Forum Discussion
Slow Speed through APM SSL VPN Even With DTLS
I still don't think that's good enough on iPerf. You're still losing 90% of your bandwidth.
I came here looking for recent known issues with speed on APM. I've had us on DTLS for a long time now, and things were looking pretty good early on, but lately things have slowed down. I'm going to try to reboot our BigIP... but.. I don't know.
- Nov 16, 2018
Hey DBornack
Actually I'm not loosing 90% of the speed on iPerf, more like 40% if I'm using rough numbers seeing that I have a 100Mbit line that I'm passing the traffic through.
Interesting enough, when performing iPerf directly over the Internet I'm getting worse speeds. Check this out:
iPerf results over Internet
Over VPNiperf3.exe -c -p 2222 Connecting to host port 2222 [ 4] local 10.100.6.27 port 1963 connected to port 2222 [ ID] Interval Transfer Bandwidth [ 4] 0.00-1.00 sec 1.62 MBytes 13.6 Mbits/sec [ 4] 1.00-2.00 sec 6.25 MBytes 52.3 Mbits/sec [ 4] 2.00-3.00 sec 7.12 MBytes 59.9 Mbits/sec [ 4] 3.00-4.00 sec 7.38 MBytes 61.8 Mbits/sec [ 4] 4.00-5.00 sec 5.25 MBytes 44.1 Mbits/sec [ 4] 5.00-6.00 sec 6.00 MBytes 50.3 Mbits/sec [ 4] 6.00-7.00 sec 5.12 MBytes 43.1 Mbits/sec [ 4] 7.00-8.00 sec 7.50 MBytes 62.9 Mbits/sec [ 4] 8.00-9.00 sec 8.12 MBytes 68.2 Mbits/sec [ 4] 9.00-10.00 sec 6.00 MBytes 50.2 Mbits/sec - - - - - - - - - - - - - - - - - - - - - - - - - [ ID] Interval Transfer Bandwidth [ 4] 0.00-10.00 sec 60.4 MBytes 50.6 Mbits/sec sender [ 4] 0.00-10.00 sec 60.3 MBytes 50.6 Mbits/sec receiver iperf Done.
iperf3.exe -c 10.10.15.10 -p 2222 Connecting to host 10.10.15.10, port 2222 [ 4] local 10.10.10.212 port 1778 connected to 10.10.15.10 port 2222 [ ID] Interval Transfer Bandwidth [ 4] 0.00-1.00 sec 6.12 MBytes 51.4 Mbits/sec [ 4] 1.00-2.00 sec 8.00 MBytes 67.1 Mbits/sec [ 4] 2.00-3.00 sec 7.50 MBytes 62.8 Mbits/sec [ 4] 3.00-4.00 sec 7.75 MBytes 65.1 Mbits/sec [ 4] 4.00-5.00 sec 8.12 MBytes 68.2 Mbits/sec [ 4] 5.00-6.00 sec 7.50 MBytes 62.9 Mbits/sec [ 4] 6.00-7.00 sec 8.25 MBytes 69.2 Mbits/sec [ 4] 7.00-8.00 sec 7.38 MBytes 61.9 Mbits/sec [ 4] 8.00-9.00 sec 8.38 MBytes 70.3 Mbits/sec [ 4] 9.00-10.00 sec 7.50 MBytes 62.9 Mbits/sec - - - - - - - - - - - - - - - - - - - - - - - - - [ ID] Interval Transfer Bandwidth [ 4] 0.00-10.00 sec 76.5 MBytes 64.2 Mbits/sec sender [ 4] 0.00-10.00 sec 76.5 MBytes 64.2 Mbits/sec receiver iperf Done.
And when going directly I have actually less hops since I'm going straight from my Juniper firewall directly to the iPerf server.
I did some more thourough Speedtest, both from a local server in network out on the Internet and over my VPN to the Internet. I got the following results:
Local Server Towards - FiberbyApS CopenhagenVPN Client DTLS Towards - FiberbyApS Copenhagen
VPN Speed Loss - Download: -21% Upload: -21%
Local Server Towards - FibiaPS TaastrupVPN Client DTLS Towards - FibiaPS Taastrup
VPN Speed Loss Download: -18% Upload: -21%
Local Server Towards - TDC Group CopenhagenVPN Client DTLS Towards - TDC Group Copenhagen
VPN Speed Loss Download: -36% Upload: -28%
In most cases I lost on average 20% in both upload and download. But with that you'll have to take into consideration that my traffic must first leave my office, pass through my equipment at home, out to the speedtest servers and back all the way in addition to adding encryption. So a 20% loss is not something I see as a shock. Perhaps if I were to tweak my settings I could get those numbers up a bit.
But there are many factors to take into consideration, the amount of hops to get to my home environment, packet loss on the way etc. Like for instance, how can one speed test result in a almost 40% loss while others give me only 18%.
Have you run similar tests in your environment? It would be interesting to see if someone is getting worse/better numbers.
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com