Wireguard performance expectations?

[vorago]

Hello!

I am thinking about replacing pfSense with OPNSense (pf is going no matter what, regardless) and am curious about how much of a performance hit I'd expect to see with the WG userspace app.

On pfSense's (flawed) kernel implementation, with a Gigabit internet connection, I was getting in the range of 700Mbps down from Mullvad on a protectli device with a dual core intel CPU.

Roughly how much of a performance penalty would I expect from the OPNSense app?

[mimugmail]

Which CPU type? Xeon gives Gigabit line rate

[tusc]

I’m hitting close to that with a Celeron G4900 on a 1Gb symmetrical link on PIA. I started a thread on this: https://www.reddit.com/r/OPNsenseFirewall/comments/m8qhys/wireguardgo_is_good_enough/

[mimugmail]

Nice!

[vorago]

Which CPU type? Xeon gives Gigabit line rate

I'll be using The Protectli FW4B with the 4 core Intel J3160.

[mimugmail]

I would expect 300-400, but now I am unsure due to previous comment. Maybe even more

[vorago]

Alright cool, we'll see when I get the RAM & SSD in for the box! Looking forward to trying OPNSense out.