Zyxel USG 20 ZLD 3.0

[KrisseZ]

Hi.

Long story short: I'm interested in getting the USG 20 or the 50 and I am wondering if the VPN of the 20 is fast enough.

Is there a lovely person in here who could do a fast benchmark with the USG 20?

No need for fancy ixchariot tests. Just put the device between 2 100Mbps LAN segments and config for example a L2TP thru Ipsec or pure Ipsec VPN. Then do a FTP transfer through the VPN tunnel from "WAN" to LAN and vice versa.

I would be so grateful.

Even better if someone had done something similar and could just tell the results. Would save someone the effort.

Thank you very much in advance.

 

[thiggins]

Does this help at all?
http://www.smallnetbuilder.com/secu...ed-security-gateway-reviewed?showall=&start=3

 

[claykin]

Tim

ZLD 3.x improves performance considerably. So much so that Zyxel did new spec sheets for the USG products. Same hardware, new firmware, based on a newer Linux kernel.

OP, I have no time to run this test for you. My USG20/50/200 units in the field are all using VPN over slower WAN. A USG50 over a 25/5 WAN seems to do very well with file transfer. I haven't benchmarked it though.

Have you checked the Zyxel spec sheets? Maybe consider purchasing from a supplier who accepts returns in case you have buyers remorse.

Note, IPSec is likely the fastest connection. For that you will need a client such as Greenbow. I have yet to get L2TP/IPSec to work properly with ZLD3.x though I gave up quickly since installs are already using Greenbow with no real issues.

 

[KrisseZ]

I closed my eyes and pushed the "order" button for the USG 50. I thought I'd surely regret buying the USG20 at some point, so braced my self and bought the more expensive one.

The thing is somewhere in the near future I'm going to obtain a 100/100 connection (now own a 100/10) and do a bridged or routed site-to-site VPN:n with my brothers place, who already has a 100/100 line and idea was to be able to stream HD videos and other heavy media over the VPN.

That's why the huge interest in performance.

Thank you anyways for the replies.

And FYI I intend to do a few performance benchmarks with the USG50 unit and I will post my findings here. I'm getting the unit this week and expect to do the tests on the weekend or early in the next week.

I'll keep you posted.

 

[claykin]

Have you read the current USG sales datasheet?

ftp://ftp2.zyxel.com/ZyWALL_USG_300/datasheet/ZyWALL USG 300_7.pdf

With ZLD2.2.x Zyxel claimed 50Mb/s IPSec VPN throughput for the USG50 (using 3DES). The new sheet for ZLD3.x claims 90Mb/s IPSec (using AES). Assuming you can achieve this, my experience is in one direction you won't achieve the full 90Mb/s. These specs are typically based on a balance of up/down traffic. You probably will not see much more than 50Mb/s in one direction. 50Mb/s is still more than enough to stream media, except for maybe 1080p. Nevertheless I wish you luck getting media streaming working reliably from two consumer WAN connections.

BTW, don't enable the UTM functions or you'll take a hit in throughput. The hit is less with ZLD3 but for your testing purposes keep it simple.

What endpoint is at the other house?

Please let us know how this works out.

 

[KrisseZ]

Yeah I have red the datasheet and that is something that makes me quite dubious. So much performance increase with no h/w changes sounds quite unbelievable.

I have strong faith in this project since the quality of the connections are quite high here. Brother has fabric and I have a cable that has been very reliable for so far. So if the VPN throughput is sufficient I believe this will work.

The other end-point is going to be a zyxel as well.

Yeah I wasn't intending on enabling the UTM functions. They are practically useless with just me and my gal using the network.

But as I said. I'll keep you guys posted on how this turns out.