Hi!
CCR1009-7G-1C-1S+. Firmware 6.39.2.
Mikrotik IPsec (my side) → StrongSwan (client side). Hash Algorithm sha256. Encryption Algorithm aes-128. DH Group modp3072.
On my side. Speed: download - 10Mbit/s, Upload - 50Mbit/s.
CPU load 40%.
Why download speed so low? How to increase it?
Whats the internet service at the strong swan side? Probably just 10M upstream?
-Chris
CPU load of 40% on a CCR1009???
What process is using that much CPU?
200M
The new tests are more successful - 40-90M.
Monday will be tested on the production.
Remember in this scenario you should run “Current” firmware, not “Bugfix”. (6.39.2)
In this version a problem was solved that causes decreased performance when using IPsec on systems with sub-optimal TCP implementation.
(notably Microsoft Windows)
Oh, sorry, I added the firmware version to the beginning.
Just to be clear 200M upload on the client side? What OS is the client?
I don’t know 
The problem is not relevant, it’s not about speed.