• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

PFSense VPN speeds

Joined
Aug 29, 2005
Messages
5,166 (0.99/day)
Location
Whatever my internet protocol shows I guess O.o
System Name Lynni The Great White Dragon in Zen Glass | Lynni-Stick
Processor AMD Ryzen 9 3900X "ZEN2"| Intel Atom X5-Z8300 "Cherry Trail"
Motherboard MSI B450 Gaming Pro Carbono AC | Intel Compute Stick board
Cooling Fractal Design Celsius S24 | Fan xD
Memory Geil Dragon 4x8GB@3000mhz 15-17-17-35 (GWW416GB3000C15DC) | 2GB DDR3-L @ 1600mhz
Video Card(s) Nvidia GTX 1080 Ti FE "Pascal" Hybrid Core/Mem: +130MHz GPU Boost: 2000MHz+ | Intel HD Graphics
Storage OS/Games:Samsung 970 EVO 500GB NVME|Samsung EVO 850 1TB SSD|Data:3xWD Red/Purple 4TB & WD SE 1TB
Display(s) Dell S2417DG 1440p@165hz G-Sync | LG 55UK6100PLB IPS 4K HDR
Case Phantek Eclipse P400 Black/White | Intel Compute Case
Audio Device(s) Audio-Technica A550Z @ Creative Sound Blaster Z (Retail) | Intel HD Audio
Power Supply Seasonic Prime 1200 watt 80Plus Platinum | Generic Intel Power Adapter (3amp)
Mouse Logitech G502 | Logtech MK270 kit
Keyboard Razer Blackwidow Chroma X UK-Logitech G305 | Logitech MK270 kit
Software Win10 Pro SCU UK x64 | Win10 Home SCU x86
Benchmark Scores Time Spy: https://www.3dmark.com/3dm/33868867?
Earlier this week I got a PFSense box home from PCEngine APU2C4 specs: AMD GX-412TC Jaguar 1GHz Quad-Core, 4GB DDR3-1333 RAM, 16GB SSD storage with 3xIntel I211AT ethernet ports and more: https://pcengines.ch/apu2c4.htm


I am using OpenVPN to connect this router to a VPN service I use for personal matters, and I tested with the following settings:

AES-256-GCM | SHA256
AES-128-GCM | SHA1

with these 2 encryption methods I get the same speeds through it like 15/50 Mbit and if I under advanced add these 3 lines:
fast-io
sndbuf 524288
rcvbuf 524288

I reach 80/50Mbit on both encryptions methods above and CPU load maks out at max 20-25% while testing speeds with the VPN what I find weird is that I don't see a higher throughput using AES-128-GCM | SHA1 than with AES-256-GCM | SHA1 and I got told that lowering the encryption method doesn't nessarly means better speeds :(

I am on a 200/200Mbit connection at the moment and I would really like to be able to put some load on this small box and get better vpn throughput and yes I got told that OpenVPN only is a single threaded application so if this is what holds it back I would really like to know what I can use instead.
 
