Bridging VPN Protocol with minimal overhead

RouterOS General
1

Hi all MT fans out there.

I’m wondering if anyone else has gotten themselves into a prodicament where one needs to pass L2 traffic over L3 (due to MAC limits etc) and found that certain VPN’s have different results.

Currently I am accomplishing the goal with EoIP, but I can’t help but think there is a better way to accomplish this goal (by better I mean more throughput)

Say I have a 600M F/O link Layer2 point-to-point, (since it is isolated PtP security/encryption isn’t required at all) my throughput through this tunnel is about 520M whereas straight on the PtP IP address I get the full 600M, so we are looking at about a 14-20% loss due to TCP overhead.

We have MTU of 4460 available to us on the PtP F/O link, but doesn’t appear to have much an effect by increasing this.
https://www.stubarea51.net/2015/10/16/10-gbps-of-layer-2-throughput-is-possible-using-mikrotiks-eoip-tunnel/

I found this article way back in the day
https://rickfreyconsulting.com/mikrotik-vpns/

which gave a good breakdown of what was to be expected, but I curious if any other users have found solutions to the above.

Thanks in advance!

2

EoIP is the lightest. You won’t find a tunnel, which encaps data with a header less than 4 bytes.

3

Hi Anumrak,

Thanks for the response, ok if we have established that EoIP is the way to go,
has anyone had success in increasing the throughput by changing MTUs / L2 MTUs ? I would really like to squeeze the maximum possible out of the link.

much like this guy is doing:
https://www.youtube.com/watch?v=jTt9X2TkN1Q

4

It depends of max MTU for your routerboard on ethernet/sfp interface. So check it here:
https://wiki.mikrotik.com/wiki/Manual%3AMaximum_Transmission_Unit_on_RouterBoards#MAC.2FLayer-2.2FL2_MTU