NETGEAR R7800 X4S VPN SPEED

Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Atheros WiSOC based Hardware
Goto page Previous  1, 2
Author Message
mrjcd
DD-WRT Guru


Joined: 31 Jan 2015
Posts: 5322
Location: Texas

PostPosted: Sun Sep 17, 2017 14:53    Post subject: Reply with quote
Per Yngve Berg wrote:
Does OpenVPN use the Crypto Engine in the SOC?

AFAIK (EA8500) openssl never calls on a hardware crypto engine
Sponsor
mrjcd
DD-WRT Guru


Joined: 31 Jan 2015
Posts: 5322
Location: Texas

PostPosted: Sun Sep 17, 2017 19:40    Post subject: Reply with quote
locking CPU to Max does make a difference with the newer openssl on the EA8500
Code:
### r33345 ### CPU default scaling freq
OpenSSL 1.1.0f
aes-128-cbc
Doing aes-128 cbc for 3s on 16 size blocks: 7590952 aes-128 cbc's in 2.99s
Doing aes-128 cbc for 3s on 64 size blocks: 2183223 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 256 size blocks: 567130 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 1024 size blocks: 142528 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 8192 size blocks: 17868 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 16384 size blocks: 8920 aes-128 cbc's in 3.00s
type
aes-128 cbc      40620.48k    46575.42k    48395.09k    48649.56k    48791.55k    48715.09k

aes-256-cbc
Doing aes-256 cbc for 3s on 16 size blocks: 6250272 aes-256 cbc's in 2.99s
Doing aes-256 cbc for 3s on 64 size blocks: 1725018 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 256 size blocks: 442600 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 1024 size blocks: 111542 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 8192 size blocks: 13923 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 16384 size blocks: 6916 aes-256 cbc's in 3.00s
type
aes-256 cbc      33446.27k    36800.38k    37768.53k    38073.00k    38019.07k    37770.58k

rsa2048
Doing 2048 bit private rsa's for 10s: 1050 2048 bit private RSA's in 10.00s
Doing 2048 bit public rsa's for 10s: 48474 2048 bit public RSA's in 9.99s

                  sign    verify    sign/s verify/s
rsa 2048 bits 0.009524s 0.000206s    105.0   4852.3


### r33345 ### CPU locked @1400 MHz
aes-128-cbc
Doing aes-128 cbc for 3s on 16 size blocks: 7941199 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 64 size blocks: 2173531 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 256 size blocks: 564360 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 1024 size blocks: 143520 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 8192 size blocks: 17903 aes-128 cbc's in 3.00s
Doing aes-128 cbc for 3s on 16384 size blocks: 8947 aes-128 cbc's in 3.00s
type       
aes-128 cbc      42353.06k    46368.66k    48158.72k    48988.16k    48887.13k    48862.55k

aes-256-cbc
Doing aes-256 cbc for 3s on 16 size blocks: 6553562 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 64 size blocks: 1741815 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 256 size blocks: 444154 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 1024 size blocks: 111680 aes-256 cbc's in 3.00s
Doing aes-256 cbc for 3s on 8192 size blocks: 13996 aes-256 cbc's in 2.99s
Doing aes-256 cbc for 3s on 16384 size blocks: 7003 aes-256 cbc's in 3.00s
 type     
aes-256 cbc      34952.33k    37158.72k    37901.14k    38120.11k    38346.23k    38245.72k

rsa2048
Doing 2048 bit private rsa's for 10s: 1058 2048 bit private RSA's in 10.00s
Doing 2048 bit public rsa's for 10s: 49115 2048 bit public RSA's in 10.00s

                  sign    verify    sign/s verify/s
rsa 2048 bits 0.009452s 0.000204s    105.8   4911.5


---
The older openssl 1.0.2l is still faster Razz
sploit
DD-WRT User


Joined: 16 Apr 2016
Posts: 305
Location: California

PostPosted: Tue Sep 19, 2017 5:10    Post subject: Update Reply with quote
Hooked up Brand New Shiny R7800 today that I ordered for testing VPN Speeds. Hit a max of 107 Mbps on the R7800 today at AES-128-CBC. The connection I am testing on is a 110Mbps Connection and I will be testing the 200Mbps Connection tomorrow.

Setup

VPN Service: PrivateInternetAccess to SiliconValley

CPU Clock Speed is at 1725 Mhz Maxed with the Tweak...

SFE: Off

Encryption: AES-128-CBC

Additional Config Tweeks
sndbuf: 600000
rcvbuf: 600000
fast-io





My Thoughts

Not too Shabby... It's outperforming the EA8500 for sure, but for the price of the R7800 I am not impressed. Average cost is about $220 for a R7800 and average for a used or refurb EA8500 is $70

I have hit 90Mbps on a EA8500 with AES-128-CBC

However, in no way does this come close to the wrt3200acm vpn speeds and it barely competes with the Linksys WRT1900ACS.

