What sort of software/hardware are you using?  I will definitely need to
improve the performance issues.

Shannon


On Tue, 2002-06-18 at 12:46, Scott Harney wrote:
> I can't say that I have the same issue. I have an OpenBSD IPSEc VPN. two
> actually. one for outside connections in and one for my wireless LAN.
> I haven't experienced that kind of performance hit.
> 
> On Tue, Jun 18, 2002 at 01:00:35PM -0500, Dustin Puryear wrote:
> > At 12:06 PM 6/18/2002 -0500, you wrote:
> > >I am using the built in stuff that is in OpenBSD (IPSec) with manual
> > >3des keys.
> > 
> > I haven't messed with the OpenBSD IPSec implementation. A factor of 20, 
> > huh? That's kind of brutal, but to be honest, I have yet to toy with an 
> > IPSec-based VPN myself. Is that performance expected?
> > 
> > Regards, Dustin
> > 
> > 
> > 
> > >Shannon
> > >
> > >On Tue, 2002-06-18 at 09:16, Dustin Puryear wrote:
> > > > What software are you using for the actual VPN?
> > > >
> > > > Regards, Dustin
> > > >
> > > > At 08:45 PM 6/17/2002 -0500, you wrote:
> > > > >Just in case anyone was wondering, I did some throughput testing on a
> > > > >test VPN I have here.  It is pretty CPU intensive as far as I can tell.
> > > > >The VPN was running on two OpenBSD boxes with ~400 mhz cpus.  See the
> > > > >details and gnuplots at:
> > > > >
> > > > >http://www.ligo-la.caltech.edu/~sroddy/netpipetests/netpipe_tests.html
> > > > >
> > > > >About a factor of 20 reduction in speed when going from
> > > > >client->gateway->(encrypted)=>gateway=>(decrypted)->client.
> > > > >
> > > > >I am going to do some further testing on faster machines.  I am also
> > > > >going to try blowfish vs. 3des encryption.  Blowfish seems to be faster
> > > > >than 3des on ssh.
> > > > >
> > > > >--
> > > > >Shannon Roddy
> > > > >__________________________________________________________________
> > > > >Systems Administrator           California Institute of Technology
> > > > >[EMAIL PROTECTED]      LIGO Livingston Observatory
> > > > >ph: (225)686-3106               19100 LIGO Lane
> > > > >fx: (225)686-7189               Livingston, LA 70754
> > > > >Web Page                        http://www.ligo-la.caltech.edu/~sroddy
> > > > >Calendar/Schedule               See Home Page
> > > > >Wireless Email (255 Chars)      [EMAIL PROTECTED]
> > > > >
> > > > >_______________________________________________
> > > > >General mailing list
> > > > >[email protected]
> > > > >http://brlug.net/mailman/listinfo/general_brlug.net
> > > >
> > > >
> > > > ---
> > > > Dustin Puryear <[EMAIL PROTECTED]>
> > > > UNIX and Network Consultant
> > > > http://members.telocity.com/~dpuryear
> > > > PGP Key available at http://www.us.pgp.net
> > > > In the beginning the Universe was created.
> > > > This has been widely regarded as a bad move. - Douglas Adams
> > > >
> > > >
> > > > _______________________________________________
> > > > General mailing list
> > > > [email protected]
> > > > http://brlug.net/mailman/listinfo/general_brlug.net
> > >--
> > >Shannon Roddy
> > >__________________________________________________________________
> > >Systems Administrator           California Institute of Technology
> > >[EMAIL PROTECTED]      LIGO Livingston Observatory
> > >ph: (225)686-3106               19100 LIGO Lane
> > >fx: (225)686-7189               Livingston, LA 70754
> > >Web Page                        http://www.ligo-la.caltech.edu/~sroddy
> > >Calendar/Schedule               See Home Page
> > >Wireless Email (255 Chars)      [EMAIL PROTECTED]
> > >
> > >_______________________________________________
> > >General mailing list
> > >[email protected]
> > >http://brlug.net/mailman/listinfo/general_brlug.net
> > 
> > 
> > ---
> > Dustin Puryear <[EMAIL PROTECTED]>
> > UNIX and Network Consultant
> > http://members.telocity.com/~dpuryear
> > PGP Key available at http://www.us.pgp.net
> > In the beginning the Universe was created.
> > This has been widely regarded as a bad move. - Douglas Adams
> > 
> > 
> > _______________________________________________
> > General mailing list
> > [email protected]
> > http://brlug.net/mailman/listinfo/general_brlug.net
> 
> -- 
> Scott Harney<[EMAIL PROTECTED]>
> 
> _______________________________________________
> General mailing list
> [email protected]
> http://brlug.net/mailman/listinfo/general_brlug.net
-- 
Shannon Roddy
__________________________________________________________________
Systems Administrator           California Institute of Technology
[EMAIL PROTECTED]      LIGO Livingston Observatory
ph: (225)686-3106               19100 LIGO Lane
fx: (225)686-7189               Livingston, LA 70754
Web Page                        http://www.ligo-la.caltech.edu/~sroddy
Calendar/Schedule               See Home Page
Wireless Email (255 Chars)      [EMAIL PROTECTED]

Reply via email to