RB1100AHx4 - IPSec/Tunnel speed

Hardware MikroTik hardware general
1

Hello, I currently have a single L2TP/IPSec tunnel set up with the RB750Gr3 hEX. AES-128-CBC/SHA1.

I am not able to get the device to pull more than ~100mbps through the tunnel. This is a limitation of the router, if I connect to the L2TP/IPSec tunnel from my computer instead I am able to transfer 300mbits which is the speed of my WAN connection.

How is the performance of the RB1100AHx4 on a single tunnel? Will it be able to handle a (L2TP/GRE/EoIP) + IPSec tunnel above 300mbps? I have been trying to research this on the forums but I am seeing a lot of mixed reports of the actual performance of these devices.

Also, I have tried to set up an IPSec only tunnel, but I am having trouble figuring it out without being able to create an interface for it. The server side has a single interface with a public IP address. With the other tunneling modes I can assign an IP on the tunnel interface.

2

Have a look at specs https://mikrotik.com/product/RB1100Dx4

Mode		Configuration		1400 byte	512 byte	64 byte
					kpps	Mbps	kpps	Mbps	kpps	Mbps
Single tunnel	AES-128-CBC + SHA1	122.0	1366.4	124.9	511.6	127.0	65.0
3

Thanks, I see the specs, but the RB750Gr3 claims to accelerate up to 400mbps and I cannot reach that with the overhead of L2TP. So I was wondering if there were any real world benchmarks with L2TP+IPSec not just IPSec alone.

4

Currently Mikrotik publish only very synthetic UPD test results, and refuses to publish real-life TCP test results.
You can write a petition about adding result for “Single tunnel TCP single thread” http://forum.mikrotik.com/t/please-add-performance-results-for-ipsec-tunnel/88979/1

5

The numbers reported by MT are for both directions accumulated. This was stated by MT personnel on this forum.

1100x4 has much better numbers, even if in ideal situation, is more powerful than 750Gr3