|
Author |
Message |
grc DD-WRT User
Joined: 11 Jul 2018 Posts: 122
|
Posted: Sat Jul 28, 2018 7:08 Post subject: Ipsec speed |
|
I followed Kong´s guide on http://tips.desipro.de/tag/ipsec/ and got it working on Netgear r6300v2, thanks Kong.
My current throughput is about 800 Kbits. I have 100down/6up Mbit cable internet connection. Is it possible to increase the performance? |
|
Back to top |
|
|
Sponsor
|
|
|
Per Yngve Berg DD-WRT Guru
Joined: 13 Aug 2013 Posts: 6870 Location: Romerike, Norway
|
Posted: Sun Jul 29, 2018 9:29 Post subject: |
|
Have you optimised the MTU size?
If the LAN is set to 1500, they don't fit the VPN tunnel because it's smaller because of the overhead. The packet then have to be split in two parts.
traceroute -F <host> 1500
-F disables fragmentation. Reduce size until packet goes through.
ping -s 1500 -M dont <host>
I guess you got a value of 1492. |
|
Back to top |
|
|
grc DD-WRT User
Joined: 11 Jul 2018 Posts: 122
|
Posted: Mon Jul 30, 2018 7:34 Post subject: |
|
Thank you, i will try it later |
|
Back to top |
|
|
grc DD-WRT User
Joined: 11 Jul 2018 Posts: 122
|
Posted: Wed Aug 15, 2018 13:48 Post subject: |
|
i got 1400, but it didn't help. I think it requires a faster CPU |
|
Back to top |
|
|
egc DD-WRT Guru
Joined: 18 Mar 2014 Posts: 12917 Location: Netherlands
|
Posted: Wed Aug 15, 2018 17:38 Post subject: |
|
I have no experience with ipSec, I know that OpenVPN can be somewhat faster.
I have an R6400 which, I think, has the same hardware, with openVPN I get almost 40Mb/s. so even if IpSec is slower you should be able to do much more then you get? _________________ Routers:Netgear R7000, R6400v1, R6400v2, EA6900 (XvortexCFE), E2000, E1200v1, WRT54GS v1.
Install guide R6400v2, R6700v3,XR300:https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=316399
Install guide R7800/XR500: https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=320614
Forum Guide Lines (important read):https://forum.dd-wrt.com/phpBB2/viewtopic.php?t=324087 |
|
Back to top |
|
|
|