35-40% performance drop releng9 vs releng10 openvpn
Matt Smith
fbsd at xtaz.co.uk
Wed Mar 18 22:40:39 UTC 2015
On Mar 18 18:28, Mike Tancsa wrote:
>On 3/18/2015 5:14 PM, John-Mark Gurney wrote:
>>As I've never used OpenVPN before and their docs don't go into saying
>>what it's using.. Is OpenVPN a kernel or userland VPN? Do they use
>>IPSec in the kernel? or are they just using UDP or TCP for their
>>connections?
>
>All in userland. I use UDP for the transport, and it uses OpenSSL in
>the base for the crypto. In this case, AES-128-CBC. There is no
>hardware assist on the APU either to offload the AES.
>
Isn't OpenSSL in the base on releng9 the 0.9.8 version whereas in
releng10 it's the 1.0.1 version? This could make a significant
difference. I've heard rumours before that the newer version is a lot
slower but I've never had cause to believe it.
It could be worth installing OpenSSL from the ports system on the
releng9 box and reinstalling OpenVPN so that it links against it. Then
they will both be on 1.0.1. Could be an interesting test?
--
Matt
More information about the freebsd-stable
mailing list