what is required to achieve full speed than 20-30mbps?

seandex

is there system requirement to achieve the full 100Mpbs or near? (like thesedays offer from timewarner)
my old thin client pc just upgraded cpu and it went up to 50Mbps! from 20Mbps-30Mbps.
my samsung galaxy smartphone still can't go over 30Mbps limit
if i'm not wrong VPN does not decrease speed if hardwares are not strong enough.
when encrypt, decrypt operation occurs it eventually slows the speed.. that's what i know (could be totally wrong)

so is there such requirements to meet the full speed of the network or near?
if yes, what are the client side hardware spec and server spec?
or is it impossible to break the 50mbps?

Thank you!

The Johan

Uh. Well, encrypting/decrypting takes CPU cycles. If you don't have CPU cycles, then speed suffers. Getting 30Mbps on a phone is pretty good as far as I'm concerned. But you can get around 300Mbps on a desktop machine with modern processor, and a server with modern processor, if you can do about 3GHz on a single core and have AES-NI with default settings on Access Server, for example.

You can get higher speeds if you lower security/encryption.

seandex

novaflash wroteUh. Well, encrypting/decrypting takes CPU cycles. If you don't have CPU cycles, then speed suffers. Getting 30Mbps on a phone is pretty good as far as I'm concerned. But you can get around 300Mbps on a desktop machine with modern processor, and a server with modern processor, if you can do about 3GHz on a single core and have AES-NI with default settings on Access Server, for example.

You can get higher speeds if you lower security/encryption.

Thank you sooo much for the answer,

How to lower the security / encryption? i think i'm using openvpn_as's default. is there easy workarounds?

The Johan

https://docs.openvpn.net/under-the-hood/change-encryption-cipher-in-access-server/

seandex

novaflash wrotehttps://docs.openvpn.net/under-the-hood/change-encryption-cipher-in-access-server/

you are my life saver,
so far i like the result of the 'auth none' and leave cipher as it is

btw, how danger is just auth none and leave cipher on?

many thanks.

The Johan

auth none will probably barely make a difference as it just signs packets and verifies them. Sure, there's some work involved, but not the heavy workload of encryption. So, probably not so useful. The cipher is what does the encryption. That's where you can achieve some change in load on CPU.

seandex

novaflash wroteauth none will probably barely make a difference as it just signs packets and verifies them. Sure, there's some work involved, but not the heavy workload of encryption. So, probably not so useful. The cipher is what does the encryption. That's where you can achieve some change in load on CPU.

i tried DES-CBC wow this is like new world thanks alot!
mind if you could share the minimum or the fastest?
this is whole new experience!