Hi, On 05/01/18 15:06, Simon Matter wrote: > Hi, > >> That would explain it if it always worked that way. >> But I can get 400%+ wire speed from A to B with compressible data, and >> 102% with incompressible data. If I do the same test from B to A or A >> to B, I get those results. If I hop off of that to C, speed goes from >>> 1Gbps to sub-200Mbps. In either case, the data has left the kernel >> space to arrive at "nc", so just simply saying "it's kernel vs user" >> doesn't answer it. > > So if I understand correctly you are able to get wire speed over the > OpenVPN link as long as you don't route traffic further via an other > simple router? > > Maybe you could try those two things: > 1) Disable all LZO compression just to make sure it has nothing to do with > it. > > 2) Run tcpdump/wireshark on B and look in detail how data is moved over > the different tun and ethernet devices. I'm sure you should see something > there at least if you compare it with a run made without OpenVPN.
I agree on this point. If the slowdown comes from here, you should definitely see something. > > BTW, you don't have any iptables rules on any of the boxes, do you? > Good point: iptables/ebtables can kill performances quite fast. Are doing pure routing between the VPN tunnel and the Ethernet interface? Or there is some NAT involved? Cheers, -- Antonio Quartulli
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
