AC86U/AX88U L2TP/IPsec Performance

[DangerMouseUK]

Hi Guys,

Has anyone tested the L2TP/IPsec performance on these two new routers?

Also do I have to manually create routes if I don't want all traffic going over the VPNs? As OpenVPN has the options to route but PPTP/L2TP does not.

 

[RMerlin]

IPSEC benchmarks on the RT-AX88U. Note that this is running my firmware, so it might be slightly more optimized than Asus's.

With bcmspu:

E:\Share>iperf -c 192.168.50.12 -N -M 1400 -t 20
------------------------------------------------------------
Client connecting to 192.168.50.12, TCP port 5001
TCP window size: 64.0 KByte (default)
------------------------------------------------------------
[316] local 10.10.10.1 port 14909 connected with 192.168.50.12 port 5001
[ ID] Interval       Transfer     Bandwidth
[316]  0.0-20.0 sec    924 MBytes    387 Mbits/sec


Mem: 434776K used, 469692K free, 0K shrd, 3888K buff, 36492K cached
CPU:  0.2% usr 20.7% sys  0.3% nic 59.7% idle  0.0% io  0.0% irq 18.9% sirq
Load average: 3.32 3.37 2.32 4/191 13694
  PID  PPID USER     STAT   VSZ %VSZ CPU %CPU COMMAND
  240    2 admin    RW       0  0.0   3 23.9 [pdc_rx]
  230    2 admin    RW       0  0.0   0 13.4 [bcmsw_rx]
 1170    1 admin    S N   9068  1.0   1  1.6 httpds -s -i br0 -p 8443
 2608    1 admin    R N  21208  2.3   1  0.4 aaews --sdk_log_dir=/tmp

 

[RMerlin]

Note that only server mode is supported, the IPSEC implementation does not support client mode.

 

[DangerMouseUK]

Oh so what does the client mode support? Just L2TP with no IPSEC? Is that even a thing anymore?

That bandwidth is pretty decent for L2TP/IPsec so it is deffo HW accelerated - is L2TP kernel mode on the Asus?

I'm guessing speeds would be similar on a AC86U as well ?

And yes I'm definitely talking about using the Asus as the VPN client in this scenario!

Thanks for helping - appreciated!

 

[RMerlin]

Oh so what does the client mode support? Just L2TP with no IPSEC? Is that even a thing anymore?

That's correct. Client is only L2TP, while server is an actual Strongswan-based IPSEC implementation.

AC86U and AX88U speeds should be fairly similar for single clients.

 

[DangerMouseUK]

Cool will figure out what works with plain L2TP now then and go from there!