Community discussions

MikroTik App
 
medo
just joined
Topic Author
Posts: 5
Joined: Thu Aug 31, 2006 1:19 pm

RouterBoard's IPSec performance

Mon Sep 15, 2008 3:24 pm

I noticed that 433AH is actualy slower than RB532A when doing AES encrypted IPSec VPN tunnel. I also noticed that (discontinued) RB333 is 2-3 times faster with AES than RB532A.

I would like to know about IPSec performance of other RouterBoards especily RB600. Are there ANY official documents about IPSec performance benchmarks for different RouterBoards?
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6621
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: RouterBoard's IPSec performance

Mon Sep 15, 2008 3:30 pm

How did you tested IPSec on all boards ?
Do you use the same configurution ?
Is it possible to get configuration from your routers ?
 
medo
just joined
Topic Author
Posts: 5
Joined: Thu Aug 31, 2006 1:19 pm

Re: RouterBoard's IPSec performance

Mon Sep 15, 2008 3:41 pm

All RBs were netinstalled from the scratch. AES-256 encryption was used for encryption and SHA auth for both phases with modp1024 PFS and DH groups.

laptop1--(eth1)--RB532--(eth2)---crossover_UTP---(eth2)--RB532--(eth1)--laptop2

I ran iperf, chariot and Bandwidth test within both RB and got similar results.
 
sigbjornl
just joined
Posts: 9
Joined: Mon Jan 18, 2010 9:32 am

Re: RouterBoard's IPSec performance

Mon Jan 18, 2010 9:33 am

Any update to this? I am also very interested in IPSEC performance...
 
sigbjornl
just joined
Posts: 9
Joined: Mon Jan 18, 2010 9:32 am

Re: RouterBoard's IPSec performance

Mon Jan 18, 2010 9:34 am

Any updates with regards to IPSec performance on the various Routerboard models?
 
User avatar
sergejs
MikroTik Support
MikroTik Support
Posts: 6621
Joined: Thu Mar 31, 2005 3:33 pm
Location: Riga, Latvia
Contact:

Re: RouterBoard's IPSec performance

Mon Jan 18, 2010 11:44 am

What is your configuration for IPSec?
What are the results you got?
 
sigbjornl
just joined
Posts: 9
Joined: Mon Jan 18, 2010 9:32 am

Re: RouterBoard's IPSec performance

Mon May 03, 2010 11:21 pm

Hi,

I had no Routerboard at that time, but I do now.

I have a Watchguard Firebox II in the other end and I get about 5mbit trough. The link is fiber to fiber full duplex at 10/10mbit.

Is this the IPsec speed I can expect from the RouterBoard 450G ?

I use 3des and sha1.


Regards,
Siggi
 
hedele
Member
Member
Posts: 338
Joined: Tue Feb 24, 2009 11:23 pm

Re: RouterBoard's IPSec performance

Tue May 04, 2010 4:36 pm

You probably won't get a whole lot more out of it...
Try switching to AES-128 - this should be a lot faster.
 
sigbjornl
just joined
Posts: 9
Joined: Mon Jan 18, 2010 9:32 am

Re: RouterBoard's IPSec performance

Sun Apr 03, 2011 3:35 pm

The Watchguard has been replaced by a RB 750G, and I'm now running aes-128. I get the full 10mbits with a CPU usage of approx 45% on the RB750G.

Who is online

Users browsing this forum: No registered users and 87 guests