better router for openvpn

[monabhai420]

Hello,

I have tested ASUS RT-AC56U with max speed of 30 to 43 Mbps. Is there any ASUS router that can go 70 mbps and up?

Thanks

 

[RMerlin]

Hello,

I have tested ASUS RT-AC56U with max speed of 30 to 43 Mbps. Is there any ASUS router that can go 70 mbps and up?

Thanks

No. The RT-AC87U might get closer, but definitely nowhere that fast. You need special hardware to achieve those speeds, or a far more powerful CPU as found in a computer.

 

[steven168]

maybe the latest Netgear Router able

AC3200-Nighthawk X6 Tri-Band WiFi Router
Model: R8000

AC2350-Nighthawk X4 Smart WiFi Router
Model: R7500

Model: R7000

http://forums.hardwarezone.com.sg/i...ireless-router-include-vpn-usage-4884432.html

 

[RMerlin]

maybe the latest Netgear Router able

AC3200-Nighthawk X6 Tri-Band WiFi Router
Model: R8000

AC2350-Nighthawk X4 Smart WiFi Router
Model: R7500

Model: R7000

http://forums.hardwarezone.com.sg/i...ireless-router-include-vpn-usage-4884432.html

None of these will go beyond 50-55 Mbps/s.

 

[RMerlin]

Hello,

I have tested ASUS RT-AC56U with max speed of 30 to 43 Mbps. Is there any ASUS router that can go 70 mbps and up?

Thanks

There's currently a bug where I'm not running the OpenVPN server on the correct core. If you switch to using Server2 instead of Server 1 you should get a boost in performance - probably reaching closer to 50-55 Mbps.

The issue will be addressed with 378.50.

 

[steven168]

None of these will go beyond 50-55 Mbps/s.

oic.

what about Ubiquiti EdgeRouter Lite?

http://forums.hardwarezone.com.sg/n...orking]-ubiquiti-edgerouter-lite-4204395.html

 

[monabhai420]

There's currently a bug where I'm not running the OpenVPN server on the correct core. If you switch to using Server2 instead of Server 1 you should get a boost in performance - probably reaching closer to 50-55 Mbps.

The issue will be addressed with 378.50.

I am talking client. so I have to use client 2 ?


I did upgraded to latest firmware 378.50 but I was getting an error about openvpn MAC is not define or something so I changed back to 376.48

Thanks

 

[RMerlin]

I am talking client. so I have to use client 2 ?

That's correct. The same case applies to both client and router.

I did upgraded to latest firmware 378.50 but I was getting an error about openvpn MAC is not define or something so I changed back to 376.48

Thanks

Since I haven't released any 378.50 build and the code is still alpha, and changing daily, I'm not sure what you actually ran.

 

[monabhai420]

stable

Hello,

I just applied stable release from Merlin 374.43_2 . I am going to visit my grand mother place this weekend and going to do speed test to see what speed i get. since I don't have good speed in my area .

By the way Merlin fixed the openvpn speed on server 1 and server 2 issue in latest stable release 374.43_2 right?

Thanks and I will keep you update.

 

[RMerlin]

Hello,

I just applied stable release from Merlin 374.43_2 . I am going to visit my grand mother place this weekend and going to do speed test to see what speed i get. since I don't have good speed in my area .

By the way Merlin fixed the openvpn speed on server 1 and server 2 issue in latest stable release 374.43_2 right?

Thanks and I will keep you update.

374.43_2 is old, the latest stable release is 376.49_5.

I don't know how far back the issue started. I recommend you start the OpenVPN server, then connect to the router over SSH, and run the "top" command. Make sure that in the CPU column the "openvpn" server process is set to CPU 1. If it's set to 0, then it means that build is also affected - switch to Server 2.

 

[cosmoxl]

why not just set the openvpn client process affinity to use both cores?

 

[john9527]

There may be some confusion if he downloaded my fork version of 374.43 from the sticky. I labeled that Update-06E version as the stable version to differentiate it from the beta.

The CPU assignment issue is still present in 06E ...client1/server1 will always go to CPU0, client2/server2 will always go to CPU1. So if you use that version to test, use server2.

The fix will go into the final Update-07 release.

 

[monabhai420]

firmware issue

374.43_2 is old, the latest stable release is 376.49_5.

I don't know how far back the issue started. I recommend you start the OpenVPN server, then connect to the router over SSH, and run the "top" command. Make sure that in the CPU column the "openvpn" server process is set to CPU 1. If it's set to 0, then it means that build is also affected - switch to Server 2.

Yes I know it is old but I never able to connect successful with latest firmware so that is why I switched to old version.
For some reason I am not able to connect to openvpn with new firmware. Here I have created new thread:

http://forums.smallnetbuilder.com/showthread.php?p=160101#post160101

 

[monabhai420]

firmware

There may be some confusion if he downloaded my fork version of 374.43 from the sticky. I labeled that Update-06E version as the stable version to differentiate it from the beta.

The CPU assignment issue is still present in 06E ...client1/server1 will always go to CPU0, client2/server2 will always go to CPU1. So if you use that version to test, use server2.

The fix will go into the final Update-07 release.

yes you are right I am using firmware from sticky Update-06E.

 

[RMerlin]

why not just set the openvpn client process affinity to use both cores?

Because openvpn is not multithreaded, so it can only use a single core at a time. By forcing it to the second core, it means it gets more available CPU time as a lot of system-level things are tied to the first core. And forcing them on different cores also means that if you run both at the same time, you will get optimum performance.

 

[System Error Message]

even with multiple cores the speeds arent that fast. ubiquiti edgerouters use hardware based packet processing to be fast but their core is still a bigger dual core MIPS. It doesnt do VPN as fast compared to what mikrotik offers but even than routerboard speeds arent that fast either (about 300Mb/s of VPN per TILE core). However the fastest openVPN server is still an x86 system running linux. in multicore routerboards higher VPN speeds are achieved by bonding multiple links together. PPC based routerboards are even faster per core for VPN.

RMerlin if you add the option to have 2 openVPN links in your firmware and use load balancing across them you could double the speeds theoratically.

 

[TonyH]

Hi, OP,
Speed aside if secure VPN, stability is main purpose with a router, ought to look for one made for it outside consumer market.

 

[steven168]

even with multiple cores the speeds arent that fast. ubiquiti edgerouters use hardware based packet processing to be fast but their core is still a bigger dual core MIPS. It doesnt do VPN as fast compared to what mikrotik offers but even than routerboard speeds arent that fast either (about 300Mb/s of VPN per TILE core). However the fastest openVPN server is still an x86 system running linux. in multicore routerboards higher VPN speeds are achieved by bonding multiple links together. PPC based routerboards are even faster per core for VPN.

RMerlin if you add the option to have 2 openVPN links in your firmware and use load balancing across them you could double the speeds theoratically.

so in the market which is the best openvpn router?

 

[System Error Message]

in truth the best openVPN router would be a fast x86 machine running linux. Not sure if openvpn server on x86 is multi threaded but a single core would still be faster.

If you're talking about proprietary than something non consumer like mikrotik rb1100ahx2 or CCRs. peplink is just way too expansive for their performance that you can build an x86 server much cheaper for the performance.

You could build a mini/micro atx in a small case and just add some low profile intel server NICs. Older 4 port gigabit intel server NICs are cheap now and still perform quite well. than pick a linux OS that you like that can run openVPN fast enough. It would definitely be cheaper for the performance and you get the advantage of firewall and routing sophistication if you had the skill.

 

[RMerlin]

Not sure if openvpn server on x86 is multi threaded

No, this is something they said they would look into with OpenVPN 3.x.