Speed Tests with VPN and Encryptions. Help by Sharing your results :)

[yorgi]

the mikrotik CCR series and RB1100AHx2 can do VPN faster especially if you use AES as they have hardware AES acceleration.
I could test the speeds later though as i havent figured out how to get other than PPTP working. It does PPTP at 300Mb/s per core (each client is limited to a core) from last i tested last year so firmware changes could change it. They are much easier to configure than linux for routing but they lack features like anti virus or something like snort.

PPTP is an old protocal that has security issues but is super fast.
OpenVPN is the best way to go. If it does it then Rango should test it

 

[Rango]

the mikrotik CCR series and RB1100AHx2 can do VPN faster especially if you use AES as they have hardware AES acceleration.
I could test the speeds later though as i havent figured out how to get other than PPTP working. It does PPTP at 300Mb/s per core (each client is limited to a core) from last i tested last year so firmware changes could change it. They are much easier to configure than linux for routing but they lack features like anti virus or something like snort.

Really it has only 1Ghz cpu speed but it's 300$ too

 

[Rango]

PPTP is an old protocal that has security issues but is super fast.
OpenVPN is the best way to go. If it does it then Rango should test it

Yorgi. Pfsense R.I.P. I'm done i think. Got the card today. With vmware forget getting comcast ip. Can't get it to work.

Got my P3 Dell GX150 box, popped the card inside. Installed pfsense. Got comcast ip on wan, lan on 87u in AP mode and pc connected 87u switch.
Got pfsense configured. Pia configured. Can browse internet threw comcast.

Setup pia vpn. PIA tunnel goes up, stays up, interface shows down, doesn't get ip address in interfaces. Openvpn has PIA ip address in openvpn status. Logs show connected and disconnected. Can't browse internet as no ip on interface i assume. I played with few settings but this is NIGHMARE !!!!!. I'M DONE!!!

I googled some errors but it leads nowhere and i'm not going to spend days again on getting this up, maybe it's blocked, maybe i'm too dumb to get this up, maybe who know. This should be week long project. Sad moment. Back to router. Easy no hassle works.

 

[Nullity]

Yorgi. Pfsense R.I.P. I'm done i think. Got the card today. With vmware forget getting comcast ip. Can't get it to work.

Got my P3 Dell GX150 box, popped the card inside. Installed pfsense. Got comcast ip on wan, lan on 87u in AP mode and pc connected 87u switch.
Got pfsense configured. Pia configured. Can browse internet threw comcast.

Setup pia vpn. PIA tunnel goes up, stays up, interface shows down, doesn't get ip address in interfaces. Openvpn has PIA ip address in openvpn status. Logs show connected and disconnected. Can't browse internet as no ip on interface i assume. I played with few settings but this is NIGHMARE !!!!!. I'M DONE!!!

I googled some errors but it leads nowhere and i'm not going to spend days again on getting this up, maybe it's blocked, maybe i'm too dumb to get this up, maybe who know. This should be week long project. Sad moment. Back to router. Easy no hassle works.

I know it is seemingly insensitive, but try reading & learning more about computer networking, pfSense, & perhaps virtualization, then try again. pfSense does work, as does FreeBSD.

Over the years, I have learned that if my problem is uncommon (cannot be easily solved by Google), I am either the cause of the problems or I am too ignorant to achieve what I want.

 

[Rango]

I know it is seemingly insensitive, but try reading & learning more about computer networking, pfSense, & perhaps virtualization, then try again. pfSense does work, as does FreeBSD.

Over the years, I have learned that if my problem is uncommon (cannot be easily solved by Google), I am either the cause of the problems or I am too ignorant to achieve what I want.

My gripe is i followed exact guide posted on pfsense form specifically on PIA, I got this interface up before with same guide. Did same thing as i did before. Variables keep changing on me which is huge problem. First it was wan comcast ip. I got this up on physical box on first try, no problem but now pia interface which is enabled won't get pia ip address although in open vpn status shows it has one. So weird. I know pfsense works and i'm beginning my journey into linux (i know pfsense is freebsd). I'm also IT professional, not in firewall biz but in workstation biz. This really shouldn't be this
difficult.

View attachment 5691

 

[Rango]

Error log. i looked it up but lead me nowhere. I mean i can keep digging but here is the issue. They keep changing on me, the variables.

Rebooted pfsense and this error showed up.

openvpn[15657]: PID_ERR replay-window backtrack occurred [2] [SSL-0] [00_11178>>>>>>EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE] 0:460 0:458 t=1457588835[0] r=[-1,64,15,2,1] sl=[52,64,64,272]

 

[Rango]

NAT is setup for pia too...what gives?

 

[System Error Message]

Really it has only 1Ghz cpu speed but it's 300$ too

Thats because the CPU is different from ARM. In software processing it is much faster than ARM in every way. You can also upgrade the RAM.

 

[Rango]

Thats because the CPU is different from ARM. In software processing it is much faster than ARM in every way. You can also upgrade the RAM.

Got ya, same as with pc i assume. So what Mhz speed you think dual core could pull. I'm estimating needs to be 2ghz but i'm not accounting for the cpu difference so i really don't know.

