Can we choose Cypher strength?

[ccreedy 0]

Hi Everyone,

                     signed up for the service today, I'm trying to increase my overall speeds  I'm in the process of overclocking my RT-AC 87U, I've always run Merlin, I've installed cooling and disabled the 2.4GHZ Radio.

 

I'm running a 70 Down 19 Up Line without VPN, as soon as I open the tunnel I'm hitting about 23 Down / 12 Up (Only using 42% of core 2 while doing so), not a shabby start but the CPU on the 87U has been reported to do a lot better.

 

Some suggestions are to drop down to AES-128-CBC as apposed to AES-256-CBC can this be done on airvpn? I've manually tried adjusting, although a connection is made, no net access.

 

The only other thing I can do is insist the ISP is not throttling the VPN connection.

 

Any advice would be greatly appreciated.

 

 

Chris

[m2g2tem 15]

  On 6/12/2016 at 1:05 PM, ccreedy said:

Hi Everyone,

                     signed up for the service today, I'm trying to increase my overall speeds  I'm in the process of overclocking my RT-AC 87U, I've always run Merlin, I've installed cooling and disabled the 2.4GHZ Radio.

 

I'm running a 70 Down 19 Up Line without VPN, as soon as I open the tunnel I'm hitting about 23 Down / 12 Up (Only using 42% of core 2 while doing so), not a shabby start but the CPU on the 87U has been reported to do a lot better.

 

Some suggestions are to drop down to AES-128-CBC as apposed to AES-256-CBC can this be done on airvpn? I've manually tried adjusting, although a connection is made, no net access.

 

The only other thing I can do is insist the ISP is not throttling the VPN connection.

 

Any advice would be greatly appreciated.

 

 

Chris

 

I have the same router. I'm getting ~40Mbits speed with no problem. Having said that, I have 40Mbit connection and have read elsewhere that this throughput may be the limit of this router. And I guess that You would get much better results with even best consumer grade router on the market right now. So, rather than downgrading encryption, I would suggest You to get some decent pfSense box and enjoy full speed, security, IDS, and all the goodies which come with pfSense.

 

As a starting point I would recommend something like zbox CI323 nano plus pfSense. It actually costs less than more expensive consumer routers and it's way better. It has AES-NI, and much better processor. 

 

Frankly with consumers routers You never saturate 70Mbits, not saying 100Mbits+.

[LZ1 675]

@

m2g2tem

 

Hello!

 

Wow, that looks like a really fantastic box! Thanks for the suggestion.

 

OP, remember to take a look at the AirVPN remote portforwarding, to increase speeds with certain applications

[Guest]

  On 6/12/2016 at 1:23 PM, m2g2tem said:

 

 

I have the same router. I'm getting ~40Mbits speed with no problem. Having said that, I have 40Mbit connection and have read elsewhere that this throughput may be the limit of this router. And I guess that You would get much better results with even best consumer grade router on the market right now. So, rather than downgrading encryption, I would suggest You to get some decent pfSense box and enjoy full speed, security, IDS, and all the goodies which come with pfSense.

 

As a starting point I would recommend something like zbox CI323 nano plus pfSense. It actually costs less than more expensive consumer routers and it's way better. It has AES-NI, and much better processor. 

 

Frankly with consumers routers You never saturate 70Mbits, not saying 100Mbits+.

 

the zbox does have a really powerful CPU, it might be able to handle my 300Mbit line, where would I acquire it tho, the zbox site doesn't have any purchase option.

[m2g2tem 15]

  On 6/12/2016 at 3:11 PM, EdensSpire said:

 

  On 6/12/2016 at 1:23 PM, m2g2tem said:

 

 

I have the same router. I'm getting ~40Mbits speed with no problem. Having said that, I have 40Mbit connection and have read elsewhere that this throughput may be the limit of this router. And I guess that You would get much better results with even best consumer grade router on the market right now. So, rather than downgrading encryption, I would suggest You to get some decent pfSense box and enjoy full speed, security, IDS, and all the goodies which come with pfSense.

 

As a starting point I would recommend something like zbox CI323 nano plus pfSense. It actually costs less than more expensive consumer routers and it's way better. It has AES-NI, and much better processor. 

 

Frankly with consumers routers You never saturate 70Mbits, not saying 100Mbits+.

 

the zbox does have a really powerful CPU, it might be able to handle my 300Mbit line, where would I acquire it tho, the zbox site doesn't have any purchase option.

 

In Europe it's available in most online electronic stores. It's quite popular.

[m2g2tem 15]

  On 6/12/2016 at 3:07 PM, LZ1 said:

@

m2g2tem

 

Hello!

 

Wow, that looks like a really fantastic box! Thanks for the suggestion.

 

OP, remember to take a look at the AirVPN remote portforwarding, to increase speeds with certain applications

 

You may also be interested in upcoming CI545, it has 2 cores but *much* more powerful. Taking into account that pfSense and OpenVPN are mainly single core bound, it would be very nice box for OpenVPN router.

[zhang888 1067]

  On 6/12/2016 at 1:05 PM, ccreedy said:

Some suggestions are to drop down to AES-128-CBC as apposed to AES-256-CBC can this be done on airvpn? I've manually tried adjusting, although a connection is made, no net access.

 

The only supported mode is AES-256-CBC (with HMAC-SHA1).

[Guest]

  On 6/12/2016 at 5:16 PM, m2g2tem said:

 

  On 6/12/2016 at 3:07 PM, LZ1 said:

@

m2g2tem

 

Hello!

 

Wow, that looks like a really fantastic box! Thanks for the suggestion.

 

OP, remember to take a look at the AirVPN remote portforwarding, to increase speeds with certain applications

 

You may also be interested in upcoming CI545, it has 2 cores but *much* more powerful. Taking into account that pfSense and OpenVPN are mainly single core bound, it would be very nice box for OpenVPN router.

 

It is a lot more powerful, my own CPU has 3.30GHz stock, if I put that one up to 3.0 I could have a guaranteed full speed OpenVPN router, when is it set to release?

[LZ1 675]

@m2g2tem

I was originally considering the Netgear Nighthawk R7000 - AC1900.

Thanks.

[Guest]

  On 6/12/2016 at 8:26 PM, LZ1 said:

@m2g2tem

I was originally considering the Netgear Nighthawk R7000 - AC1900.

Thanks.

 

As was I but those zbox ones are a lot stronger.

[Wolf666 17]

Forget consumer grade box when you need VPN, Routing, Firewall and so on. Better to invest in x86 box and stick pfSense on it....you never look back. My R7000 is acting as AP (stock fw) and if you need VLAN you have to look at DD-WRT or Tomato firmwares.

 

 

Sent from my iPad using Tapatalk

[m2g2tem 15]

  On 6/12/2016 at 8:26 PM, LZ1 said:

@m2g2tem

I was originally considering the Netgear Nighthawk R7000 - AC1900.

Thanks.

 

I strongly recommend to buy pfsense box, It's so much faster, powerful, flexible, comes with so much better software. Once I got this I never looked back. And it comes at the same price (including SSD disk and memory).

 

My current setup is: zbox C323 (~$130), SSD 100GB (~$30) and 4GB memory (~$20). I have world class, enterprise grade routing software, world class UTM, and efficient OpenVPN in a box half size of regular consumer router.

 

Still however You will need WIFI acess point. I actually turned my expensive AC-87U into stripped down access point.