Joined
Nov 20, 2013
Messages
3,910 (1.78/day)
Location
Kiev, Ukraine
System Name WS#1337
Processor Ryzen 5 1600X
Motherboard Gigabyte x470 AORUS Ultra Gamin
Cooling Xigmatek Scylla 240 AIO
Memory 2x8GB Team T-Force Vulkan DDR4-3000
Video Card(s) MSI RTX 2060 Super Armor OC
Storage Adata SX8200 256GB, Sandisk X400 512GB
Display(s) Samsung U24E590D (4K/UHD)
Case Chieftec AL-01B-OP
Audio Device(s) ALC1220
Power Supply SeaSonic SSR-550FX (80+ GOLD)
Mouse Logitech G503
Keyboard Zalman K500 modded (Gateron brown)
Software Windows 10, Ubuntu 18.04 LTS
Joined
Aug 29, 2005
Messages
5,166 (0.99/day)
Location
Whatever my internet protocol shows I guess O.o
System Name Lynni The Great White Dragon in Zen Glass | Lynni-Stick
Processor AMD Ryzen 9 3900X "ZEN2"| Intel Atom X5-Z8300 "Cherry Trail"
Motherboard MSI B450 Gaming Pro Carbono AC | Intel Compute Stick board
Cooling Fractal Design Celsius S24 | Fan xD
Memory Geil Dragon 4x8GB@3000mhz 15-17-17-35 (GWW416GB3000C15DC) | 2GB DDR3-L @ 1600mhz
Video Card(s) Nvidia GTX 1080 Ti FE "Pascal" Hybrid Core/Mem: +130MHz GPU Boost: 2000MHz+ | Intel HD Graphics
Storage OS/Games:Samsung 970 EVO 500GB NVME|Samsung EVO 850 1TB SSD|Data:3xWD Red/Purple 4TB & WD SE 1TB
Display(s) Dell S2417DG 1440p@165hz G-Sync | LG 55UK6100PLB IPS 4K HDR
Case Phantek Eclipse P400 Black/White | Intel Compute Case
Audio Device(s) Audio-Technica A550Z @ Creative Sound Blaster Z (Retail) | Intel HD Audio
Power Supply Seasonic Prime 1200 watt 80Plus Platinum | Generic Intel Power Adapter (3amp)
Mouse Logitech G502 | Logtech MK270 kit
Keyboard Razer Blackwidow Chroma X UK-Logitech G305 | Logitech MK270 kit
Software Win10 Pro SCU UK x64 | Win10 Home SCU x86
Benchmark Scores Time Spy: https://www.3dmark.com/3dm/33868867?
Joined
Nov 20, 2013
Messages
3,910 (1.78/day)
Location
Kiev, Ukraine
System Name WS#1337
Processor Ryzen 5 1600X
Motherboard Gigabyte x470 AORUS Ultra Gamin
Cooling Xigmatek Scylla 240 AIO
Memory 2x8GB Team T-Force Vulkan DDR4-3000
Video Card(s) MSI RTX 2060 Super Armor OC
Storage Adata SX8200 256GB, Sandisk X400 512GB
Display(s) Samsung U24E590D (4K/UHD)
Case Chieftec AL-01B-OP
Audio Device(s) ALC1220
Power Supply SeaSonic SSR-550FX (80+ GOLD)
Mouse Logitech G503
Keyboard Zalman K500 modded (Gateron brown)
Software Windows 10, Ubuntu 18.04 LTS
WireGuard is currently under development, and therefore any installation steps here should be considered as experimental.
But stable enough to be considered for inclusion in 5.2 kernel. Not sure if their FreeBSD port became any better, but so far that's the only decent alternative.

Other than that - cross your fingers and hope that at some point maintainers and the dev. community finally decide to re-write OpenVPN from scratch, cause even on the official website there is a whole page dedicated to shortcomings of current approach and why is it so hard to fix it.
 
Joined
Aug 29, 2005
Messages
5,166 (0.99/day)
Location
Whatever my internet protocol shows I guess O.o
System Name Lynni The Great White Dragon in Zen Glass | Lynni-Stick
Processor AMD Ryzen 9 3900X "ZEN2"| Intel Atom X5-Z8300 "Cherry Trail"
Motherboard MSI B450 Gaming Pro Carbono AC | Intel Compute Stick board
Cooling Fractal Design Celsius S24 | Fan xD
Memory Geil Dragon 4x8GB@3000mhz 15-17-17-35 (GWW416GB3000C15DC) | 2GB DDR3-L @ 1600mhz
Video Card(s) Nvidia GTX 1080 Ti FE "Pascal" Hybrid Core/Mem: +130MHz GPU Boost: 2000MHz+ | Intel HD Graphics
Storage OS/Games:Samsung 970 EVO 500GB NVME|Samsung EVO 850 1TB SSD|Data:3xWD Red/Purple 4TB & WD SE 1TB
Display(s) Dell S2417DG 1440p@165hz G-Sync | LG 55UK6100PLB IPS 4K HDR
Case Phantek Eclipse P400 Black/White | Intel Compute Case
Audio Device(s) Audio-Technica A550Z @ Creative Sound Blaster Z (Retail) | Intel HD Audio
Power Supply Seasonic Prime 1200 watt 80Plus Platinum | Generic Intel Power Adapter (3amp)
Mouse Logitech G502 | Logtech MK270 kit
Keyboard Razer Blackwidow Chroma X UK-Logitech G305 | Logitech MK270 kit
Software Win10 Pro SCU UK x64 | Win10 Home SCU x86
Benchmark Scores Time Spy: https://www.3dmark.com/3dm/33868867?
@silentbogo to be honest, it's not the installation or setup that worries me of this it's more the long term use of how stable and easy it will be to upgrade because my experience with PFSense from work is that installing anything that's not in the package manager won't run proper for a longer period of time specially tried the UniFi controller for Ubiquiti's devices the controller works and suddenly out of no where with no high usage both the PFSense and UniFi Controlle crashes or is just not responding and a reboot doesn't always fix this.
 

