> would you mind posting your (sanitized) openvpn configuration, as well
> as your bandwidth measuring method?
> 
> i attempted this today and am seeing much less than 14Mbps. i'm probably
> not measuring the same way, however, as i'm using a simple scp which 
> obviously has its own overhead - but does give me what i believe to be
> a fair comparison (testing with and without vpn).
> 
> 

One end of the VPN is a Celeron E3300 w/ 4GB RAM and no crypto
accelerator. There is 20Mbit metro-ethernet connection here that is
being shared with about 300 PCs at a school. The other end is a Alix
2d13. The 2d13 has this config:

---
/etc/hostname.tun0
---
up
!/usr/local/sbin/openvpn --daemon --config /etc/openvpn/client.conf
---

---
/etc/openvpn/client.conf
---
client
float
dev tun0
proto udp
remote w.x.y.z 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt
key /etc/openvpn/client.key
tls-auth /etc/openvpn/ta.key 0
ns-cert-type server
comp-lzo
verb 3
engine cryptodev
cipher aes-128-cbc
---

---
/etc/sysctl.conf
---
kern.usercrypto=1
---

---
iperf on vpn client acting as client
---
$ iperf -i 2 -t 30 -c 192.168.176.1
------------------------------------------------------------
Client connecting to 192.168.176.1, TCP port 5001
TCP window size: 16.9 KByte (default)
------------------------------------------------------------
[  3] local 192.168.176.6 port 4863 connected with 192.168.176.1 port 5001
[ ID] Interval       Transfer     Bandwidth
[  3]  0.0- 2.0 sec  2.62 MBytes  11.0 Mbits/sec
[  3]  2.0- 4.0 sec  3.25 MBytes  13.6 Mbits/sec
[  3]  4.0- 6.0 sec  3.12 MBytes  13.1 Mbits/sec
[  3]  6.0- 8.0 sec  3.12 MBytes  13.1 Mbits/sec
[  3]  8.0-10.0 sec  3.25 MBytes  13.6 Mbits/sec
[  3] 10.0-12.0 sec  3.12 MBytes  13.1 Mbits/sec
[  3] 12.0-14.0 sec  3.25 MBytes  13.6 Mbits/sec
[  3] 14.0-16.0 sec  3.25 MBytes  13.6 Mbits/sec
[  3] 16.0-18.0 sec  3.12 MBytes  13.1 Mbits/sec
[  3] 18.0-20.0 sec  3.12 MBytes  13.1 Mbits/sec
[  3] 20.0-22.0 sec  3.25 MBytes  13.6 Mbits/sec
[  3] 22.0-24.0 sec  3.12 MBytes  13.1 Mbits/sec
[  3] 24.0-26.0 sec  3.25 MBytes  13.6 Mbits/sec
[  3] 26.0-28.0 sec  3.12 MBytes  13.1 Mbits/sec
[  3] 28.0-30.0 sec  3.25 MBytes  13.6 Mbits/sec
[  3]  0.0-30.2 sec  47.4 MBytes  13.2 Mbits/sec
---

---
iperf on vpn client acting as server
---
$ iperf -s
------------------------------------------------------------
Server listening on TCP port 5001
TCP window size: 16.0 KByte (default)
------------------------------------------------------------
[  4] local 192.168.176.6 port 5001 connected with 192.168.176.1 port 13679
[ ID] Interval       Transfer     Bandwidth
[  4]  0.0-30.1 sec  51.8 MBytes  14.4 Mbits/sec
---

Thank you,
James Shupe

Reply via email to