Throughput of OpenVPN tunel
Posted: Sat Feb 20, 2016 9:15 pm
Hello. I'm new here, but I hope to find some help.
I have two networks , one with RB450G (let's call int Net1), another with RB750GL (let's call it Net2). Net1 is conected to the Internet with an assymetic 30/3 Mbit link. Net2 is connected via a symmetric 2Gbit link, which is higher than RB's performance. Both neworks have public addresses at router's external enterfaces and use NAT for hosts in local networks. I want to connect both with the VPN connection to ease access to resources.
Using this tutorial http://wiki.mikrotik.com/wiki/OpenVPN I have successfully created an OpenVPN tunnel between Net1 and Net2. It works. But it is slooowww... Consider traffic from Net2 to Net1. If I transfer files directly (not using VPN), I'm able to obtain 30Mbit limit every time. But if I use OpenVPN connection, the bandwidth is limited to 10Mbit. I thought, that this is due to processors' performance - but processor usage during transfer is 33% on 450G anf 44% on 750GL. So it doesn't seem to be the point here.
I have found this page: http://rickfreyconsulting.com/mikrotik-vpns/ which says, that I should expect bandwidth drop here. But it also says, that I should obtain much better throughput using IPsec tunel. So, using this tutorial http://wiki.mikrotik.com/wiki/Manual:IP/IPsec I created an IPsec tunel, which also works. But it is even slower...
I even tried to use the tunel without encoding (cipher=none), but it changes nothing.
So... what may be the problem here? Can I somehow get over the 10Mbit limit?
[EDIT]
OK. It seems, that the table in the http://rickfreyconsulting.com/mikrotik-vpns/ seems not valid. I have switched to PPtP (using http://wiki.mikrotik.com/wiki/Manual:Interface/PPTP) and I have throughput 29Mbit, which is very fine for me.
I have two networks , one with RB450G (let's call int Net1), another with RB750GL (let's call it Net2). Net1 is conected to the Internet with an assymetic 30/3 Mbit link. Net2 is connected via a symmetric 2Gbit link, which is higher than RB's performance. Both neworks have public addresses at router's external enterfaces and use NAT for hosts in local networks. I want to connect both with the VPN connection to ease access to resources.
Using this tutorial http://wiki.mikrotik.com/wiki/OpenVPN I have successfully created an OpenVPN tunnel between Net1 and Net2. It works. But it is slooowww... Consider traffic from Net2 to Net1. If I transfer files directly (not using VPN), I'm able to obtain 30Mbit limit every time. But if I use OpenVPN connection, the bandwidth is limited to 10Mbit. I thought, that this is due to processors' performance - but processor usage during transfer is 33% on 450G anf 44% on 750GL. So it doesn't seem to be the point here.
I have found this page: http://rickfreyconsulting.com/mikrotik-vpns/ which says, that I should expect bandwidth drop here. But it also says, that I should obtain much better throughput using IPsec tunel. So, using this tutorial http://wiki.mikrotik.com/wiki/Manual:IP/IPsec I created an IPsec tunel, which also works. But it is even slower...
I even tried to use the tunel without encoding (cipher=none), but it changes nothing.
So... what may be the problem here? Can I somehow get over the 10Mbit limit?
[EDIT]
OK. It seems, that the table in the http://rickfreyconsulting.com/mikrotik-vpns/ seems not valid. I have switched to PPtP (using http://wiki.mikrotik.com/wiki/Manual:Interface/PPTP) and I have throughput 29Mbit, which is very fine for me.