Hello,
I have issues with speed in IPSEC Tunnel that build between two RB3011UiAS.
The Internet link is: 100Mbit/s
IPSEC Setting (Identical for both):
P1: SHA1 - AES128 - mod768
P2: SHA1 - AES128CBC
For TCP I added this rule: add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=syn on both sides.
For speed test I use iperf3
Results UDP:
Client side:
mint mint # iperf3 -c x.x.x.x -u -b 100m -t 30
Connecting to host x.x.x.x, port 5201
[ 4] local x.x.x.x port 36404 connected to x.x.x.x port 5201
[ ID] Interval Transfer Bandwidth Total Datagrams
[ 4] 0.00-1.00 sec 10.8 MBytes 90.9 Mbits/sec 1388
[ 4] 1.00-2.00 sec 12.3 MBytes 104 Mbits/sec 1579
[ 4] 2.00-3.00 sec 11.6 MBytes 97.1 Mbits/sec 1482
[ 4] 3.00-4.00 sec 11.9 MBytes 99.3 Mbits/sec 1520
[ 4] 4.00-5.00 sec 12.1 MBytes 102 Mbits/sec 1551
[ 4] 5.00-6.00 sec 12.3 MBytes 103 Mbits/sec 1573
[ 4] 6.00-7.00 sec 11.3 MBytes 95.0 Mbits/sec 1450
[ 4] 7.00-8.00 sec 12.4 MBytes 104 Mbits/sec 1590
[ 4] 8.00-9.00 sec 11.4 MBytes 95.3 Mbits/sec 1454
[ 4] 9.00-10.00 sec 11.9 MBytes 100 Mbits/sec 1527
[ 4] 10.00-11.00 sec 12.0 MBytes 101 Mbits/sec 1540
[ 4] 11.00-12.00 sec 12.1 MBytes 102 Mbits/sec 1555
[ 4] 12.00-13.00 sec 12.2 MBytes 103 Mbits/sec 1565
[ 4] 13.00-14.00 sec 11.8 MBytes 98.6 Mbits/sec 1506
[ 4] 14.00-15.00 sec 11.7 MBytes 97.8 Mbits/sec 1492
[ 4] 15.00-16.00 sec 11.8 MBytes 98.7 Mbits/sec 1507
[ 4] 16.00-17.00 sec 12.3 MBytes 103 Mbits/sec 1571
[ 4] 17.00-18.00 sec 11.6 MBytes 96.9 Mbits/sec 1479
[ 4] 18.00-19.00 sec 12.5 MBytes 105 Mbits/sec 1599
[ 4] 19.00-20.00 sec 11.5 MBytes 96.7 Mbits/sec 1476
[ 4] 20.00-21.00 sec 12.0 MBytes 101 Mbits/sec 1534
[ 4] 21.00-22.00 sec 12.0 MBytes 101 Mbits/sec 1537
[ 4] 22.00-23.00 sec 12.2 MBytes 102 Mbits/sec 1562
[ 4] 23.00-24.00 sec 11.7 MBytes 98.5 Mbits/sec 1503
[ 4] 24.00-25.00 sec 12.0 MBytes 101 Mbits/sec 1536
[ 4] 25.00-26.00 sec 11.7 MBytes 98.0 Mbits/sec 1495
[ 4] 26.00-27.00 sec 12.1 MBytes 102 Mbits/sec 1549
[ 4] 27.00-28.00 sec 11.6 MBytes 97.4 Mbits/sec 1486
[ 4] 28.00-29.00 sec 12.1 MBytes 102 Mbits/sec 1553
[ 4] 29.00-30.00 sec 12.1 MBytes 101 Mbits/sec 1544
[ ID] Interval Transfer Bandwidth Jitter Lost/Total Datagrams
[ 4] 0.00-30.00 sec 357 MBytes 99.8 Mbits/sec 1.756 ms 29488/45609 (65%)
[ 4] Sent 45609 datagrams
Server side:
.....................................................................................
