IKEv2 - M270 Best Performance
I would like to hear some real world results as to best case performance on the M270 with Mobile VPN using IKEv2. I have been testing a really basic setup and iperf3 with 2-10 streams gives me a max of 40Mbps up or down. If I setup an VPN with Ubiquiti Dream Machine I am able to double my speed using wireguard or some other VPN software so I know it is not my internet. I have no Qos policies applied. I would like to understand what the M270 is capable on a single VPN connection. The iMIX on the spec sheet says it can do 480 but does a single VPN connection get limited by a single thread on the device if specific security settings are applied?
0
Sign In to comment.
Comments
"Research from Nord Security finds that the NordLynx VPN protocol can ramp up to 1200 Mbps, while IKEv2 only reaches 600 Mbps, and OpenVPN manages a best-recorded speed of 400 Mbps."
NordLynx is NordVPN's version of Wireguard.
https://nordlayer.com/learn/vpn/protocols-comparison/
"WireGuard is twice as fast as OpenVPN, if implemented correctly."
A number of site suggest that OenVPN and IKEv2 have similar throughputs.
https://www.top10vpn.com/guides/wireguard-vs-openvpn/
Latency is a significant issue with IKE.
This article explains how to calculate what the max throughput should be based on latency, link speed, and TCP window size.
How to Calculate TCP throughput for long distance WAN links http://bradhedlund.com/2008/12/19/how-to-calculate-tcp-throughput-for-long-distance-links/
Review this post where latency is discussed:
What are “Expected” IKEv2 Mobile VPN speeds with Firebox T40?
https://community.watchguard.com/watchguard-community/discussion/comment/12825