Here goes…
We need to perform iSCSI replication from 1 site to another in an encrypted manner (IPsec). This will be asynchronous replication every 15 minutes. We will have around 150Mbps link between the 2 sites. Every replication should take around 5-10 minutes on average based on rate of data change analysis we did, assuming the 150Mbps link.
What routers shall I buy? Are 2 RB1100AHX2 enough (1 per site) or shall we go CCR?
Kind Regards,
Vince
RB1100AHX2 , 5.26 and you’re pretty much golden.
Unfortunately you will need media converters unlike the CCR’s but my experience with CCR and VPN is that they just don’t mix.
I have another remote site very similar to yours pushing 500mbs or so of vmware traffic on a regular basis going 1 1/2 years now non stop.
I have read on these forums that since a certain firmware, the CCR is outperforming the RB1100AHx2 in IPsec encryption speed. Is this true or the RB1100AHx2 still rule having the IPsec accelerator in hardware?
Just wanted another opinion… in no way I want to discredit your post.
Regards,
Vince
Yes, it’s correct that strating from a recent routerOS version IPSEC VPN’s are now accelerated on the CCR’s. I haven’t seen any forum tests yet, but in theory any CCR should be faster then RB1100AHx2 now.
So I’m guessing my post was deleted. Buy a ccr and try tunneled traffic. See for yourself. Rb1100ahx2 is generally faster.
At this point I’m confused… CCR or RB1100AHx2? Seems that views are tied on this one.
Maybe a Mikrotik engineer can reply?
Kind Regards,
Vince
CCR can be a lot faster, depending on how much tunnels you are running.
Some more info is here
http://forum.mikrotik.com/t/high-speed-vpn-100mbps/75714/1
Thank you for the link!
So I can safely assume that if I have 1 GRE/IPsec connection between 2 routers for 150Mbps/200Mbps, 2 RB1100AHx2 is enough?
Should be OK . IIRC the RB1100AHx2 is rated up to 800mbits ipsec hardware encryption.
Like I said I have a pure ipsec only tunnel (no gre) pushing 500mbits atm for vmware backups and runs great.