Re: [pfSense] How much bandwidth is used in an idle OpenVPN connection using 2048 bit encryption?

2011-09-25 Thread Bruce B
Thanks. That's very good info. I think I can live with that. Your info gives
me a good sense of go ahead with it and you will be safe but plan ahead for
hardware and bandwidth needed.

I will be creating a full notification system so I can be aware of the
systems when they go down. These are all phone services so it's important to
keep it all under radar the whole time.

-Bruce



On Sat, Sep 24, 2011 at 6:57 PM, Seth Mos seth@dds.nl wrote:

 The amount can be round off to the nearest 0. The number you ise for the
 actual encryption is large but does not directly correlate to the size of
 the idle traffic.

 The initial handshake is far more involved. If you enable keepalive you
 will always have a steady stream. On my work ipsec cluster with 350 nodes
 that ping to keep alive it is a few hundred kbit consistenly.

 I once calculated that a average site did 500 mb a month just on keep alive
 traffic.

 Regards,
 Seth

 typed on a tiny touchscreen, why exactly?

 Bruce B bruceb...@gmail.comschreef:

 Hi everyone,
 
 I am looking to connect all my pfsense boxes to one single box for better
 administration and ease of access. I am looking to have every client
 pfsense
 do an openvpn tunnel into my main pfSense box. I am using all Alix
 hardware.
 However, the client pfsense boxes are sometimes not very good with
 bandwidth
 and I don't want to spend the client bandwidth on OpenVPN specially when
 it's idel.
 
 I understand that even in idle mode there is traffic in between to keep
 the
 connection solid. Can someone tell exactly how much bandwidth is wasted or
 consumed if I keep a 24/7 connection?
 
 Thanks,
 Bruce
 
 ___
 List mailing list
 List@lists.pfsense.org
 http://lists.pfsense.org/mailman/listinfo/list
 ___
 List mailing list
 List@lists.pfsense.org
 http://lists.pfsense.org/mailman/listinfo/list

___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] How much bandwidth is used in an idle OpenVPN connection using 2048 bit encryption?

2011-09-24 Thread Chris Buechler
On Sat, Sep 24, 2011 at 5:34 PM, Bruce B bruceb...@gmail.com wrote:
 Hi everyone,
 I am looking to connect all my pfsense boxes to one single box for better
 administration and ease of access. I am looking to have every client pfsense
 do an openvpn tunnel into my main pfSense box. I am using all Alix hardware.
 However, the client pfsense boxes are sometimes not very good with bandwidth
 and I don't want to spend the client bandwidth on OpenVPN specially when
 it's idel.
 I understand that even in idle mode there is traffic in between to keep the
 connection solid. Can someone tell exactly how much bandwidth is wasted or
 consumed if I keep a 24/7 connection?

Virtually nothing, 4 bytes every 10 seconds. Not enough to even be a
consideration.
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list


Re: [pfSense] How much bandwidth is used in an idle OpenVPN connection using 2048 bit encryption?

2011-09-24 Thread Chris Buechler
On Sat, Sep 24, 2011 at 6:46 PM, Chris Buechler c...@pfsense.org wrote:
 On Sat, Sep 24, 2011 at 5:34 PM, Bruce B bruceb...@gmail.com wrote:
 Hi everyone,
 I am looking to connect all my pfsense boxes to one single box for better
 administration and ease of access. I am looking to have every client pfsense
 do an openvpn tunnel into my main pfSense box. I am using all Alix hardware.
 However, the client pfsense boxes are sometimes not very good with bandwidth
 and I don't want to spend the client bandwidth on OpenVPN specially when
 it's idel.
 I understand that even in idle mode there is traffic in between to keep the
 connection solid. Can someone tell exactly how much bandwidth is wasted or
 consumed if I keep a 24/7 connection?

 Virtually nothing, 4 bytes every 10 seconds. Not enough to even be a
 consideration.


Sorry, that doesn't include the IP and UDP headers, 44 bytes total.
___
List mailing list
List@lists.pfsense.org
http://lists.pfsense.org/mailman/listinfo/list