Slow Speed through APM SSL VPN Even With DTLS

Hey DBornack

Actually I'm not loosing 90% of the speed on iPerf, more like 40% if I'm using rough numbers seeing that I have a 100Mbit line that I'm passing the traffic through.

Interesting enough, when performing iPerf directly over the Internet I'm getting worse speeds. Check this out:

iPerf results over Internet

   iperf3.exe -c  -p 2222
    Connecting to host port 2222
    [  4] local 10.100.6.27 port 1963 connected to port 2222
    [ ID] Interval           Transfer     Bandwidth
    [  4]   0.00-1.00   sec  1.62 MBytes  13.6 Mbits/sec
    [  4]   1.00-2.00   sec  6.25 MBytes  52.3 Mbits/sec
    [  4]   2.00-3.00   sec  7.12 MBytes  59.9 Mbits/sec
    [  4]   3.00-4.00   sec  7.38 MBytes  61.8 Mbits/sec
    [  4]   4.00-5.00   sec  5.25 MBytes  44.1 Mbits/sec
    [  4]   5.00-6.00   sec  6.00 MBytes  50.3 Mbits/sec
    [  4]   6.00-7.00   sec  5.12 MBytes  43.1 Mbits/sec
    [  4]   7.00-8.00   sec  7.50 MBytes  62.9 Mbits/sec
    [  4]   8.00-9.00   sec  8.12 MBytes  68.2 Mbits/sec
    [  4]   9.00-10.00  sec  6.00 MBytes  50.2 Mbits/sec
    - - - - - - - - - - - - - - - - - - - - - - - - -
    [ ID] Interval           Transfer     Bandwidth
    [  4]   0.00-10.00  sec  60.4 MBytes  50.6 Mbits/sec                  sender
    [  4]   0.00-10.00  sec  60.3 MBytes  50.6 Mbits/sec                  receiver

    iperf Done.

Over VPN

iperf3.exe -c 10.10.15.10 -p 2222
Connecting to host 10.10.15.10, port 2222
[  4] local 10.10.10.212 port 1778 connected to 10.10.15.10 port 2222
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-1.00   sec  6.12 MBytes  51.4 Mbits/sec
[  4]   1.00-2.00   sec  8.00 MBytes  67.1 Mbits/sec
[  4]   2.00-3.00   sec  7.50 MBytes  62.8 Mbits/sec
[  4]   3.00-4.00   sec  7.75 MBytes  65.1 Mbits/sec
[  4]   4.00-5.00   sec  8.12 MBytes  68.2 Mbits/sec
[  4]   5.00-6.00   sec  7.50 MBytes  62.9 Mbits/sec
[  4]   6.00-7.00   sec  8.25 MBytes  69.2 Mbits/sec
[  4]   7.00-8.00   sec  7.38 MBytes  61.9 Mbits/sec
[  4]   8.00-9.00   sec  8.38 MBytes  70.3 Mbits/sec
[  4]   9.00-10.00  sec  7.50 MBytes  62.9 Mbits/sec
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-10.00  sec  76.5 MBytes  64.2 Mbits/sec                  sender
[  4]   0.00-10.00  sec  76.5 MBytes  64.2 Mbits/sec                  receiver

iperf Done.

And when going directly I have actually less hops since I'm going straight from my Juniper firewall directly to the iPerf server.

I did some more thourough Speedtest, both from a local server in network out on the Internet and over my VPN to the Internet. I got the following results:

Local Server Towards - FiberbyApS Copenhagen

VPN Client DTLS Towards - FiberbyApS Copenhagen

VPN Speed Loss - Download: -21% Upload: -21%

Local Server Towards - FibiaPS Taastrup

VPN Client DTLS Towards - FibiaPS Taastrup

VPN Speed Loss Download: -18% Upload: -21%

Local Server Towards - TDC Group Copenhagen

VPN Client DTLS Towards - TDC Group Copenhagen

VPN Speed Loss Download: -36% Upload: -28%

In most cases I lost on average 20% in both upload and download. But with that you'll have to take into consideration that my traffic must first leave my office, pass through my equipment at home, out to the speedtest servers and back all the way in addition to adding encryption. So a 20% loss is not something I see as a shock. Perhaps if I were to tweak my settings I could get those numbers up a bit.

But there are many factors to take into consideration, the amount of hops to get to my home environment, packet loss on the way etc. Like for instance, how can one speed test result in a almost 40% loss while others give me only 18%.

Have you run similar tests in your environment? It would be interesting to see if someone is getting worse/better numbers.