iperf3: OUT OF ORDER - incoming packet = 45511 and received packet = 45512 AND SP = 5
iperf3: OUT OF ORDER - incoming packet = 45515 and received packet = 45517 AND SP = 5
iperf3: OUT OF ORDER - incoming packet = 45521 and received packet = 45524 AND SP = 5
iperf3: OUT OF ORDER - incoming packet = 45525 and received packet = 45526 AND SP = 5
iperf3: OUT OF ORDER - incoming packet = 45527 and received packet = 45528 AND SP = 5
iperf3: OUT OF ORDER - incoming packet = 45531 and received packet = 45532 AND SP = 5
iperf3: OUT OF ORDER - incoming packet = 45548 and received packet = 45549 AND SP = 5
iperf3: OUT OF ORDER - incoming packet = 45554 and received packet = 45555 AND SP = 5
iperf3: OUT OF ORDER - incoming packet = 45570 and received packet = 45572 AND SP = 5
iperf3: OUT OF ORDER - incoming packet = 45608 and received packet = 45609 AND SP = 5
[ 5] 30.02-30.97 sec 4.23 MBytes 37.3 Mbits/sec 1.756 ms 918/1377 (67%)
[ ID] Interval Transfer Bandwidth Jitter Lost/Total Datag
rams
[ 5] 0.00-30.97 sec 0.00 Bytes 0.00 bits/sec 1.756 ms 29488/45609 (65%)
[SUM] 0.0-31.0 sec 2688 datagrams received out-of-order
Results TCP:
Client side:
mint mint # iperf3 -c x.x.x.x -b 100m -t 30
Connecting to host x.x.x.x, port 5201
[ 4] local x.x.x.x port 59042 connected to x.x.x.x port 5201
[ ID] Interval Transfer Bandwidth Retr Cwnd
[ 4] 0.00-1.00 sec 66.3 KBytes 543 Kbits/sec 5 1.35 KBytes
[ 4] 1.00-2.00 sec 0.00 Bytes 0.00 bits/sec 2 1.35 KBytes
[ 4] 2.00-3.00 sec 0.00 Bytes 0.00 bits/sec 1 2.71 KBytes
[ 4] 3.00-4.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 4.00-5.00 sec 0.00 Bytes 0.00 bits/sec 2 1.35 KBytes
[ 4] 5.00-6.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 6.00-7.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 7.00-8.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 8.00-9.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 9.00-10.00 sec 0.00 Bytes 0.00 bits/sec 1 2.71 KBytes
[ 4] 10.00-11.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 11.00-12.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 12.00-13.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 13.00-14.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 14.00-15.00 sec 0.00 Bytes 0.00 bits/sec 2 2.71 KBytes
[ 4] 15.00-16.00 sec 0.00 Bytes 0.00 bits/sec 2 1.35 KBytes
[ 4] 16.00-17.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 17.00-18.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 18.00-19.00 sec 0.00 Bytes 0.00 bits/sec 0 1.35 KBytes
[ 4] 19.00-20.00 sec 0.00 Bytes 0.00 bits/sec 2 1.35 KBytes
[ 4] 20.00-21.00 sec 0.00 Bytes 0.00 bits/sec 0 1.35 KBytes
[ 4] 21.00-22.00 sec 0.00 Bytes 0.00 bits/sec 1 2.71 KBytes
[ 4] 22.00-23.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 23.00-24.00 sec 0.00 Bytes 0.00 bits/sec 1 2.71 KBytes
[ 4] 24.00-25.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 25.00-26.00 sec 0.00 Bytes 0.00 bits/sec 1 2.71 KBytes
[ 4] 26.00-27.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 27.00-28.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 28.00-29.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ 4] 29.00-30.00 sec 0.00 Bytes 0.00 bits/sec 1 1.35 KBytes
[ ID] Interval Transfer Bandwidth Retr
[ 4] 0.00-30.00 sec 66.3 KBytes 18.1 Kbits/sec 37 sender
[ 4] 0.00-30.00 sec 21.7 KBytes 5.91 Kbits/sec receiver
iperf Done.
Server side:
Accepted connection from x.x.x.x, port 59038
[ ID] Interval Transfer Bandwidth
iperf3: the client has terminated
Server listening on 5201
Accepted connection from x.x.x.x, port 59040
[ 5] local x.x.x.x port 5201 connected to x.x.x.x port 59042
[ ID] Interval Transfer Bandwidth
[ 5] 0.00-1.01 sec 0.00 Bytes 0.00 bits/sec
[ 5] 1.01-2.01 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 2.01-3.01 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 3.01-4.01 sec 0.00 Bytes 0.00 bits/sec
[ 5] 4.01-5.01 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 5.01-6.01 sec 0.00 Bytes 0.00 bits/sec
[ 5] 6.01-7.00 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 7.00-8.00 sec 0.00 Bytes 0.00 bits/sec
[ 5] 8.00-9.00 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 9.00-10.02 sec 0.00 Bytes 0.00 bits/sec
[ 5] 10.02-11.01 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 11.01-12.01 sec 0.00 Bytes 0.00 bits/sec
[ 5] 12.01-13.01 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 13.01-14.01 sec 0.00 Bytes 0.00 bits/sec
[ 5] 14.01-15.01 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 15.01-16.01 sec 2.71 KBytes 22.2 Kbits/sec
[ 5] 16.01-17.00 sec 0.00 Bytes 0.00 bits/sec
[ 5] 17.00-18.00 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 18.00-19.00 sec 0.00 Bytes 0.00 bits/sec
[ 5] 19.00-20.01 sec 1.35 KBytes 10.9 Kbits/sec
[ 5] 20.01-21.01 sec 0.00 Bytes 0.00 bits/sec
[ 5] 21.01-22.01 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 22.01-23.01 sec 0.00 Bytes 0.00 bits/sec
[ 5] 23.01-24.01 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 24.01-25.01 sec 0.00 Bytes 0.00 bits/sec
[ 5] 25.01-26.01 sec 0.00 Bytes 0.00 bits/sec
[ 5] 26.01-27.00 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 27.00-28.00 sec 0.00 Bytes 0.00 bits/sec
[ 5] 28.00-29.00 sec 1.35 KBytes 11.1 Kbits/sec
[ 5] 29.00-30.00 sec 0.00 Bytes 0.00 bits/sec
[ 5] 30.00-30.00 sec 0.00 Bytes nan bits/sec
[ ID] Interval Transfer Bandwidth
[ 5] 0.00-30.00 sec 0.00 Bytes 0.00 bits/sec sender
[ 5] 0.00-30.00 sec 21.7 KBytes 5.91 Kbits/sec receiver
Server listening on 5201
CPU on both RB3011 no up more 5%
I can't understand the reason of this. Maybe someone faced with a situation like mine and know how fix it?
