Decent routers for streaming? And possible to disable encryption?

[SirJohnEh 6]

So I was wrong. You definitely have AES-NI enabled. One more thing: have You enabled it in pfSense System > Advanced > Miscellaneous > Cryptographic Hardware Acceleration? and in OpenVPN Client config for AIR (Hardware Crypto - cryptodev in client configuration)?

 

You may also try to temporarily disable PowerD in System > Advanced > Miscellaneous in Power Savings. Because my N3150 gives 2-4 times better results in openssl speed test (however, even Your result should be enough).

 

Yes, it's enabled in advanced/misc/crypto and in the OpenVPN client config.  PowerD is disabled on my system as well.

[m2g2tem 15]

Yes, it's enabled in advanced/misc/crypto and in the OpenVPN client config.  PowerD is disabled on my system as well.

 

Then You might take a look at this:

 

https://community.openvpn.net/openvpn/wiki/Gigabit_Networks_Linux

 

and experiment with mssfix and tun-mtu. Increasing tun-mtu gives some speed advance (take a look at discussion on this forum regarding tun-mtu and mssfix). I plan to setup some local server ant test my router in locally out of curiosity. Will publish results here.

[Ernst89 11]

Hi Karznie 

 

I do have aesni.ko loaded and get results from openssl openssl speed -evp aes-256-cbc similar to SirJohn

 

 kldstat                                            Id Refs Address            Size     Name

 1    4 0xffffffff80200000 22d84c8  kernel

 2    1 0xffffffff82611000 54e5     aesni.ko

 

 

type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes

aes-256-cbc      32634.51k   161881.12k   541340.67k  2005316.40k 16224354.30k

 

However I was confused when I said I couldn't turn hardware encryption off. What I should have said is that download speeds don't get slower when I do. In fact on closer inspection I unexpectedly found that they get faster. Up to 150 Mb/s

 

openssl is also interesting without aesni.ko loaded I get.

 

type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes

aes-256-cbc     118977.15k   162137.30k   187641.86k   195252.22k   197585.58k

 

Much lower for 8192 blocks but much higher for 16 byte blocks. With as I said faster real life OpenVPN performance.

 

Clearly I don't understand what is going on.