IPsec VPN bandwidth limit to 100mbps

Options
pieroCastampi
pieroCastampi Posts: 15 image  Freshman Member
First Comment
in Security 

Good morning. It seems the ATP200 has a 100 Mbps bandwidth limit for IPsec VPNs, even though I have a 1 Gbps fiber connection at both of my sites. How can I speed up the VPN? Thanks.

All Replies

  • PeterUK
    PeterUK Posts: 4,608 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    edited July 22
    Options

    Your likely hitting the limits of the hardware

    I take it you can get 1Gb fine without VPN?

    To test do a local VPN to the ATP200 and do speed test this way you can rule out ISP limiting

    you may find going to monitor settings > traffic statistics to uncheck Collect Statistics helps a bit

  • pieroCastampi
    pieroCastampi Posts: 15 image  Freshman Member
    First Comment
    Options
     

    Excuse me, how do I connect via a local VPN? I don't quite understand. Also, just so you know, both locations have a 1 Gbps fiber internet connection. Thanks.
  • Zyxel_Melen
    Zyxel_Melen Posts: 4,992 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Options

    Hi @pieroCastampi

    May you share how did you process the speed test? Additionally, you also need to share the hardware information of your test device since the IO performance can also affect the result.

    Zyxel Melen


  • pieroCastampi
    pieroCastampi Posts: 15 image  Freshman Member
    First Comment
    Options
     

    To clarify, these are two ATP200 units located at two different sites and connected via an IPsec VPN. I installed OpenSpeedTest on an HP ProLiant Gen10 server (running Windows Server 2019) at Site 1; from Site 2, I accessed that server via a web browser on a standard Windows 11 PC and ran the test. I also tried using iperf3 and obtained the same result. Thanks.
  • PeterUK
    PeterUK Posts: 4,608 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    edited July 23
    Options

    so this is a site to site?

    If you setup Remote Access (Server Role) you can test local then to internet this way it tests VPN traffic tunnel local then to internet thats not VPN traffic tunnel.

    With how internet speed test by multi thread is handled on the ATP200 CPU across its cores to give better speed the problem is a VPN is a single thread so speed as limited. If you do a test test sit to site and view the maintenance > Diagnostics > CPU/memory Status you likely see one CPU core at 100%

  • Zyxel_Melen
    Zyxel_Melen Posts: 4,992 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Options

    Hi @pieroCastampi

    Please help to clarify these information:

    1. Does any connecting port between the test server and test PC link on 100Mbps?
    2. What firmware version is your firewall?
    3. What VPN proposal did you set for the VPN on phase 1 & 2?
    Zyxel Melen


  • pieroCastampi
    pieroCastampi Posts: 15 image  Freshman Member
    First Comment
    Options

    Hi PeterUK

    Yes, it is a site-to-site VPN. I'm sorry, though—I can't quite figure out exactly what I need to do to run a reliable test.
Thanks anyway.
  • Zyxel_Melen
    Zyxel_Melen Posts: 4,992 image  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    Options

    Hi @pieroCastampi

    I did a local test with latest 5.42 patch 1 firmware and get better throughput than yours. Please try upgrade to the latest firmware if you confirmed the link speed on the test path are all 1G.

    Zyxel Melen


Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）