Community discussions

MikroTik App
 
sloop
just joined
Topic Author
Posts: 7
Joined: Mon Jun 05, 2006 12:54 am

CPU usage with ipsec

Wed Nov 23, 2011 3:57 pm

Hello,

I have a RB750 unit with an IPSec tunnel. When downloading a file across the IPSec tunnel, I am getting a max speed of 200 KB/sec at which point the CPU usage is around 100% on the RB750.

Winbox shows that its running at 400 MHz.

IPSec settings. auth algorithm: sha1 encryption algorithm: 3des

I was expecting greater throughput, is this typical?
 
jandafields
Forum Guru
Forum Guru
Posts: 1515
Joined: Mon Sep 19, 2005 6:12 pm

Re: CPU usage with ipsec

Wed Nov 23, 2011 7:21 pm

Hello,

I have a RB750 unit with an IPSec tunnel. When downloading a file across the IPSec tunnel, I am getting a max speed of 200 KB/sec at which point the CPU usage is around 100% on the RB750.

Winbox shows that its running at 400 MHz.

IPSec settings. auth algorithm: sha1 encryption algorithm: 3des

I was expecting greater throughput, is this typical?
On this post http://forum.mikrotik.com/viewtopic.php?f=3&t=42868 someone suggested NOT using port1. Maybe try that... but realize that the 750 is a low power unit... it won't have great ipsec performance.
 
huntah
Member Candidate
Member Candidate
Posts: 291
Joined: Tue Sep 09, 2008 3:24 pm

Re: CPU usage with ipsec

Thu Nov 24, 2011 12:55 am

Change from SHA1 to MD5 you will get much better performance..
I thnik that SHA1 implementation is bad or way more complex than MD5.

When I changed my IPSEC tunnels to MD5 I got much better performance (from 2Mbit to 10mbit!).
I am using 433AH which runs at 680 MHz..