<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<span class=""></span><span class="">Hi All,</span><span class=""><br class="">
I’ve setup strongSwan on two AWS instances (London & North Virginia) and after running some tests I’ve found that parallelisation does not seem to significantly speed up the broadcast rate, here are my test specs:<br class="">
</span><span class=""><br class="">
</span><span class="">The test:<br class="">
</span><span class=""><br class="">
</span><span class="">Run iperf tests to see the bandwidth<br class="">
</span><span class="">To make sure you’re not throttled by iperf, run with up to 10 threads (so one test with 1 thread, one test with two threads and so on).<br class="">
</span><span class="">Run each iperf test for 60 seconds at a packet size of 1500<br class="">
</span><span class=""><br class="">
</span><span class="">Run this test for standard packets (no VPN), standard strongSwan (VPN from Private IP to Private IP no parallelisation) and parallel strongSwan (VPN from Private IP to Private IP with parallelisation).<br class="">
</span><span class=""><br class="">
</span><span class="">Parallelisation is induced with crconf as described in the strongSwan parallelisation page (modprobe crypt and then crconf add driver "pcrypt(authenc(hmac(sha256),cbc(aes)))" type 3).</span>
<div class=""><span class=""><br class="">
</span></div>
<div class=""><span class=""><br class="">
</span></div>
<div class=""><span class="">Run these tests for two sizes of instances (by this I mean run tests between two of the same size):</span></div>
<div class="">
<ol class="MailOutline">
<li class="">t2.medium (2 cores)</li><li class="">c4.8xlarge (36 cores)</li></ol>
<div class=""><br class="">
</div>
</div>
<div class="">The results were then logged in this spreadsheet: <a href="https://docs.google.com/spreadsheets/d/1bgLkkzabw93hUK86gRdWqHfxn0YaE5S2l6DW36VaO3o/edit?usp=sharing" class="">
https://docs.google.com/spreadsheets/d/1bgLkkzabw93hUK86gRdWqHfxn0YaE5S2l6DW36VaO3o/edit?usp=sharing</a></div>
<div class=""><br class="">
</div>
<div class="">As you can see from the spreadsheet, there seems to be no reason to use parallel strongSwan on AWS servers, is this an issue with AWS (as when I’ve run these tests locally parallelisation is significantly faster) or is it a problem with the version
of strongSwan I’m using (<span style="font-family: Menlo; font-size: 11px; background-color: rgb(255, 255, 255);" class="">strongSwan U5.5.2/K4.4.0-1020-aws</span>)</div>
<div class=""><br class="">
</div>
<div class="">Any advice is greatly appreciated and I’m happy to add extra information to this thread tomorrow (I’m on BST).</div>
<div class=""><br class="">
</div>
<div class="">Kind Regards</div>
<div class="">Nicholas Fitton</div>
</div>
</body>
</html>