bug

Joined
May 22, 2015
Messages
6,710 (4.08/day)
Processor Intel i5-6600k (AMD Ryzen5 3600 in a box, waiting for a mobo)
Motherboard ASRock Z170 Extreme7+
Cooling Arctic Cooling Freezer i11
Memory 2x16GB DDR4 3600 G.Skill Ripjaws V (@3200)
Video Card(s) EVGA GTX 1060 SC
Storage 500GB Samsung 970 EVO, 500GB Samsung 850 EVO, 1TB Crucial MX300 and 3TB Seagate
Display(s) HP ZR24w
Case Raijintek Thetis
Audio Device(s) Audioquest Dragonfly Red :D
Power Supply Seasonic 620W M12
Mouse Logitech G502 Proteus Core
Keyboard G.Skill KM780R
Software Arch Linux + Win10
@silentbogo to be honest, it's not the installation or setup that worries me of this it's more the long term use of how stable and easy it will be to upgrade because my experience with PFSense from work is that installing anything that's not in the package manager won't run proper for a longer period of time specially tried the UniFi controller for Ubiquiti's devices the controller works and suddenly out of no where with no high usage both the PFSense and UniFi Controlle crashes or is just not responding and a reboot doesn't always fix this.
Wait for it to be mainlined first then. Shouldn't be long now.
 

newtekie1

Semi-Retired Folder
Joined
Nov 22, 2005
Messages
26,578 (5.20/day)
Location
Indiana, USA
Processor Intel Core i7 9900K@5.0GHz
Motherboard AsRock Z370 Taichi
Cooling Corsair H115i Pro w/ Noctua NF-A14 Fans
Memory 32GB Corsair DDR4-3000
Video Card(s) ASUS Strix GTX 1080Ti
Storage 500GB Crucial MX500 + 8TB with 1TB SSD Cache
Display(s) QNIX QX2710 1440p@120Hz
Case Fractal Design Define S
Audio Device(s) Onboard is good enough for me
Power Supply eVGA SuperNOVA 1000w G3
Software Windows 10 Pro x64
You have to realize too that the VPN throughput is also going to rely very much on how fast the VPN service can provide to you. And even a lot of paid services struggle to give you more than 50Mbps.
 
Joined
Aug 29, 2005
Messages
5,166 (0.99/day)
Location
Whatever my internet protocol shows I guess O.o
System Name Lynni The Great White Dragon in Zen Glass | Lynni-Stick
Processor AMD Ryzen 9 3900X "ZEN2"| Intel Atom X5-Z8300 "Cherry Trail"
Motherboard MSI B450 Gaming Pro Carbono AC | Intel Compute Stick board
Cooling Fractal Design Celsius S24 | Fan xD
Memory Geil Dragon 4x8GB@3000mhz 15-17-17-35 (GWW416GB3000C15DC) | 2GB DDR3-L @ 1600mhz
Video Card(s) Nvidia GTX 1080 Ti FE "Pascal" Hybrid Core/Mem: +130MHz GPU Boost: 2000MHz+ | Intel HD Graphics
Storage OS/Games:Samsung 970 EVO 500GB NVME|Samsung EVO 850 1TB SSD|Data:3xWD Red/Purple 4TB & WD SE 1TB
Display(s) Dell S2417DG 1440p@165hz G-Sync | LG 55UK6100PLB IPS 4K HDR
Case Phantek Eclipse P400 Black/White | Intel Compute Case
Audio Device(s) Audio-Technica A550Z @ Creative Sound Blaster Z (Retail) | Intel HD Audio
Power Supply Seasonic Prime 1200 watt 80Plus Platinum | Generic Intel Power Adapter (3amp)
Mouse Logitech G502 | Logtech MK270 kit
Keyboard Razer Blackwidow Chroma X UK-Logitech G305 | Logitech MK270 kit
Software Win10 Pro SCU UK x64 | Win10 Home SCU x86
Benchmark Scores Time Spy: https://www.3dmark.com/3dm/33868867?
my vpn provider doesn't have an issue giving me 200/200Mbps far from that, it's just the openvpn in pfsense that's not good enough for that.

I want to use OpenConnect but it doesn't have a package for PFSense and my experience with applications that doesn't have a package in the package manager are that they work fine for some times then suddenly out of no where they don't anymore.

This I tested on different setups from Pentiums, i3, i5 and i7 and some AMD APU's anywhere from 512MB ram to 12GB same deal. Also with HDD's and SSD's.
 
Top