - I only have like 10 clients on the firewall, which each just sometimes uses the net (home setup).

    Thx!



  • pfSense Hardware Requirements would explain it at the best.

    I tried a Openvpn Connection to a server on my pc (core-duo) and achieved transfers of 50/10mbits.

    This is a LAN internal test and would not be matching connections through the Internet via VPN as I see it right.

    Is that normal for that processor or might there be a misconfiguration?

    We all don´t know your config.

    what is ca the speed I achieve with the firewall to another openvpn server.

    We can all only guess on this! You might try it up with a friend together.

    Which Hardware would be good for full speed - I only have like 10 clients on the firewall, which each just sometimes uses the net (home setup).

    Do you own a free miniPCI or PCI slot? Then you can gain the VPN throughput by
    using a Soekris vpn14x1 card, for miniPCI and PCI one card is out, this would be
    speeding it up a bit I really think.  :o

    Intel Celeron G3260 @3,1GHz  8)
    mini ITX Board with Intel LAN Ports
    or Soekirs vpn14x1 VPN card
    or a Intel Quad Port NIC
    mini ITX case M350
    60/80 Watt PSU
    4 - 8 GB RAM
    mSATA or SSD
    ~$200 - $300

    Jetway NF9HG-2930 Intel Celeron Quad Core Fanless PC w/ 4X Intel LAN, 2GB, M350 ~$299
    Jetway Intel N2930 Network PC w/ 5X Intel LAN, 2GB, JBC200F9N-E4IN-B, ADE4INLANG ~$320

    Alix Board complete bundle ~$180
    Soekris vpn14x1 VPN cards ~$50
    4 GB CF Card ~$30

    Alix APU 1D4 ~$260 complete bundle
    mSATA 60 Gb ~$50

    The pfSense Shop hast also some new devices likes the
    VK-T40E ~$?
    mSATA 60 GB

    SG-2220 ~$299
    mSATA 60 GB
    Netgear GS105Ev2 ~$40



  • You are better off with an i3 (with aes-ni) than a celeron + hifn accelerator card, same sort of price range.

    http://us.hardware.info/reviews/4993/26/intel-core-i3-4330–i5-4440-review-affordable-haswells-benchmarks-igpu-truecrypt-71-aes-+-aes-ni

    While not OpenVPN or IPSec (which likely would be higher) - 2.1 Gigabytes/s worth of performance vs  250 megabytes/s