Model: CCR1009-7G-1C
Versión: 6.46.4 (stable)
Firmware: 6.44.5
I am performing performance tests of an ovpn tunnel.
Both ends with 600 / 600Mbs connection
This is the result of iperf peer-to-peer without ovpn tunnel
This is the result through the ovpn tunnel
One of the cores works 100%
Has anyone gotten better speeds?
One CCR core can encrypt/decrypt ~150Mbps, one tunnel is tied to one core, so it sounds about right.
If you want faster tunnel use ipsec which can use HW acceleration.
There is no possibility of exceeding those 150Mbs changed model?
Ipsec is not always possible, especially when the public ip is not assigned to a router interface and is behind a nat
Single core on ARMs (CCR2004 or RB4011) has a bit better single core performance, but do not expect magic. You will still not be able to do 600 / 600Mbs over OVPN.
with version 7 and openvpn udp will improve performance?
Will hardware acceleration for openvpn be possible in the future?
My results with l2tp + ipsec are not much better than openvpn
I’m also intrested. I have also CCR1009-7G-1C. And i never rech more then 35 MBit/s with OpenVPN. Before i used the CCR1009-7G-1C i have run this Tunnel on a very old IBM Server and it was about 4-5 times faster. Now i have modern router hardware and i have this very poor performance.
Why do we have hw acceleration on IPSec but not for OpenVPN?