Jump to content
Not connected, Your IP: 3.227.2.109
batanun

Decent routers for streaming? And possible to disable encryption?

Recommended Posts

So I was wrong. You definitely have AES-NI enabled. One more thing: have You enabled it in pfSense System > Advanced > Miscellaneous > Cryptographic Hardware Acceleration? and in OpenVPN Client config for AIR (Hardware Crypto - cryptodev in client configuration)?

 

You may also try to temporarily disable PowerD in System > Advanced > Miscellaneous in Power Savings. Because my N3150 gives 2-4 times better results in openssl speed test (however, even Your result should be enough).

 

Yes, it's enabled in advanced/misc/crypto and in the OpenVPN client config.  PowerD is disabled on my system as well.

Share this post


Link to post

Yes, it's enabled in advanced/misc/crypto and in the OpenVPN client config.  PowerD is disabled on my system as well.

 

Then You might take a look at this:

 

https://community.openvpn.net/openvpn/wiki/Gigabit_Networks_Linux

 

and experiment with mssfix and tun-mtu. Increasing tun-mtu gives some speed advance (take a look at discussion on this forum regarding tun-mtu and mssfix). I plan to setup some local server ant test my router in locally out of curiosity. Will publish results here.

Share this post


Link to post

Hi Karznie 

 

I do have aesni.ko loaded and get results from openssl openssl speed -evp aes-256-cbc similar to SirJohn

 

 kldstat                                            Id Refs Address            Size     Name

 1    4 0xffffffff80200000 22d84c8  kernel
 2    1 0xffffffff82611000 54e5     aesni.ko
 
 
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256-cbc      32634.51k   161881.12k   541340.67k  2005316.40k 16224354.30k
 
However I was confused when I said I couldn't turn hardware encryption off. What I should have said is that download speeds don't get slower when I do. In fact on closer inspection I unexpectedly found that they get faster. Up to 150 Mb/s
 
openssl is also interesting without aesni.ko loaded I get.
 
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes
aes-256-cbc     118977.15k   162137.30k   187641.86k   195252.22k   197585.58k
 
Much lower for 8192 blocks but much higher for 16 byte blocks. With as I said faster real life OpenVPN performance.
 
Clearly I don't understand what is going on. 

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...