[strongSwan] Performance (latency) in a Hub and Spoke setup

Martin Sand dborn at gmx.net
Thu Dec 14 13:41:31 CET 2017

Hi all

I have a Hub and Spoke setup. Connections are working perfectly fine.
Throughput is almost reaching the maximum rate of the upload channel 
speed, 10 MBit/s.

Unfortunately the latency is not fulfilling my objectives. I have an 
average ping time of 39 ms (see below) when pinging clients on other spokes.
VPN internal http requests to a web server of another spoke take some 
time until the page is rendered.
I assume this is due to the latency.

Is there any chance to improve the latency? Or is the latency perfectly 

Best regards

Hub internet address
64 bytes from vpn.example.com ( icmp_seq=1 ttl=57 time=15.2 ms

Internal address of Hub
PING ( 56(84) bytes of data.
64 bytes from icmp_seq=1 ttl=62 time=40.4 ms

Client on another spoke
PING ( 56(84) bytes of data.
64 bytes from icmp_seq=1 ttl=61 time=108 ms
64 bytes from icmp_seq=2 ttl=61 time=41.8 ms
64 bytes from icmp_seq=3 ttl=61 time=38.0 ms
64 bytes from icmp_seq=4 ttl=61 time=35.2 ms
64 bytes from icmp_seq=5 ttl=61 time=36.4 ms
64 bytes from icmp_seq=6 ttl=61 time=39.1 ms
64 bytes from icmp_seq=7 ttl=61 time=38.1 ms
64 bytes from icmp_seq=8 ttl=61 time=41.6 ms
64 bytes from icmp_seq=9 ttl=61 time=36.0 ms
64 bytes from icmp_seq=10 ttl=61 time=36.7 ms

--- ping statistics ---
10 packets transmitted, 10 received, 0% packet loss, time 9013ms
rtt min/avg/max/mdev = 35.295/45.159/108.281/21.146 ms

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20171214/27579b80/attachment.html>

More information about the Users mailing list