Page 1 of 2 12 LastLast
Results 1 to 10 of 17
  1. #1
    Untanglit
    Join Date
    Oct 2010
    Posts
    28

    Unhappy Is OpenVPN throttled in Untangle? Check my test results

    So I decided to do a little test/experiment with OpenVPN under Untangle in a Virtual environment. Why Virtual environment? Because I don't have two physical Untangles with more then 30Mbit bandwidth between them..But be patient and you'll get my point. The hardware is more then capable to pushing above the received results. So here we go

    Virtualization Server - KVM on Debian 9
    CPU - Dual Intel Xeon L5630 2.13Ghz with 64Gb Ram and 8x 146Gb 15k SAS drives

    Untangle Virtual Machines specs:
    CPU 8 Cores
    Ram 2GB
    Disk VirtIO 32GB
    NIC - VirtIO 10Gbit adapter

    The only Apps in Untangle VMs that I have running are Reports and OpenVPN. Thats it.


    Here's a diagram of my test setup
    Screenshot 2018-10-19 14.02.53.png


    For testing on both sides I setup two Server2016 VMs with 4Cores 32GB disk and 2GB Ram. Should be good enough to run iperf. I used the VirtIO drivers for the NICs and the disk - that what is recommended for best performance. up

    So TEST1 - I setup both Win VMs on the same LAN and run Iperf between them. This is what I got:

    bin/iperf.exe -c 10.0.30.125 -P 1 -i 1 -p 5001 -C -f m -t 10 -T 1
    ------------------------------------------------------------
    Client connecting to 10.0.30.125, TCP port 5001
    TCP window size: 0.06 MByte (default)
    ------------------------------------------------------------
    [300] local 10.0.30.179 port 49892 connected with 10.0.30.125 port 5001
    [ ID] Interval Transfer Bandwidth
    [300] 0.0- 1.0 sec 109 MBytes 917 Mbits/sec
    [300] 1.0- 2.0 sec 94.6 MBytes 793 Mbits/sec
    [300] 2.0- 3.0 sec 110 MBytes 922 Mbits/sec
    [300] 3.0- 4.0 sec 105 MBytes 878 Mbits/sec
    [300] 4.0- 5.0 sec 104 MBytes 869 Mbits/sec
    [300] 5.0- 6.0 sec 107 MBytes 898 Mbits/sec
    [300] 6.0- 7.0 sec 97.0 MBytes 814 Mbits/sec
    [300] 7.0- 8.0 sec 114 MBytes 953 Mbits/sec
    [300] 8.0- 9.0 sec 114 MBytes 957 Mbits/sec
    [300] 9.0-10.0 sec 108 MBytes 909 Mbits/sec
    [300] 0.0-10.0 sec 1062 MBytes 891 Mbits/sec
    Done.

    So pretty close to Gigabit speeds. Now for then second test I put the Windows VMs on different networks so they can't see eachother, setup OpenVPN server on one Untangle and connected the second Untangle as a VPN site. After I got them connected I ran iperf again between the Windows VMs and this is what I got..

    TEST2: Iperf tru OpenVPN tunnel

    bin/iperf.exe -c 10.0.30.125 -P 1 -i 1 -p 5001 -C -f m -t 10 -T 1
    ------------------------------------------------------------
    Client connecting to 10.0.30.125, TCP port 5001
    TCP window size: 0.06 MByte (default)
    ------------------------------------------------------------
    [300] local 10.0.40.179 port 49903 connected with 10.0.30.125 port 5001
    [ ID] Interval Transfer Bandwidth
    [300] 0.0- 1.0 sec 9.71 MBytes 81.5 Mbits/sec
    [300] 1.0- 2.0 sec 9.26 MBytes 77.7 Mbits/sec
    [300] 2.0- 3.0 sec 8.70 MBytes 72.9 Mbits/sec
    [300] 3.0- 4.0 sec 9.36 MBytes 78.5 Mbits/sec
    [300] 4.0- 5.0 sec 9.00 MBytes 75.5 Mbits/sec
    [300] 5.0- 6.0 sec 9.10 MBytes 76.3 Mbits/sec
    [300] 6.0- 7.0 sec 9.04 MBytes 75.8 Mbits/sec
    [300] 7.0- 8.0 sec 9.36 MBytes 78.5 Mbits/sec
    [300] 8.0- 9.0 sec 9.20 MBytes 77.1 Mbits/sec
    [300] 9.0-10.0 sec 9.26 MBytes 77.7 Mbits/sec
    [300] 0.0-10.1 sec 92.0 MBytes 76.6 Mbits/sec
    Done.

    So 75-80Mbits ..Huh. Thats a big difference. Direct connection avg 900Mbits vs OpenVPN tunnel @ 75Mbits..thats like 10x slower. I would realy like to know why. At the time of the Iperf testing the CPU is barely reaching 10% utilization. I will also mention that I do have multiple site-to site OpenVPN setups with identical hardware on both sides and I'm getting very slow results as well. On the setups where I have PC clients running full-tunnel OpenVPN the download goes down to 1Mbit even tho the VPN Server has 10Mbits of upload bandwidth.

    So a question for the Untangle devs..are you throttling OpenVPN in favor of IPSec?? or something else is going on. I've been an Untangle user since 2010 and I've never ever had a fast OpenVPN tunnel based on the available bandwidth. I would appreciate if anyone can come up with their test results for comparison. Thanks
    Last edited by jolebole; 10-19-2018 at 12:38 PM.

  2. #2
    Untangle Junkie dmorris's Avatar
    Join Date
    Nov 2006
    Location
    San Carlos, CA
    Posts
    17,726

    Default

    Quote Originally Posted by jolebole View Post
    So a question for the Untangle devs..are you throttling OpenVPN in favor of IPSec??
    Nope.

    Reminder that we are open source and its easy to see how/what exactly Untangle does here:
    https://github.com/untangle/
    Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Untanglit
    Join Date
    Oct 2010
    Posts
    28

    Default

    I do believe that you don't. But I also am trying to find out if OpenVPN can be tweaked to produce better results then mine. I came across this test on the OpenVPN Wiki and it seems that it CAN go faster. The Wiki mentions changes on the MTU on the tun interfaces and disabling fragmentation and segmentation. Untangle does not offer those options to be changed.

    https://community.openvpn.net/openvp...Networks_Linux
    Last edited by jolebole; 10-19-2018 at 12:41 PM.

  4. #4
    Master Untangler
    Join Date
    May 2008
    Posts
    920

    Default

    What hypervisor software? Maybe try it with debian vm"s instead of untangles. I doubt they would be throttling on purpose.

  5. #5
    Untanglit
    Join Date
    Oct 2010
    Posts
    28

    Default

    Quote Originally Posted by donhwyo View Post
    What hypervisor software? Maybe try it with debian vm"s instead of untangles. I doubt they would be throttling on purpose.
    I am running the VMs in the latest version of Proxmox. I also posted here about two physical Untangle boxes that also perform prety slow with OpenVPN vs the available bandwith.
    Last edited by jolebole; 10-19-2018 at 12:43 PM.

  6. #6
    Master Untangler
    Join Date
    May 2008
    Posts
    920

    Default

    What type of cpu are you selecting for the hosts? default host or ?

  7. #7
    Untanglit
    Join Date
    Oct 2010
    Posts
    28

    Default

    Quote Originally Posted by donhwyo View Post
    What type of cpu are you selecting for the hosts? default host or ?
    Default for the host kvm64

    Screenshot 2018-10-19 15.07.47.png

  8. #8
    Master Untangler
    Join Date
    May 2008
    Posts
    920

    Default

    Don't know if this will help or not. Try setting your cpu type to host.
    cpu.png
    My network seems to work better with this. Your mileage may very. I don't have enough band width to reach the limits you see.

  9. #9
    Untanglit
    Join Date
    Oct 2010
    Posts
    28

    Default

    Quote Originally Posted by donhwyo View Post
    Don't know if this will help or not. Try setting your cpu type to host.
    cpu.png
    My network seems to work better with this. Your mileage may very. I don't have enough band width to reach the limits you see.
    Im gonna try now and see what happens. Thanks

  10. #10
    Master Untangler
    Join Date
    May 2008
    Posts
    920

    Default

    Also set multique to how ever many cpu you have.
    Network.png

Page 1 of 2 12 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2