Changes between Version 13 and Version 14 of Gigabit_Networks_Linux
- Timestamp:
- 05/02/11 13:14:00 (13 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Gigabit_Networks_Linux
v13 v14 96 96 (Please note that for all measurement a standard deviation of ~5% applies) 97 97 98 For the default Blowfish cipher the optimal value for the 'tun-mtu' parameters for a link between these two servers now seems to be '''36000''' bytes, although the difference for higher MTU sizes is minima mal. Also note that the performance numbers are nearly identical to those generated using the system OpenSSL 0.9.7e library.98 For the default Blowfish cipher the optimal value for the 'tun-mtu' parameters for a link between these two servers now seems to be '''36000''' bytes, although the difference for higher MTU sizes is minimal. Also note that the performance numbers are nearly identical to those generated using the system OpenSSL 0.9.7e library. 99 99 100 100 When using the AES-256 cipher there is huge performance gain. The optimal MTU value now is '''48000''' bytes, but overall performance increased by a factor of 2 for nearly all MTU sizes. … … 139 139 --tun-mtu 9000 --fragment 0 --mssfix 0 --cipher none --auth none 140 140 }}} 141 and client142 {{{143 openvpn --dev tun --proto udp --port 11000 --secret secret.key --ifconfig 192.168.222.10 192.168.222.11 --remote server144 --tun-mtu 9000 --fragment 0 --mssfix 0 --cipher none --auth none145 }}}146 141 Now an '''iperf''' result of '''930 Mbps''' is obtained, which shows that performance is not so much limited by the division between kernel-space and user-space processes, but mostly by the encryption and decryption routines as found in the OpenSSL libraries. 147 142