Out of all the routers, for the bang for the buck, the EA8500 has impressed me the most.

_________________
My Karma ran over your Dogma
SploitWorks Custom Flashed Routers
Xeon2k8
DD-WRT Guru


Joined: 11 Feb 2016
Posts: 1281

PostPosted: Tue Sep 19, 2017 14:13    Post subject: Re: Update Reply with quote
sploit wrote:
Hooked up Brand New Shiny R7800 today that I ordered for testing VPN Speeds. Hit a max of 107 Mbps on the R7800 today at AES-128-CBC. The connection I am testing on is a 110Mbps Connection and I will be testing the 200Mbps Connection tomorrow.

Setup

VPN Service: PrivateInternetAccess to SiliconValley

CPU Clock Speed is at 1725 Mhz Maxed with the Tweak...

SFE: Off

Encryption: AES-128-CBC

Additional Config Tweeks
sndbuf: 600000
rcvbuf: 600000
fast-io





My Thoughts

Not too Shabby... It's outperforming the EA8500 for sure, but for the price of the R7800 I am not impressed. Average cost is about $220 for a R7800 and average for a used or refurb EA8500 is $70

I have hit 90Mbps on a EA8500 with AES-128-CBC

However, in no way does this come close to the wrt3200acm vpn speeds and it barely competes with the Linksys WRT1900ACS.

Out of all the routers, for the bang for the buck, the EA8500 has impressed me the most.

How can you even conclude that, if you don't even know what the real max speed is, since the R7800 maxing out your 110mbps line?

_________________
R6400v2 (boardID:30) - Kong 36480 running since 03/09/18 - (AP - DNSMasq - AdBlocking - QoS)
R7800 - BS 31924 running since 05/26/17 - (AP - OpenVPN Client - DNSMasq - AdBlocking - QoS)
R7000 - BS 30771 running since 12/16/16 - (AP - NAS - FTP - SMB - OpenVPN Server - Transmission - DDNS - DNSMasq - AdBlocking - QoS)
R6250 - BS 29193 running since 03/20/16 - (AP - NAS - FTP - SMB - DNSMasq - AdBlocking)
joey200
DD-WRT Novice


Joined: 10 May 2018
Posts: 5

PostPosted: Thu May 10, 2018 20:31    Post subject: Amazing Reply with quote
WOW, I went from 40mbits to 101mbits with the first performance solution, which maxes out my broadband.

I wonder what the R7800 can actually do?

Thanks...! Very Happy Very Happy Very Happy Very Happy
sweatbee
DD-WRT User


Joined: 17 Jan 2018
Posts: 57
Location: Georgia, USA

PostPosted: Sat May 12, 2018 9:40    Post subject: Reply with quote
I normally average 40 to 50Mbps on my PIA connection (sometimes less and sometimes more).

With this script I hit 110Mbps down and 11Mbps up on my 100/10 Comcast service using AES-128 CBC.

_________________
R7800 v3.0-r44251 std (08/27/20)
Private network eth1 ath0 ath1 protected by PIA Openvpn with PBR
Guest network on br1 with bridged VLAN and VAPs for IOT devices (Roku's, Amazon Echos, smart switches, etc.) and guest.
Noob still finding my way.
dareino
DD-WRT User


Joined: 06 Apr 2018
Posts: 70

PostPosted: Sun May 27, 2018 20:49    Post subject: Re: Update Reply with quote
sploit wrote:
Hooked up Brand New Shiny R7800 today that I ordered for testing VPN Speeds. Hit a max of 107 Mbps on the R7800 today at AES-128-CBC. The connection I am testing on is a 110Mbps Connection and I will be testing the 200Mbps Connection tomorrow.

Setup

VPN Service: PrivateInternetAccess to SiliconValley

CPU Clock Speed is at 1725 Mhz Maxed with the Tweak...

SFE: Off

Encryption: AES-128-CBC

Additional Config Tweeks
sndbuf: 600000
rcvbuf: 600000
fast-io





My Thoughts

Not too Shabby... It's outperforming the EA8500 for sure, but for the price of the R7800 I am not impressed. Average cost is about $220 for a R7800 and average for a used or refurb EA8500 is $70

I have hit 90Mbps on a EA8500 with AES-128-CBC

However, in no way does this come close to the wrt3200acm vpn speeds and it barely competes with the Linksys WRT1900ACS.

Out of all the routers, for the bang for the buck, the EA8500 has impressed me the most.


