[twosix]

Do you use the vpn via the router settings or at the device eg. PC?

At the router, the vpn can be used by all devices connecting to the router, while if the vpn is used at the device level, it can only be used by the device only, right?

I also notice that if vpn at the router, the download speed is 10x slower than when using vpn at PC. Anyone has the same experience?

[elpibe10]

twosix wrote:

I also notice that if vpn at the router, the download speed is 10x slower than when using vpn at PC. Anyone has the same experience?

That's because most consumer routers don't have the processing power.

On my MikroTik CCR1009 (9-core processor), I can easily max out the VPN connection with minimal CPU load.

[twosix]

elpibe10 wrote:

That's because most consumer routers don't have the processing power.

On my MikroTik CCR1009 (9-core processor), I can easily max out the VPN connection with minimal CPU load.

I am using the Asus N66U. I'd thought this is powerful enough. Thanks.

[elpibe10]

twosix wrote:

I am using the Asus N66U. I'd thought this is powerful enough. Thanks.

No it's not.

Even the dual-core Asus RT-AC68U or Netgear R7000 are considered 'weak' in their VPN throughput.

[Ah-Pin-Kor]

elpibe10 wrote:

That's because most consumer routers don't have the processing power.

On my MikroTik CCR1009 (9-core processor), I can easily max out the VPN connection with minimal CPU load.

May I know what is the speed you are getting with CCR1009 with the VPN connection maxed out? Is this VPN connection to some VPN provider or a private point-to-point setup?

[elpibe10]

Ah-Pin-Kor wrote:

May I know what is the speed you are getting with CCR1009 with the VPN connection maxed out? Is this VPN connection to some VPN provider or a private point-to-point setup?

Exactly the same Astrill VPN server as post #372 in this thread, I'm getting >160Mbps D/L & U/L with 1 to 2% CPU load on the MikroTik CCR1009 (9-core 1.2GHz Tilera processor).

On a MikroTik RB2011UiAS (single-core 600MHz Atheros processor), I'm getting ~50Mbps D/L & U/L on the same VPN server with 100% CPU load.

Both results are with encryption whereas the one on post # 372 is without which should have a lighter load on the router's processor but just look at those weak numbers on his Asus.

[Ah-Pin-Kor]

elpibe10 wrote:

Exactly the same Astrill VPN server as post #372 in this thread, I'm getting >160Mbps D/L & U/L with 1 to 2% CPU load on the MikroTik CCR1009 (9-core 1.2GHz Tilera processor).

On a MikroTik RB2011UiAS (single-core 600MHz Atheros processor), I'm getting ~50Mbps D/L & U/L on the same VPN server with 100% CPU load.

Both results are with encryption whereas the one on post # 372 is without which should have a lighter load on the router's processor but just look at those weak numbers on his Asus.

Impressive! Thanks. I'm subscribed to Astrill too and was wondering what is their bandwidth limit.

[ArcticCheetah]

But the power consumption is also a lot higher.
It is not exactly home router 24hr power friendly.
A better option is to choose a consumer router SoC with hardware encryption.

elpibe10 wrote:

Exactly the same Astrill VPN server as post #372 in this thread, I'm getting >160Mbps D/L & U/L with 1 to 2% CPU load on the MikroTik CCR1009 (9-core 1.2GHz Tilera processor).

On a MikroTik RB2011UiAS (single-core 600MHz Atheros processor), I'm getting ~50Mbps D/L & U/L on the same VPN server with 100% CPU load.

Both results are with encryption whereas the one on post # 372 is without which should have a lighter load on the router's processor but just look at those weak numbers on his Asus.

[elpibe10]

ArcticCheetah wrote:

But the power consumption is also a lot higher.
It is not exactly home router 24hr power friendly.
A better option is to choose a consumer router SoC with hardware encryption.

Not true. The CCR1009 consumes ~20W while the replaced Ubiquiti ERL and Cisco SG200-08 managed switch consume about 15W (combined).

~5W more for a HUGE amount of power & routing capability at my disposal is nothing IMO.

[negativzero]

ArcticCheetah wrote:

But the power consumption is also a lot higher.
It is not exactly home router 24hr power friendly.
A better option is to choose a consumer router SoC with hardware encryption.

Consumer router like AC68 or R7000 will top out at 60mbps for openvpn. There is a reason why people still use old pentium 4 pcs as routers even though power consumption is high.

[ArcticCheetah]

negativzero wrote:

Consumer router like AC68 or R7000 will top out at 60mbps for openvpn. There is a reason why people still use old pentium 4 pcs as routers even though power consumption is high.

Not true there are some hidden gems in consumer router with build in hardware encryption capabilities.

[negativzero]

ArcticCheetah wrote:

Not true there are some hidden gems in consumer router with build in hardware encryption capabilities.

AC68 has AES-256 engine. My openvpn still tops out at 40mbps. If I push unencrypted openvpn only then can I hit 60mbps.

[ArcticCheetah]

negativzero wrote:

AC68 has AES-256 engine. My openvpn still tops out at 40mbps. If I push unencrypted openvpn only then can I hit 60mbps.

That BCM don't have hw encryption. It has hw float but not encryption.
Any Router with openssl can do AES256 just how fast
You shld go read the datasheet.

[dodomarket]

Would be interesting if you guys post some routes.

[steven168z]

elpibe10 wrote:

Exactly the same Astrill VPN server as post #372 in this thread, I'm getting >160Mbps D/L & U/L with 1 to 2% CPU load on the MikroTik CCR1009 (9-core 1.2GHz Tilera processor).

On a MikroTik RB2011UiAS (single-core 600MHz Atheros processor), I'm getting ~50Mbps D/L & U/L on the same VPN server with 100% CPU load.

Both results are with encryption whereas the one on post # 372 is without which should have a lighter load on the router's processor but just look at those weak numbers on his Asus.

i found this.

http://forums.vr-zone.com/networking...l#post14143455

http://forums.hardwarezone.com.sg/ne...629775-13.html

http://forum.mikrotik.com/viewtopic.php?f=3&t=84307