IPSEC VPN Very Slowly Speed

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
12

IPSEC VPN Very Slowly Speed

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
IPSEC VPN Very Slowly Speed
IPSEC VPN Very Slowly Speed
2023-06-26 11:23:58
Model: ER7206 (TL-ER7206)  
Hardware Version: V1
Firmware Version: 1.2.3 Build 20221104 Rel.41500

Hello.

I have a problem with IPSEC VPN tunnel Site-to-Site.

On the second site is the same router ER7206.

 

Tunnel is established.

 

Speed are about 2-3mb/s - must be 200 more.

Connection is 900/300 mb.

 

Help me please. What is reason?

 

When i tested iperf3 i have:

 

 

Like set -u preferred UDP and -b bandwith eg 100mb

 

 

It looks like that's going on.

One more test by setting the socket buffer size.

 

 

What settings must be for the best speed. Hmm.. MTU . MSS ??

 

  0      
  0      
#1
Options
19 Reply
Re:IPSEC VPN Very Slowly Speed
2023-06-26 11:30:09

  @grax 

sorry to disappoint you but it's not better, I've replaced some of those with ER605v2, it's almost 10x faster, about 30MB/s
i have one still in LAB and i have tried everything but VPN is super slow.

 

  0  
  0  
#2
Options
Re:IPSEC VPN Very Slowly Speed
2023-06-26 11:36:12
Hmm, so the VPN works at 3mb/s max ? :D ?
  0  
  0  
#3
Options
Re:IPSEC VPN Very Slowly Speed
2023-06-26 11:40:22

  @grax 

 

VPN varies a lot, the speed goes up and down up and down when I copy a file it varies from 1-10MB/s but mostly around 2-3 MB/s
nice that you brought this up now, I asked TP-Link about this today, this is the answer I got

 

 

We have found the root cause of this.

The ER7206 v1 does not support SHA2 acceleration, that is why SHA2 is much slower than SHA1.

We recommend using SHA1 on your ER7206 v1 instead, for better throughput.

 

Our next version of ER7206, the ER7206 v2 would have great performance in IPSec, up to 600/700Mbps, if you are interested, you may consider upgrading into the v2 version in the near future.

 

Thanks!

 

To be honest, it's probably not SHA1 acceleration either, it's almost as slow as SHA2

 

  0  
  0  
#4
Options
Re:IPSEC VPN Very Slowly Speed
2023-06-26 11:42:22
I have now SHA1 AES 256 and transfer 1-3 mb/s .... It`s all? :/
  0  
  0  
#5
Options
Re:IPSEC VPN Very Slowly Speed
2023-06-26 11:51:23 - last edited 2023-06-26 11:51:52

  @grax 

 

that's probably all you get, I've tried all possible settings for 2-3 years, it doesn't get much better than that.

did a test now, here is the result. SHA1-AES256-dh2

ER8411 VPN ER7206

  0  
  0  
#6
Options
Re:IPSEC VPN Very Slowly Speed
2023-06-26 11:54:37
I have same... hmm So what in specyfication this product write 290mb/s for IPSEC Tunnel..
  0  
  0  
#7
Options
Re:IPSEC VPN Very Slowly Speed
2023-06-26 11:56:30

  @grax 

 

it is simply wrong
here is a copy from Between ER8411 and ER605v2

SHA256-AES256-DH14 encryption

  0  
  0  
#8
Options
Re:IPSEC VPN Very Slowly Speed
2023-06-26 11:59:28
SHA256? SHA1 or 2 :) Maybe i change on DH14 and will be better ?
  0  
  0  
#9
Options
Re:IPSEC VPN Very Slowly Speed
2023-06-26 12:02:34

  @grax 

You can try :-) 

 

This is settings I use on ER605v2 

  0  
  0  
#10
Options
Re:IPSEC VPN Very Slowly Speed
2023-06-26 12:04:13 - last edited 2023-06-26 12:04:24

I have`t SHA256 only SHA1 or 2 hmm

  0  
  0  
#11
Options