Site-to-Site performance two linux hosts

[deleted]

Hey all. I have a site-to-site setup configured with openvpn. Both the server and the client are using CentOS 6.5 with openssl 1.0.1e and openvpn 2.3.2. It seems the max speed I can achieve is 20MB/s (160Mbps). Performance doesn't change with or without encryption. I have verified that I can scp a file between the two sites using external addresses at 60MB/s (Pipe is 500Mbps between the two sites). I thought for sure that encryption was the bottle neck, but both machines are good hardware with E5-2680 CPU's and AES-NI support.

I have tried increasing the mtu, and all kinds of of mssfix and fragment settings. Honestly I get the best performance from all default settings. Once I start increasing or decreasing the tun-mtu performance decreases.

Am I just hitting a limitation of openvpn? I appreciate the input.

[deleted]

debbie10t wroteThere is a long running (unofficial) debate concerning the perceived performance of OpenVPN connectivity.

I have personally not been able to determine any specific bottleneck; although it seems that System performance(CPU etc), encryption, transport layer (eg. Windows Networking vs FTP) and the performance of the TAP driver (Windows vs Linux) all appear to contribute.

If you have time, try using google to search this forum for things like performance/speed etc.

If you find anything useful you are welcome to comment.

Yea I have read the vast majority of them. They are all quite old now so I wasn't sure if this has been addressed. I guess ipsec is our only option.

maikcat

btw did you also read this:

https://community.openvpn.net/openvpn/wiki/Gigabit_Networks_Linux

https://forums.openvpn.net/topic8723.html

Michael.

maikcat

you welcome debbie 😃

Michael.