Re: [Openvpn-users] Expected transfer speed LAN-LAN using OpenVPN?
On Mon, 21 Feb 2022 13:05:17 +, André via Openvpn-users wrote: >Hi, > >According to >"RMerlin Asuswrt-Merlin dev" the Asus RT-AC-86U can "hit 200 Mbps of OpenVPN >throughput". > >"LouisvilleUK" states "I'm getting full 200 down throughput with PrivateTunnel >VPN using AES-128-GCM on the RT-AC86U". > > >https://www.snbforums.com/threads/openvpn-performance-of-the-rt-ac86u.41217/page-2 > I am running OpenVPN 2.4.7 on the server, what ASUS RT-AC68U or RT-AC86U are running I don't know... So can I set the following in the server side ccd config for the ASUSrouter client and then the router's OpenVPN client will adhere to the setting? #Set different cipher for the ASUS router client cipher AES-128-GCM push "cipher AES-128-GCM" The full ccd file looks like this in that case: iroute 192.168.117.0 255.255.255.0 #Disable compression and push it to the client comp-lzo no push "comp-lzo no" #Set different cipher for the ASUS router client cipher AES-128-GCM push "cipher AES-128-GCM" Will this also work on the older RT-AC68U router? I.e. should I wait until I have replaced the router on the remote LAN? Right now the cipher line in the main server.conf and client ovpn files looks like this: cipher AES-256-CBC Is this the culprit, being 256 rather than 128??? I do not know what is the difference between GCM and CBC... -- Bo Berglund Developer in Sweden ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] Expected transfer speed LAN-LAN using OpenVPN?
Hi, According to "RMerlin Asuswrt-Merlin dev" the Asus RT-AC-86U can "hit 200 Mbps of OpenVPN throughput". "LouisvilleUK" states "I'm getting full 200 down throughput with PrivateTunnel VPN using AES-128-GCM on the RT-AC86U". https://www.snbforums.com/threads/openvpn-performance-of-the-rt-ac86u.41217/page-2 Sent with ProtonMail Secure Email. --- Original Message --- Op maandag 21 februari 2022 om 09:55 schreef Jan Just Keijser : > For the record: > > On 20/02/22 22:43, Bo Berglund wrote: > > > On Sun, 20 Feb 2022 21:54:44 +0100, Gert Doering g...@greenie.muc.de wrote: > > > > [...] > > > That depends on the CPU in that box, and the SSL library in use. > > > > I am considering exchanging the remote router for a newer model (Asus > > RT-AC86U) > > > > with more computing power... > > > > > AES-256-GCM is extremely fast on CPUs that have AES-NI support (usually > > > > > > "Intel and AMD"). cipher chacha20-poly1305 is fast on some ARM families > > > > > > that have hardware support for that cipher. > > > > > > I don't know what CPU is built into these Asus routers > > Both routers are ARM based and you should not expect terrific > > performance when using AES-GCM. > > Asus RT-AC-68U: > > This router incorporates Broadcom's new BCM4709 Wi-Fi chipset, the > > cornerstone of which is a 1GHz, dual-core ARM Cortex A9 processor > > (from > > https://www.techradar.com/reviews/pc-mac/networking-and-wi-fi/modem-routers/asus-rt-ac68u-1262664/review) > > Asus RT-AC-86U: > > It is powered by Broadcom BCM4906 @ 1.8 GHz chipset, 512 MB RAM and > > 256 MB flash > > (from https://routerchart.com/asus/asus-rt-ac86u-rt-ac86u-369 and it > > seems to be 5 yrs old already; however the Asus website lists the > > RT-AX-86U and it also uses a dual core 1.8 GHz CPU). > > Expect output to be up to 1.8 times faster with the 86U. > > HTH, > > JJK > > ___ > > Openvpn-users mailing list > > Openvpn-users@lists.sourceforge.net > > https://lists.sourceforge.net/lists/listinfo/openvpn-users ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
Re: [Openvpn-users] Expected transfer speed LAN-LAN using OpenVPN?
For the record: On 20/02/22 22:43, Bo Berglund wrote: On Sun, 20 Feb 2022 21:54:44 +0100, Gert Doering wrote: [...] That depends on the CPU in that box, and the SSL library in use. I am considering exchanging the remote router for a newer model (Asus RT-AC86U) with more computing power... AES-256-GCM is extremely fast on CPUs that have AES-NI support (usually "Intel and AMD"). cipher chacha20-poly1305 is fast on some ARM families that have hardware support for that cipher. I don't know what CPU is built into these Asus routers Both routers are ARM based and you should not expect terrific performance when using AES-GCM. Asus RT-AC-68U: This router incorporates Broadcom's new BCM4709 Wi-Fi chipset, the cornerstone of which is a 1GHz, dual-core ARM Cortex A9 processor (from https://www.techradar.com/reviews/pc-mac/networking-and-wi-fi/modem-routers/asus-rt-ac68u-1262664/review) Asus RT-AC-86U: It is powered by Broadcom BCM4906 @ 1.8 GHz chipset, 512 MB RAM and 256 MB flash (from https://routerchart.com/asus/asus-rt-ac86u-rt-ac86u-369 and it seems to be 5 yrs old already; however the Asus website lists the RT-AX-86U and it *also* uses a dual core 1.8 GHz CPU). Expect output to be up to 1.8 times faster with the 86U. HTH, JJK ___ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users