I could really use some advice from some more experienced people.
Situation is I have a OpenVPN server on windows in Azure and a Ubiquiti Edgerouter X on a site with the below OpenVPN tunnel between them. The traffic inside the tunnel is going to be BACnet which is all UDP which is why I've selected the TCP tunnel (for loss reasons).
During iperf UDP I'm not seeing the ERX CPU spike past 2% in the GUI. The TCP test sees the CPU reach 21%. Does not seem to be a CPU limitation of the ERX, any idea where my bottleneck is and what I should do about it?
Office commercial ISP tests out at 93.1Mbps download / 86.9Mbps upload Latency: 7 ms for the piece this is allowed to use. Azure says it was 378.2Mbps download / 218.8Mbps upload Latency: 5 ms on this occasion.
C:\Users\me\Desktop\iperf-3.1.3-win32>iperf3.exe -c 10.8.0.1
Connecting to host 10.8.0.1, port 5201
[ 4] local 10.0.1.103 port 54438 connected to 10.8.0.1 port 5201
[ ID] Interval Transfer Bandwidth
[ 4] 0.00-1.02 sec 1.42 MBytes 11.7 Mbits/sec
[ 4] 1.02-2.01 sec 1.66 MBytes 14.0 Mbits/sec
[ 4] 2.01-3.02 sec 1.60 MBytes 13.4 Mbits/sec
[ 4] 3.02-4.02 sec 1.60 MBytes 13.4 Mbits/sec
[ 4] 4.02-5.02 sec 1.66 MBytes 13.9 Mbits/sec
[ 4] 5.02-6.01 sec 1.60 MBytes 13.4 Mbits/sec
[ 4] 6.01-7.01 sec 1.60 MBytes 13.5 Mbits/sec
[ 4] 7.01-8.01 sec 1.60 MBytes 13.5 Mbits/sec
[ 4] 8.01-9.02 sec 1.60 MBytes 13.3 Mbits/sec
[ 4] 9.02-10.00 sec 1.72 MBytes 14.7 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bandwidth
[ 4] 0.00-10.00 sec 16.1 MBytes 13.5 Mbits/sec sender
[ 4] 0.00-10.00 sec 16.1 MBytes 13.5 Mbits/sec receiver
iperf Done.
C:\Users\me\Desktop\iperf-3.1.3-win32>iperf3.exe -c 10.8.0.1 -u
Connecting to host 10.8.0.1, port 5201
[ 4] local 10.0.1.103 port 57366 connected to 10.8.0.1 port 5201
[ ID] Interval Transfer Bandwidth Total Datagrams
[ 4] 0.00-1.01 sec 128 KBytes 1.04 Mbits/sec 16
[ 4] 1.01-2.01 sec 128 KBytes 1.05 Mbits/sec 16
[ 4] 2.01-3.01 sec 128 KBytes 1.05 Mbits/sec 16
[ 4] 3.01-4.01 sec 128 KBytes 1.05 Mbits/sec 16
[ 4] 4.01-5.01 sec 128 KBytes 1.05 Mbits/sec 16
[ 4] 5.01-6.01 sec 128 KBytes 1.05 Mbits/sec 16
[ 4] 6.01-7.01 sec 128 KBytes 1.05 Mbits/sec 16
[ 4] 7.01-8.01 sec 128 KBytes 1.05 Mbits/sec 16
[ 4] 8.01-9.01 sec 128 KBytes 1.05 Mbits/sec 16
[ 4] 9.01-10.01 sec 128 KBytes 1.05 Mbits/sec 16
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval Transfer Bandwidth Jitter Lost/Total Datagrams
[ 4] 0.00-10.01 sec 1.25 MBytes 1.05 Mbits/sec 19.657 ms 0/159 (0%)
[ 4] Sent 159 datagrams
iperf Done.
Relevant lines from OpenVPN server config
### Connection info
proto tcp-server
port 1194
mode server
### encryption info
tls-server
remote-cert-eku "TLS Web Client Authentication"
cipher AES-256-CBC
dh "dh4096.pem"
### authentication
tls-auth "ta.key" 0 # This file is secret
### Compression "compress" new standard,
# lz4 best performance, lzo backwards compatibility
# Seems ER does not support new command or lz4
;compress lz4
comp-lzo
