LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 03-09-2014, 11:02 AM   #1
Gil@LQ
Member
 
Registered: Apr 2010
Location: India /Hyderabad
Distribution: RedHat, CentOS
Posts: 273

Rep: Reputation: 1
openswan ipsec tunnel bandwidth is low compared to internet


Hi all,

i have created openswan ipsec tunnel between two branches, thing is when i test it using iperf over normal internet (between public ips)with out tunnel it is showing me bandwidth of 67 Mbps , but if i run the same iperf between private ips via ipsec tunnel it is only showing 28 or 30 Mbps. My itnernet speed is 100Mbps.

Please help me out how to get more bandwidth via ipsec tunnel.

Thanks in advance.
 
Old 03-11-2014, 02:16 PM   #2
nini09
Senior Member
 
Registered: Apr 2009
Posts: 1,880

Rep: Reputation: 162Reputation: 162
What's CPU usage when bandwidth using iperf over IPSec tunnel is tested?
 
Old 03-12-2014, 01:56 AM   #3
Gil@LQ
Member
 
Registered: Apr 2010
Location: India /Hyderabad
Distribution: RedHat, CentOS
Posts: 273

Original Poster
Rep: Reputation: 1
hi nini09,

no change normal as 0.1 % memory also.

thanks
 
Old 03-12-2014, 02:26 PM   #4
nini09
Senior Member
 
Registered: Apr 2009
Posts: 1,880

Rep: Reputation: 162Reputation: 162
Do you have data, ping response time over IPSec tunnel against public and private provider?
If no change after testing is started, that means that CPU wait something.
 
Old 01-14-2015, 02:54 AM   #5
hardikgohil1988
Member
 
Registered: Sep 2014
Posts: 63

Rep: Reputation: Disabled
Quote:
Originally Posted by Gil@LQ View Post
Hi all,

i have created openswan ipsec tunnel between two branches, thing is when i test it using iperf over normal internet (between public ips)with out tunnel it is showing me bandwidth of 67 Mbps , but if i run the same iperf between private ips via ipsec tunnel it is only showing 28 or 30 Mbps. My itnernet speed is 100Mbps.

Please help me out how to get more bandwidth via ipsec tunnel.

Thanks in advance.
Hello,

I am facing the same problem,hope you found the solution.

can you please me ...
 
Old 01-15-2015, 02:45 PM   #6
nini09
Senior Member
 
Registered: Apr 2009
Posts: 1,880

Rep: Reputation: 162Reputation: 162
What kind of tunnel do you use, KLIPS or Netkey?
 
Old 01-15-2015, 07:26 PM   #7
hardikgohil1988
Member
 
Registered: Sep 2014
Posts: 63

Rep: Reputation: Disabled
Quote:
Originally Posted by nini09 View Post
What kind of tunnel do you use, KLIPS or Netkey?
Jan 16 01:24:26 cpu6500v2 daemon.err ipsec_setup: Using NETKEY(XFRM) stack
 
Old 01-16-2015, 02:51 PM   #8
nini09
Senior Member
 
Registered: Apr 2009
Posts: 1,880

Rep: Reputation: 162Reputation: 162
It could be fragment issue or PATH MTU. How about KLIPS?
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
bandwidth is very low openswan ipsec tunnels Gil@LQ Linux - Networking 4 11-01-2013 04:47 PM
openswan ipsec tunnel pinging only one side. Gil@LQ Linux - Networking 0 09-21-2013 02:41 PM
Is it possible to Monitor the bandwidth utlization for ipsec tunnel ? winxandlinx Linux - Networking 1 08-10-2009 09:31 AM
SSH on an IPsec tunnel with Openswan freezes aixarat Linux - Networking 2 03-25-2009 02:18 AM
OpenSWAN - IPSec tunnel drops dieduster Linux - Networking 0 12-17-2006 10:07 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 01:16 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration