Slower ipsec with 6.41

RouterOS General
1

Hi

I have tried different ipsec configurations with 6.41, and I think it gives a ipsec throughput decrease around 30%.
Have you really testet this and still claim HW support is functioning properly?
I’m still testing, mostly on 750Gr3, but I can’t find the throughput performance I’ve seen before.

On setups with easy crypto like aes-128, it’s hard to get more than 200Mb, before 6.41 300Mb was easy.
200Mb is still impossible without HW support, my conclution is, that HW must be working, but perhaps
the new bridge function is limiting performance.

We can’t keep the customers on pre-6.41 forever, at some point we must follow the upgrade line.

Best regards
Biker

2

I can confirm that ipsec is slower on 6.41 and on 6.42RC. I am back on 6.40 after three independent tries to use it and hope Mikrotik will solve this before the release of 6.42.

3

Thanks for your sharing. I also encounter similar problem like you.

4

Thanks guys

I haven’t been able to configure any setup, that could give the old SW performance.
Now I know I’m not nuts :open_mouth:

I hope Mikrotik makes a fix,- until then they should stop advertising the 750Gr3 doing 470Mb ipsec.
Not even half that number …

Ipsec performance was the main reason for choosing Mikrotik in the first place.

Cheers
Biker

5

And support ticket number to Mikrotik is?

6

Ticket#2018012922004625

7

Unfortunately no news about this, I hope it can be solved.

8

Hi guys

Just received a email from Mikrotik on this:

“For now we will revert the hEX IPsec optimization to the state it was prior version 6.41.”

That’s fine with me, thanks to Mikrotik for assistance.

Cheers
Biker