Community discussions

MikroTik App
 
ramirez
Member Candidate
Member Candidate
Topic Author
Posts: 157
Joined: Sun May 12, 2013 9:48 pm

OVPN/CPU max out ?

Tue Dec 15, 2020 1:26 pm

Greetings to all!

I have a OVPN between location A (Map) and location B (Map Lite) . Location A is client and location B is server.

Connection A has an Internet speed of 200/200 and I can only get about 20Mbit at location B during a transfer.

So I figured that this is a CPU problem at location A? And was thinking to purchase a Router OS license and install it on a LattePanda (either on the two following)

Can please someone suggest if the following CPUs will be strong enough to handle encryption to get the full 200/200?

https://www.lattepanda.com/products/1.html

https://www.lattepanda.com/products/lat ... -864s.html

Do I need to replace both MTs or just the one in location A?
 
ramirez
Member Candidate
Member Candidate
Topic Author
Posts: 157
Joined: Sun May 12, 2013 9:48 pm

Re: OVPN/CPU max out ?

Thu Dec 17, 2020 6:41 pm

(Bump)... Anyone ?
 
Sob
Forum Guru
Forum Guru
Posts: 9188
Joined: Mon Apr 20, 2009 9:11 pm

Re: OVPN/CPU max out ?

Thu Dec 17, 2020 8:03 pm

I don't know the answer, but if you already have the device (I'm guessing you have some previous experience with them and you didn't just find random board on internet), it would be best to test it with trial license (it runs unlimited for 24 hours). If you don't have it yet, then remember that x86 RouterOS is not known for supporting all kinds of imaginable hardware, so it's not guaranteed that it will like this. As for the performance, you could look up benchmarks for given CPU and go by that, but OpenVPN in RouterOS is lagging behing in several aspects, so while I think there's support for AES acceleration in IPSec, I'm not sure if it's also true for OpenVPN.

Edit: And just to be sure, even though it's obvious, you can only get 200/200 (with any device) if location B also has 200/200 or more.
 
User avatar
kiler129
Member
Member
Posts: 354
Joined: Tue Mar 31, 2015 4:32 pm
Location: IL, USA
Contact:

Re: OVPN/CPU max out ?

Fri Dec 18, 2020 8:09 am

If you're controlling both endpoints there's really no practical reason to use OVPN. Look at IPSec if you want stability or WireGuard if you want to live on the edge (since it requires ROSv7 which isn't released as stable).
 
gotsprings
Forum Guru
Forum Guru
Posts: 2310
Joined: Mon May 14, 2012 9:30 pm

Re: OVPN/CPU max out ?

Sat Dec 19, 2020 4:23 pm

OpenVPN has not been properly supported by Mikrotik in about 10 years.

Use another protocol.

IPSEC acceleration is included in a bunch of routerboards. To try using that when you can.

Who is online

Users browsing this forum: jaclaz, mkx and 106 guests