On Wed, Jun 21, 2006 at 06:49:09PM +0200, Dries Schellekens wrote: > Bihlmaier Andreas wrote: > > >I use "iperf -w 256k" for testing purposes. > >The speed between hosts/router using their real IPs (-B 10.0.0.*) is > >about 70-80 Mb/s. > > > >~22 Mb/s between host1 and host2 using their VPN IPs. > > > >Hope this made some stuff more clear. > > > >Thanks everyone for helping, I hope this can be fixed. > > What speed do you get when using ssh/sftp?
direct scp (without vpn): 100% 86MB 6.6MB/s 00:13 via vpn: 100% 86MB 2.9MB/s 00:30 >You can disable the userland support of the hardware accelerator using >sysctl kern.usercrypto=0 to see if it makes a big difference. Well, it does make a huge difference for "openssl speed", but none for IPSEC: kern.usercrypto=0 aes-128-cbc 16509.92k 18243.74k 18760.55k 18931.63k 18977.59k kern.usercrypto=1 aes-128-cbc 51475.06k 184199.05k 497290.91k 831042.14k 1033285.89k Regards, ahb
