IPSEC performance problem

[mikruser]

@mutluit

I cannot imagine Mikrotik intentionally publishing inflated test results

Be sure they do it.
They use a few tricks to mislead:

1. they use UDP instead of TCP, despite the fact that ALL file transfer protocols (FTP, HTTP, SCP, SFTP, SMB) use TCP.
   VPN tunnels on Mikrotik hardware routers shows good speed with UDP, but has very poor speed with TCP - you can find many topics on the forum about these issues, for example L2TP/IPSec VPN performance on 1G links
2. they use two streams (instead of single stream) for single tunnel, which doubles the total Mbps (one stream is limited by the speed of one core).

For real life results they should publish the results of TCP single stream! (and preferably using an iperf, not a Traffic Generator)

Suggestion: add to "Test results" page also throughput results for TCP single stream

Hello, Suggestion: add to “Test results” page for each router also throughput results for TCP single stream. This would be very useful information since ALL file transfer protocols (FTP, HTTP, SCP, SFTP, SMB) use TCP. (also please add in the description to the existing results that they were obtained using UDP, and number of used streams)

Please add performance results for IPsec tunnel!

Hello, My suggestion: Please add performance results for IPsec tunnel (AES) to “Performance test results” table on each product page. Interested the maximum speed of a single tunnel.