100Mbps VPN

Hardware MikroTik hardware general
1

Hello all,

I have a RB450G router with a 300Mbps/300Mbps internet connection. In other place I have a 100Mbps/10Mbps internet connection and I want to join them with a VPN.

I read in the IPSec wiki that it depend on which hardware I use I could get different results.

If I put the RB 450G and a RB750UP r2, could I get a 100Mbps VPN?

Which VPN do you recommend? OpenVPN? IPSec? PPTP?

I really appreciate your help, best regards.

2

i have tested on mikrotik mipsbe devices the maximum ipsec throughput is less than 40mbps using aes-128 with cpu usage 100%

second batch of rb850gx2 have ipsec acceleration but i have dont tested

http://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Hardware_encryption

3

Thanks chechito.

Is there other VPN that could handle more bandwidth, I don’t need to mush security in the link.

Regards.

4

I use two hAP with IPSec tunnel. Since it lacks crypto-offload, it maxes out about ~30Mbps

I suggest IPSec with some board with crypto-offload in hardware. OpenVPN support on RouterOS isn’t that great (and IPSec is much better for permanent/static tunnels)

If security is not a concern, you could use an plain GRE/IP-IP tunnel.

5

Thanks for the reply.

Which RB has board with crypto-offload in hardware? I want to use the RB450G that I bought.

Kind regards.

6

Currently these 3 kinds of boards have the acceleration hardware:
CCR line of boards
850Gx2
1100AHx2

The 3011 has acceleration hardware on the CPU, but it has not been implemented yet in the OS, it might be an added feature once ROS 7.x comes out.

The 450G does not have the necessary hardware and will cap out at around 30-40 Mbps of encrypted traffic.

7

Thanks!

So 850Gx2 is the hardware a need.

Best regards.