Which protocol is the fastest site-to-site encrypted connect

RouterOS General
1

Hi all,
I’m looking for the fastest way to connect two overseas mikrotik sites. The spped of the connection would play a crucial rule in the connection. Moreover, I would like to have the encryption on the connection. However, the strength of the encryption is not important.

I tested IPSec, PPTP, L2TP, … But, none of them reached the maximum possible speed the is about 4Mbps.


I’m open for any suggestion.

Thanks

2

Which encryption did you use on IPSEC? AES128 should be faster than 3DES. Sometimes people pick 3DES because DES can’t be used for their application anymore but AES128 is kinder to the CPU than 3DES.

A number of other factors will affect speed on an international link. It might be worth checking your raw UDP/TCP speeds site<>site first so you know what is possible before encryption.

3

Sorry for my late reply! As I’m using two Mikrotik routers to implement it, I can use any protocol that Mikrotik supports. I had been using the default 3DES.

Thanks to you I would try to use AES128.

If there is another protocol, I would be pleased to check it too.

4

A RB 750GL can easily do 10mbit of IPSec traffic using aes128.

You mentioned you only needed 4mbit, so that should be no problem.

5

Thanks for your help.
However, I have a tiny problem implementing it & it doesn’t work correctly! One of the sides has Hotspot enabled! Does it make the problem?

6

Oh boy … Hotspot.

I would really NOT reccomend putting any other functions on a RB that handles the Hotspot.
Hotspot is everywhere in config, in mangle, firewall, in ip address and interface config, etc… So yes, its very probable that Hotspot is causing the problem.

Its best to have Hotspot on a separate RB, and then use another RB to do other network functions.