35-40% performance drop releng9 vs releng10 openvpn

[Holger Kipp]

Dear all,

> On 18.03.2015, at 23:41, "Matt Smith" <fbsd at xtaz.co.uk> wrote:
>
>> On Mar 18 18:28, Mike Tancsa wrote:
>>> On 3/18/2015 5:14 PM, John-Mark Gurney wrote:
>>> As I've never used OpenVPN before and their docs don't go into saying
>>> what it's using.. Is OpenVPN a kernel or userland VPN?  Do they use
>>> IPSec in the kernel? or are they just using UDP or TCP for their
>>> connections?
>>
>> All in userland.  I use UDP for the transport, and it uses OpenSSL in the base for the crypto.  In this case, AES-128-CBC.  There is no hardware assist on the APU either to offload the AES.
>
> Isn't OpenSSL in the base on releng9 the 0.9.8 version whereas in releng10 it's the 1.0.1 version? This could make a significant difference. I've heard rumours before that the newer version is a lot slower but I've never had cause to believe it.

Quick search brought up

https://www.stunnel.org/pipermail/stunnel-users/2013-April/004176.html

so I'd second using same program versions and only change OS or vice versa (so we aren't comparing apples to minced meat ;-)

Best regards,
Holger


__________________________________________________________

Holger Kipp
Diplom-Mathematiker
Senior Consultant

Tel. : +49 30 436 58 114
Fax. : +49 30 436 58 214
Mobil: +49 178 36 58 114
Email: holger.kipp at alogis.com

alogis AG
Alt-Moabit 90b
D-10559 Berlin

http://www.alogis.com
__________________________________________________________

alogis AG
Sitz/Registergericht: Berlin/AG Charlottenburg, HRB 71484
Vorstand: Arne Friedrichs, Joern Samuelson
Aufsichtsratsvorsitzender: Reinhard Mielke