Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
pfSense Forum
pfSense English Support
»
IPsec
»
IPsec low throughput
Username:
Password:
1 Hour
1 Day
1 Week
1 Month
Forever
Home
Help
Search
Login
Register
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: IPsec low throughput (Read 573 times)
0 Members and 1 Guest are viewing this topic.
brcisna
Full Member
Offline
Posts: 160
IPsec low throughput
«
on:
April 06, 2012, 09:49:58 am »
Hello All,
ISP connections at each site
(1) 6mb upload/download (static)
(1) 3mb upload/download (static)
i recently upgraded our two pfSense machines from 1.2.3-RELEASE to pfSense-2.0.1 (i386)
Clean installs on each machine.
Both machines are identical. Pentium 3.1ghz 2gb ram sata drives.
Each machine has a quad Intel pci-x nic along with the integrated 2 Intel nics.
I have done the em driver tweaks to the /boot/loader.conf.local file. ( This by the way did resolve packet loss on the 4 ports of the pci-x nic)
We have set up a site to site IPsec VPN same as the previous version of pfSense.
Same as before the upgrade I am only able to get at best 350-400kb's tops when doing an iperf file transfer from site to site.
This is very consistently the range regardless of time of day.
I was hoping with the newer version of pfSense,along with slightly better hardware than before this would dramatically increase.
I have tried all of the possible encryption algos with no difference in transfer rate.
I have tried reading all of the howto's on IPsec site to site setups and do not know what else to try and tweak.
Also,I have NOT done any traffic shaping as everything has worked so well without this for our school setting.
if I do traffic shaping with the wizard would this push more bandwidth through the IPsec interface?
Thank You,
Barry
Logged
cmb
Administrator
Hero Member
Offline
Posts: 6055
Re: IPsec low throughput
«
Reply #1 on:
April 08, 2012, 03:11:33 am »
400 KB/sec is rough 3 Mbps. i.e. you're hitting the max of the upload. Or you mean 400 Kb?
Logged
pfSense Commercial Support
Paying customers receive support priority and as in depth of assistance as desired through the official commercial support channels at portal.pfsense.org. Forum users receive as much help as time permits.
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
Administrative
-----------------------------
=> Forum rules
=> Messages from the pfSense Team
=> Feedback
-----------------------------
pfSense English Support
-----------------------------
=> Installation and Upgrades
=> General Questions
=> 2.1 Snapshot Feedback and Problems
=> Post a bounty
===> Completed Bounties
===> Expired/Withdrawn Bounties
=> Hardware
=> Firewalling
=> NAT
=> CARP/VIPs
=> Routing and Multi WAN
=> Traffic Shaping
=> DHCP and DNS
=> IPv6
=> IPsec
=> PPTP
=> PPPoE Server
=> Captive Portal
=> webGUI
=> Wireless
=> SNMP
=> Packages
=> Virtualization installations and techniques
=> OpenVPN
=> Gaming
-----------------------------
Development/Documentation
-----------------------------
=> Documentation
=> Development
-----------------------------
General Category
-----------------------------
=> General Discussion
-----------------------------
International Support
-----------------------------
=> Indonesian
=> Deutsch
=> Español
=> Français
=> Italiano
=> Russian
=> Nederlands
=> Norwegian
=> Portuguese
=> Polish
=> Romanian
=> Swedish
=> Turkish
-----------------------------
Retired
-----------------------------
=> 1.2.3-PRERELEASE-TESTING snapshots - RETIRED
=> 1.2.1-RC Snapshot Feedback and Problems-RETIRED
=> 2.0-RC Snapshot Feedback and Problems - RETIRED
=> DNS Server testing area - RETIRED
Loading...