Jump to content


Photo

Anything I can try to increase speeds?

speed buffer

  • Please log in to reply
10 replies to this topic

#1 Bloopie

Bloopie

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 06 February 2017 - 12:53 PM

Hi,

 

I'm currently using a trial AirVPN account as I wanted to see how fast the servers are. My connection is 200/200 and I'm maxing it out in the speed tests, but with the VPN on I'm only getting about 70MBps. I've tested multiple servers, mostly the ones closest to me with the best pings. The speed seems to fluctuate a lot between them but the max I've seen was 100MBps. I remember reading that it's not unheard of to get around 200MBps through AirVPN so I would just like to see if I can get closer to that.

 

I tried to look for tips to increase the speed and changed my send and receive buffer sizes to 256 KB. Is there anything else I can try?

 

Thanks!



#2 zhang888

zhang888

    Donald Trump of IT/Security

  • Moderators
  • 2226 posts

Posted 06 February 2017 - 01:02 PM

What CPU you are using? Some devices cannot go beyond a certain level of speed with AES-256.


Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees.


#3 Bloopie

Bloopie

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 06 February 2017 - 01:08 PM

What CPU you are using? Some devices cannot go beyond a certain level of speed with AES-256.

 

Using an Intel i5-2500k.



#4 zhang888

zhang888

    Donald Trump of IT/Security

  • Moderators
  • 2226 posts

Posted 06 February 2017 - 01:15 PM

6 years old end of life CPU, might not be enough. Do you have a possibility to try with something newer?


Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees.


#5 Bloopie

Bloopie

    Newbie

  • Members
  • Pip
  • 3 posts

Posted 06 February 2017 - 01:19 PM

6 years old end of life CPU, might not be enough. Do you have a possibility to try with something newer?

 

Not at the moment. Is there any way around it, or a way to tell that that is indeed causing a problem?



#6 zhang888

zhang888

    Donald Trump of IT/Security

  • Moderators
  • 2226 posts

Posted 06 February 2017 - 01:34 PM

If you tried all servers and with all protocols, there is nothing much left to do at this point. The servers are fine with these speeds and you can see it in the stats,

if you can achieve these speeds from your ISP, the next thing to check would be your hardware. Anything beyond 100Mbit/s with AES-256 requires a modern CPU.


Occasional moderator, sometimes BOFH. Opinions are my own, except when my wife disagrees.


#7 dagadog

dagadog

    Advanced Member

  • Members
  • PipPipPip
  • 40 posts

Posted 06 February 2017 - 09:06 PM

Ah, that explains it - I'm only getting about 45Mbit/s with an Intel Atom processor (my home-brew server). It's annoying because the core running OpenVPN is only getting to about 40% utilisation at these speeds. Is there any way to encourage OpenVPN to use more of the CPU cycles?



#8 worm

worm

    Newbie

  • Members
  • Pip
  • 1 posts

Posted 07 February 2017 - 06:06 AM

Perhaps `nice --adjustments=-20 ...`, or you could experiment with renice -p.

 

You could bind other processes to one core, and openvpn to another (i forget the command to do that right now), in order to give openvpn a more 'exclusive' core ... maybe (openvpn is not multi-threaded).

 

You could read this, or the equivalent amd page. https://software.intel.com/en-us/articles/improving-openssl-performance

That page has some handy openssl benchmarking commands.

 

Run multiple openvpn processes (assuming multi-core processor) and do some kind of load balancing over them?

 

You could find some other hardware that has aes-ni and use that as a openvpn gateway.

 

I dunno. Maybe you could find some AES pci card that will work with whatever setup you have. pfsense supports some stuff like that. What speed atom processor?



#9 dagadog

dagadog

    Advanced Member

  • Members
  • PipPipPip
  • 40 posts

Posted 07 February 2017 - 08:04 PM

It's a 1.80 D525 dual core CPU on a JetWay board. Sadly doesn't seem to support AES-NI instruction set.

 

It's my Ubuntu based NAS and mail/web/calendar/media server.  I tried renicing the process to -20 and it gives me an additional 10-20% throughput when connected to a fast server, and increases CPU utilisation by the same amount - so I can now get 50Mbit/s at 50% CPU (on one of 4 virtual cores).

 

I tried to add the renice command to my up script. Oddly it works when starting the VPN with

 

sudo openvpn airvpn.conf

 

but fails when starting the service with

 

service openvpn@airvpn start (or service openvpn restart)

I will look into the possibility hardware acceleration.



#10 dagadog

dagadog

    Advanced Member

  • Members
  • PipPipPip
  • 40 posts

Posted 09 February 2017 - 07:37 PM

Found this on EBay: SOEKRIS VPN1401 PCI VPN Hardware Computer Encryption Safety Acceleration Card

 

Is it worth a try under Linux?



#11 Wolf666

Wolf666

    Advanced Member

  • Members
  • PipPipPip
  • 61 posts

Posted 09 February 2017 - 07:39 PM

On pfSense forums, people got 100-130Mbps with CPU at 2.4Ghz minimum.


Inviato dal mio iPad utilizzando Tapatalk
- Router/Firewall pfSense 2.3.2 (Supermicro A1SRi-2558, SSD Intel S3500, 8GB RAM ECC)
- Switch Cisco SG350-10
- AP Netgear R7000 (Stock FW)
- HTPC Intel NUC5i3RYH
- NAS Synology DS1515+ (5 x 5TB WD Red)
- NAS Synology DS213+ (2 x ST3000DM001)





Similar Topics Collapse


Also tagged with one or more of these keywords: speed, buffer

1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Servers online. Online Sessions: 14529 - BW: 44905 Mbit/sYour IP: 34.204.52.4Guest Access.