BTW i opened thread on pfense forum but we'll see if i get some help. I know this forum is really responsive and good which is why i go here.

https://forum.pfsense.org/index.php?topic=108069.msg601892#msg601892

 

[Nullity]

My gripe is i followed exact guide posted on pfsense form specifically on PIA, I got this interface up before with same guide. Did same thing as i did before. Variables keep changing on me which is huge problem. First it was wan comcast ip. I got this up on physical box on first try, no problem but now pia interface which is enabled won't get pia ip address although in open vpn status shows it has one. So weird. I know pfsense works and i'm beginning my journey into linux (i know pfsense is freebsd). I'm also IT professional, not in firewall biz but in workstation biz. This really shouldn't be this
difficult.

"Guides" are shortcuts, supplied by those who took the time to educate themselves enough to be able to simply & concisely express complex ideas.

Difficulty is subjective.

 

[Rango]

"Guides" are shortcuts, supplied by those who took the time to educate themselves enough to be able to simply & concisely express complex ideas.

Difficulty is subjective.

If it was one issue i would have done already but as you see it keeps changing. I understand what you're saying but router i got up in 5 min, why would pfsense be any different especially with pictured guide. I mean baby can do this https://forum.pfsense.org/index.php?topic=76015.0
I've watched enough utube videos and people got it up in 5 min. Not sure what i'm doing wrong.

 

[Nullity]

Not sure what i'm doing wrong.

Nobody does... until they learn what they did not know.

Unknown unknowns. Persuit of knowledge.

 

[System Error Message]

in the very early days if you arent virtualising pfsense than it claimed to need a pentium 3 to get decent speeds without using other features. I guess a pentium 4 would be able to get gigabit speeds with intel NICs without using other features. So a dual core i3 or even core2 would do very well even with features. AMD CPUs also will do well as long as you dont use the realtek NICs that come with them. Many who use intel server NICs wth pfsense have gotten gigabit speeds with only a few % CPU usage of an i3, not sure about ATOMs.

 

[Rango]

Nobody does... until they learn what they did not know.

Unknown unknowns. Persuit of knowledge.

Yes sensei...i bow to you in pursuit of knowledge hehe jk boss.

 

[Rango]

in the very early days if you arent virtualising pfsense than it claimed to need a pentium 3 to get decent speeds without using other features. I guess a pentium 4 would be able to get gigabit speeds with intel NICs without using other features. So a dual core i3 or even core2 would do very well even with features. AMD CPUs also will do well as long as you dont use the realtek NICs that come with them. Many who use intel server NICs wth pfsense have gotten gigabit speeds with only a few % CPU usage of an i3, not sure about ATOMs.

So you think it's possible to P3 1Ghz to pull 85Mbps on aes 128 ?.....wow that would be miracle. I can get core dual for $50 on newegg if it's enough.

 

[Nullity]

Yes sensei...i bow to you in pursuit of knowledge hehe jk boss.

No... I seriously deserved that sarcasm.

My point was sincere though. Just like you somewhat proved, we (I) are arrogant until we are humbled by being wrong.

 

[System Error Message]

So you think it's possible to P3 1Ghz to pull 85Mbps on aes 128 ?.....wow that would be miracle. I can get core dual for $50 on newegg if it's enough.

nope. The pentium 3 lacks math performance for larger data points. It has SSE but the minimum you want is core2 because it has SSE3 and clock optimisations unlike the pentium 4. This means that using SSE for the encryption will yield good performance assuming for 128 bit. Some core2 xeons may have AES-NI but i am not sure if this was introduced during core2 time or iseries. You could get multi CPU core2 xeons cheaply though but the issue is finding a server motherboard you can work with for that and RAM controller was on the motherboard and not CPU so another limitation there. The core2 series are 64 bit CPUs whereas the pentiums are 32 bit so 64 bit coupled with a better SSE set would need less clocks for each 128 bit data calculation.

Sure pentiums had MMX and SSE but they were mainly use to accelerate 16 or 32 bit floating points not 128 bit data.

 

[Rango]

nope. The pentium 3 lacks math performance for larger data points. It has SSE but the minimum you want is core2 because it has SSE3 and clock optimisations unlike the pentium 4. This means that using SSE for the encryption will yield good performance assuming for 128 bit. Some core2 xeons may have AES-NI but i am not sure if this was introduced during core2 time or iseries. You could get multi CPU core2 xeons cheaply though but the issue is finding a server motherboard you can work with for that and RAM controller was on the motherboard and not CPU so another limitation there. The core2 series are 64 bit CPUs whereas the pentiums are 32 bit so 64 bit coupled with a better SSE set would need less clocks for each 128 bit data calculation.

Sure pentiums had MMX and SSE but they were mainly use to accelerate 16 or 32 bit floating points not 128 bit data.

I'm looking at Intel E8400 it has sse3 for $55. It's hard to fine any refurb with AES-NI. You think that may pull 85Mbps with 3Ghz dual core proccessor?
Thank you for explanation.

 

[System Error Message]

it should if its a core2 at least.

 

[Blade Runner]

Rango,

Please post screenshot of Interfaces: Assign network posts.