[CentOS] OpenVPN throughput

[J.Witvliet at mindef.nl]

See below... 

-----Original Message-----
From: centos-bounces at centos.org [mailto:centos-bounces at centos.org] On Behalf Of Gordon Messmer
Sent: Saturday, August 21, 2010 12:03 AM
To: CentOS mailing list
Subject: Re: [CentOS] OpenVPN throughput

On 08/20/2010 10:19 AM, Bill Campbell wrote:
>
> Comparisons with gigabit networks seems a pointless given that most 
> VPNs will be used over the Internet which limits bandwidth, how fast 
> is fast enough?

Boris said in his first email that the link between the two networks was
1 Gps.
_______________________________________________

Perhaps a bit late on this thread, but i thought of adding my $0.02 ...

Last year i've been doing some experiments with openvpn.
Just as the O.P. I was curious about sustainable throughput, and was disapointed about the results

To obtain maximum resulst, i did:
- use two rather heavy machines (HP DL380-G6, dual quad core)
- two dedicated 10Gb-nic's
- cross-connect both nics
- DISABLE openvpn-debug (as it is VERY cpu expensive)
- raise MTU to 4K

Bottleneck was (in my case) the openvpn-process, that was running 100% on a single core,
While network was not saturated.

So for max throughput, it is probably strongswan (ipsec) or hw-encryption [or both]

hw

______________________________________________________________________
Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband houdt met risico's verbonden aan het elektronisch verzenden van berichten.

This message may contain information that is not intended for you. If you are not the addressee or if this message was sent to you by mistake, you are requested to inform the sender and delete the message. The State accepts no liability for damage of any kind resulting from the risks inherent in the electronic transmission of messages.