English Forums > Hardware and Performance

Openssl performance

<< < (3/3)

framura:
I report some results.

I made some speed test with and without OPNSense, with and without OpenVPN and with different cypher (AES-256-CBC and BF-CBC, 128bit).

Without OPNSense and without VPN, I maxed out my Internet bandwidth (100Mbps).
Without OPNSense and with VPN (directly from my desktop machine, I7), I get 80-90% Internet bandwidth (no difference between AES and BF).
With OPNSense and without VPN, I maxed out my Internet bandwidth and with 8-10% CPU on OPNSense machine
With OPNSense and with VPN, I get 80-90% Internet bandwidth (with AES-256) and with 25-30% CPU.
With OPNSense and with VPN, I get 70-80% Internet bandwidth (with BF-CBC) and with 25-30% CPU.

What do you think?

Thanks

franco:
Blowfish looks a little off, but that might be FreeBSD. Top 10% can be lost in protocol overhead. With that in mind, these numbers are solid. :)

Regarding firmware flavours: This tends to happen with users, we are already planning to rework the firmware parts to make it clearer that an update must be run in order to finish the transition. Sorry about that.

framura:
I agree, these numbers are good.

When with openvpn will be possible to use aes-256-gcm, perhaps they will become even better.

interfaSys:

--- Quote from: framura on March 13, 2016, 09:01:02 am ---When with openvpn will be possible to use aes-256-gcm, perhaps they will become even better.

--- End quote ---

Not sure...


--- Code: ---type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256-cbc     157757.68k   213745.17k   244716.20k   253700.10k   257092.77k

type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256-gcm      97815.09k   179295.42k   236719.87k   259856.57k   266351.96k
--- End code ---

Navigation

[0] Message Index

[*] Previous page