English Forums > Hardware and Performance
OpenVPN slow throughput
proxykid:
I'm currently getting very low throughput on OpenVPN. ISP connection is 200/200 however over OpenVPN it goes down to 25/25 mbps aprox.
According to a lot of research online this GW server+CPU should be more than enough to achieve at least 100 mbps, but I would like to get as near as possible to the 200 mbps available bandwidth, if not possible well at least get closer to 100.
Server specs are:
OPNsense 19.7.8-amd64
FreeBSD 11.2-RELEASE-p16-HBSD
OpenSSL 1.0.2t 10 Sep 2019
CPU: Intel(R) Atom(TM) CPU C2758 @ 2.40GHz
RAM: 8GB
SSD: 256GB Samsung EVO
OpenVPN settings:
Encryption: AES-128-CBC
No Hardware Crypt acceleration
No compression
Custom server settings
fast-io;
sndbuf 0;
rcvbuf 0;
push "sndbuf 524288";
push "rcvbuf 524288";
Custom client settings
fast-io
fragment 0
mssfix 0
sndbuf 524288
rcvbuf 524288
Any suggestions?
chemlud:
...try with faster procesor. openvpn runs single-core...
proxykid:
Thank you for reply
I think cpu should be enough for 100.
Openssl tests for AES-128 and AES-256 EITHER CBC and Gcb throw about 130 mbps.
Cpu does have AES-NI support and single thread usage when transferring data at the apparent max speed of 25 mbps is ~25%, therefore I'm not even using 50% of a single core/thread.
mfedv:
You have explicitly disabled mssfix. Can you check if openvpn encapsulated traffic gets fragmented? That should be avoided, as fragment reassembly is rather slow.
proxykid:
--- Quote from: mfedv on March 26, 2020, 04:48:48 pm ---You have explicitly disabled mssfix. Can you check if openvpn encapsulated traffic gets fragmented? That should be avoided, as fragment reassembly is rather slow.
--- End quote ---
I'm sorry but how would I check this? pcaps?
Navigation
[0] Message Index
[#] Next page
Go to full version