My process / notes are below, I was trying to determine best OpenVPN config for APU1D4.
Notes and process are below, but I landed on AES-256-CBC, SHA-256, DH 2048 with RSA HW Acceleration. The OS is pfSense 2.2-RELEASE amd64.
With the above settings, from host to host, I saw large file transfer speeds of 1.5-4.3 MB/s. (4 MB/s = 32Mb/s)
Speedtest.net through this VPN showed an average of 25 Down/ 15 Up
__________
OpenVPN – UDP – APU1D4
Configure VPN, restart server. Reconfig Client, connect.
Transfer ISO – Results from observation:
HW acceleration (Don’t even know if it is supported) ON – BSD
__________
Cipher , MSG , DH, Throughput(MBps), CPU usage
AES-256-CBC, SHA-256, DH 1024 – 1.5-3.2, 51-67%
AES-256-CBC, SHA-256, DH 2048 – 3-3.5, 60-67%
AES-256-CBC, SHA-256, DH 4096 – 2.9-2.9, 60-61%
AES-256-OFB, SHA-256, DH 2048 – 1-4.10, 19-44-60%
AES-256-CFB, SHA-256, DH 2048 – 2.2-3.4, 60-63%
AES-256-CFB1, SHA-256, DH 2048 – HOSED 355k,- 51%
AES-256-CFB8, SHA-256, DH 2048 – HOSED, NOTHING – 51%
AES-128-CBC, SHA-256, DH 2048 – 1.8-4.7, 50-95%
AES-192-CBC, SHA-256, DH 2048 – 1.5-4.5, 46-63%
BF-128-CBC, SHA-256, DH 2048 – 1.8-4.2, 60-68%
##Chose AES-256-CBC after reading / testing
#AES-256-CBC, SHA-256, DH 2048 – 3-3.5, 60-67%
AES-256-CBC, SHA-512, DH 2048 – 1.5-4.2, 15-62%
AES-256-CBC, SHA-512, DH 4096 – 2.4-3.2, 63-73%
(speed fluctuates more after a bit (UDP?))
#Landed on
#AES-256-CBC, SHA-256, DH 2048 – 3-3.5, 60-67%
#Retesting
AES-256-CBC, SHA-256, DH 2048 – 2.4-2.9, 1.2-4.8, 57-65%
#Turning off HW acceleration (Don’t even know if it is supported).
#Retesting
AES-256-CBC, SHA-256, DH 2048 – 2-3.5, 60-64%
#Trying with other RSA accelleration setting:
#Retesting – RSA HW Accelleration
AES-256-CBC, SHA-256, DH 2048 – 1.5-4.3, 15-43-63%
#Retesting – TCP – RSA HW Accelleration
AES-256-CBC, SHA-256, DH 2048 – , % ** wouldn’t connect on 8.1 Pro. (even after quick troubleshooting)
____
Speed test results:
Speedtest.net
RCN:
Without openVPN: 70.17/8.28, 48.14/6.96, 47.61/6.88
With chosen openvpn: 26.51/15.28, 30.99/15.35, 25.03/15
Comcast:
Without openVPN: 48.58/15.59, 52.12/22.51, 58.41/15.37
With chosen openvpn: 42.59/20.36, 21.32/15.39, 24.3/15.37
