Jump to content
Not connected, Your IP: 34.231.243.21
m2g2tem

ANSWERED How to quicly test theoretical OpenVPN throughput

Recommended Posts

Browsing pfSense forum I've found some intriguing quick OpenVPN performance test. I think this may be interesting because many people here asking about OpenVPN hardware for their needs.

 

To test (theoretical) throughput:

 

1. generate secret:

 

openvpn --genkey --secret /tmp/secret

2. Test OpenVPN speed:

 

time openvpn --test-crypto --secret /tmp/secret --verb 0 --tun-mtu 20000 --cipher aes-256-cbc

3. Your VPN performance is:

 

( 3200 / execution_time_seconds ) = Projected Maximum OpenVPN Performance in Mbps

 

For my RT-AC87U router it gives 70s, meaning 45Mbps; for my pfSense Celeron C3150 box it gives 25s, meaning 126Mbps. Both values are actually pretty much identical with real client/server tests I did some time ago. Of course this formula is true to the some degree, where actually NIC performance starts to play role. However for casual, quick and dirty checks this seems very interesting.

 

I'm curios how are other's results.

 

 

Credits:

 

https://forum.pfsense.org/index.php?topic=105238.msg616743#msg616743

Share this post


Link to post

8.666u 0.646s 0:09.33 99.6%     742+177k 0+0io 0pf+0w

 

silly question but what is the time in seconds in this output from the test run?  I see where it says 0.646s but the test took longer than that.  If it's the 9.33 (that makes sense for how long it took to complete) then my max theoretical throughput is 343mbit/s.  this in pfsense with AMD A6-7400K Radeon R5

Share this post


Link to post

8.666u 0.646s 0:09.33 99.6%     742+177k 0+0io 0pf+0w

 

silly question but what is the time in seconds in this output from the test run?  I see where it says 0.646s but the test took longer than that.  If it's the 9.33 (that makes sense for how long it took to complete) then my max theoretical throughput is 343mbit/s.  this in pfsense with AMD A6-7400K Radeon R5

 

​First number (with u) means user elapsed time (how much time process spent in user execution mode), second one means system time (how much time system spent in system, ie kernel execution mode), third is sum of first and second. So yes, You should use 9,33.

Share this post


Link to post

tested on my Mint VM.  host CPU is an i7 4790 @ 3.6GHz.

 

max theoretical is 798mbit/s.  test took 4.009seconds.

 

this is pretty cool.  thanks for sharing.

Share this post


Link to post

Nice one, just done test with my Xeon E3-1220L v3 on my router and it spatted out 21.015s (152mbit/s), so I am well impressed with this dual core, 1.1GHz processor... Better than Celeron C3150... phiew, who knew ;-)

Share this post


Link to post

Testing theoretical throughput (speed of the data channel cipher) on Windows

  1. Open PowerShell.
  2. cd "C:\Program Files\AirVPN"
    If 32-bit OS:

    cd "C:\Program Files (x86)\AirVPN"

    Other clients: you're on your own.
  3. * .\openvpn.exe --genkey secret $env:TEMP\OpenVPN_cipher_test.key
  4. Measure-Command { .\openvpn.exe --test-crypto --secret "$env:TEMP\OpenVPN_cipher_test.key" --verb 0 --tun-mtu 20000 --cipher AES-256-GCM }
  5. Follow the 3rd step from OP.

Share this post


Link to post

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Loading...
  • Security Check
    Play CAPTCHA Audio
    Refresh Image

×
×
  • Create New...