Wait, so you are running your router at 1725ghz 24/7?
I noticed when I ran the command, my cpu was pegged at max but after the reboot (krait) its back to normal.
And that command needs to be always in the startup script?
thxs
d
Xeon2k8
DD-WRT Guru


Joined: 11 Feb 2016
Posts: 1281

PostPosted: Sun May 27, 2018 21:33    Post subject: Reply with quote
If you want it always on the yes you need to put it in startup. It adds ~3C more so it's nothing.
_________________
R6400v2 (boardID:30) - Kong 36480 running since 03/09/18 - (AP - DNSMasq - AdBlocking - QoS)
R7800 - BS 31924 running since 05/26/17 - (AP - OpenVPN Client - DNSMasq - AdBlocking - QoS)
R7000 - BS 30771 running since 12/16/16 - (AP - NAS - FTP - SMB - OpenVPN Server - Transmission - DDNS - DNSMasq - AdBlocking - QoS)
R6250 - BS 29193 running since 03/20/16 - (AP - NAS - FTP - SMB - DNSMasq - AdBlocking)
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 5773
Location: Romerike, Norway

PostPosted: Sun May 27, 2018 21:38    Post subject: Reply with quote
How have you distributed the processes among the cores?

LAN, WAN and VPN
dareino
DD-WRT User


Joined: 06 Apr 2018
Posts: 70

PostPosted: Mon May 28, 2018 2:02    Post subject: Reply with quote
I have only moved the WAN to core 0 via the smp_affinity command. I am getting almost the entire bandwidth from my provider using this tweak. I have PS Vue and no lag especially with sports,,,,I am running QOS and all seems to be good.I do have SFE on but not sure if its beneficial since I have a 100/5 Mb connection. Can you or others suggest some additional tweaks?
thxs
d
Xeon2k8
DD-WRT Guru


Joined: 11 Feb 2016
Posts: 1281

PostPosted: Mon May 28, 2018 5:48    Post subject: Reply with quote
dareino wrote:
I have only moved the WAN to core 0 via the smp_affinity command. I am getting almost the entire bandwidth from my provider using this tweak. I have PS Vue and no lag especially with sports,,,,I am running QOS and all seems to be good.I do have SFE on but not sure if its beneficial since I have a 100/5 Mb connection. Can you or others suggest some additional tweaks?
thxs
d

Governor and IRQ tweaks are the only ones proven to have impact. SFE for your bandwidth is useless plus QoS downstream won't work with it enabled.

_________________
R6400v2 (boardID:30) - Kong 36480 running since 03/09/18 - (AP - DNSMasq - AdBlocking - QoS)
R7800 - BS 31924 running since 05/26/17 - (AP - OpenVPN Client - DNSMasq - AdBlocking - QoS)
R7000 - BS 30771 running since 12/16/16 - (AP - NAS - FTP - SMB - OpenVPN Server - Transmission - DDNS - DNSMasq - AdBlocking - QoS)
R6250 - BS 29193 running since 03/20/16 - (AP - NAS - FTP - SMB - DNSMasq - AdBlocking)
savagepagan
DD-WRT User


Joined: 27 Apr 2010
Posts: 55

PostPosted: Sun Jun 10, 2018 13:39    Post subject: Reply with quote
dareino wrote:
I have only moved the WAN to core 0 via the smp_affinity command. I am getting almost the entire bandwidth from my provider using this tweak. I have PS Vue and no lag especially with sports,,,,I am running QOS and all seems to be good.I do have SFE on but not sure if its beneficial since I have a 100/5 Mb connection. Can you or others suggest some additional tweaks?
thxs
d

How did you add smp_affinity command?


Last edited by savagepagan on Sun Jun 10, 2018 14:17; edited 1 time in total
Per Yngve Berg
DD-WRT Guru


Joined: 13 Aug 2013
Posts: 5773
Location: Romerike, Norway

PostPosted: Sun Jun 10, 2018 14:11    Post subject: Reply with quote
SFE never have any impact with VPN running on the router.
dareino
DD-WRT User


Joined: 06 Apr 2018
Posts: 70

PostPosted: Sun Jun 10, 2018 15:35    Post subject: Reply with quote
savagepagan wrote:
dareino wrote:
I have only moved the WAN to core 0 via the smp_affinity command. I am getting almost the entire bandwidth from my provider using this tweak. I have PS Vue and no lag especially with sports,,,,I am running QOS and all seems to be good.I do have SFE on but not sure if its beneficial since I have a 100/5 Mb connection. Can you or others suggest some additional tweaks?
thxs
d

How did you add smp_affinity command?


echo 2 > /proc/irq/255/smp_affinity
echo 2 > /proc/irq/258/smp_affinity
mrneilypops
DD-WRT Novice


Joined: 25 Jun 2019
Posts: 1

PostPosted: Wed Jun 26, 2019 17:42    Post subject: Reply with quote
This has been a great find!
200/100 fibre
My speeds have increased from 40/40 to 110/100 using TorGuard VPN

Forgive the newb questions;
1. How do I set SFE: Off as per earlier comment?
2. Is this setting any advantage to a speed increase?

I found that AES-128-GCM gave me the fastest speeds.
Increasing the sndbuf and rcvbuf from default 393216 did not seem to make a difference???

Thanks again. Cool
Goto page Previous  1, 2 Display posts from previous:    Page 2 of 2
Post new topic   Reply to topic    DD-WRT Forum Forum Index -> Atheros WiSOC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum