MikroTik

I noticed that 433AH is actualy slower than RB532A when doing AES encrypted IPSec VPN tunnel. I also noticed that (discontinued) RB333 is 2-3 times faster with AES than RB532A.

I would like to know about IPSec performance of other RouterBoards especily RB600. Are there ANY official documents about IPSec performance benchmarks for different RouterBoards?

How did you tested IPSec on all boards ?
Do you use the same configurution ?
Is it possible to get configuration from your routers ?

All RBs were netinstalled from the scratch. AES-256 encryption was used for encryption and SHA auth for both phases with modp1024 PFS and DH groups.

laptop1--(eth1)--RB532--(eth2)---crossover_UTP---(eth2)--RB532--(eth1)--laptop2

I ran iperf, chariot and Bandwidth test within both RB and got similar results.

Any update to this? I am also very interested in IPSEC performance...

Any updates with regards to IPSec performance on the various Routerboard models?

What is your configuration for IPSec?
What are the results you got?

Hi,

I had no Routerboard at that time, but I do now.

I have a Watchguard Firebox II in the other end and I get about 5mbit trough. The link is fiber to fiber full duplex at 10/10mbit.

Is this the IPsec speed I can expect from the RouterBoard 450G ?

I use 3des and sha1.


Regards,
Siggi

You probably won't get a whole lot more out of it...
Try switching to AES-128 - this should be a lot faster.

The Watchguard has been replaced by a RB 750G, and I'm now running aes-128. I get the full 10mbits with a CPU usage of approx 45% on the RB750G.