Virtual Private Networks Slow VPN performance

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Slow VPN performance Ed J 02-25-06
Posted by Ed J on February 25, 2006, 5:35 pm
Please log in for more thread options
Hi,

I am currently using two NetGear FVS318 VPN routers to connect my home with
my office. I'm accessing SMB-mapped drives at the office from my home, and
the performance is terrible. I have a broadband connection on both ends,
and normal internet performance is quite good, so I attribute the poor
performance to the slowness of the VPN.

The NetGear site states that the FVS318 router uses software encryption, and
can achieve a max throughput of 1.2 mbps for 3DES. Their FVS338 router
technical specs state that hardware encryption is used, and that it can
achieve VPN throughput of up to 60 mbps for 3DES. I don't know whether to
believe that number. It sounds too good for the money, and my broadband
connection is only a few megabits per second.

I have a few questions:

1. What is the likely source of the slow performance over the VPN? Is it
the software encryption in the FVS318?

2. Is there an economical (e.g., under $300) VPN router alternative with
good VPN encryption speed?

3. I am concerned about all the negative FVS338 router reviews that I see
on the web. Is it really that bad?

Thanks,

Ed



Posted by Simon on February 26, 2006, 5:15 am
Please log in for more thread options
Ed J wrote:
> Hi,
>
> I am currently using two NetGear FVS318 VPN routers to connect my home with
> my office. I'm accessing SMB-mapped drives at the office from my home, and
> the performance is terrible. I have a broadband connection on both ends,
> and normal internet performance is quite good, so I attribute the poor
> performance to the slowness of the VPN.
>
> The NetGear site states that the FVS318 router uses software encryption, and
> can achieve a max throughput of 1.2 mbps for 3DES. Their FVS338 router
> technical specs state that hardware encryption is used, and that it can
> achieve VPN throughput of up to 60 mbps for 3DES. I don't know whether to
> believe that number. It sounds too good for the money, and my broadband
> connection is only a few megabits per second.
>
> I have a few questions:
>
> 1. What is the likely source of the slow performance over the VPN? Is it
> the software encryption in the FVS318?
>
> 2. Is there an economical (e.g., under $300) VPN router alternative with
> good VPN encryption speed?
>
> 3. I am concerned about all the negative FVS338 router reviews that I see
> on the web. Is it really that bad?
>
> Thanks,
>
> Ed
>
>
Hi Ed,
What are the ping response times across the tunnel, how do they compare
with the ping times across the internet between the 2 sites. Also bear
in mind it's the upstream speed of the broadband connection that will
limit the data throughput, not the downstream one, quite often this is a
lot less.
simon

Posted by Ed J on February 27, 2006, 2:06 pm
Please log in for more thread options
Simon wrote:
> What are the ping response times across the tunnel, how do they compare
> with the ping times across the internet between the 2 sites. Also bear
> in mind it's the upstream speed of the broadband connection that will
> limit the data throughput, not the downstream one, quite often this is a
> lot less.

The average ping response across the internet is 34 ms, while the average
ping time within the VPN is 37 ms. Not too much difference there.

At one location, download speed is 4900 kbps, and upload is 660 kbps.
At the other location, download speed is 1300 kbps, and upload is 770 kbps.

I just ran file transfer tests through the VPN, and got about 700 kbps,
so I guess the upload speed is the big culprit, not the VPN performance.

Bummer. I was hoping for a one-time cost to improve performance, instead of
paying for a higher class of service.

Thanks,
Ed


> Ed J wrote:
> > Hi,
> >
> > I am currently using two NetGear FVS318 VPN routers to connect my home
with
> > my office. I'm accessing SMB-mapped drives at the office from my home,
and
> > the performance is terrible. I have a broadband connection on both
ends,
> > and normal internet performance is quite good, so I attribute the poor
> > performance to the slowness of the VPN.
> >
> > The NetGear site states that the FVS318 router uses software encryption,
and
> > can achieve a max throughput of 1.2 mbps for 3DES. Their FVS338 router
> > technical specs state that hardware encryption is used, and that it can
> > achieve VPN throughput of up to 60 mbps for 3DES. I don't know whether
to
> > believe that number. It sounds too good for the money, and my broadband
> > connection is only a few megabits per second.
> >
> > I have a few questions:
> >
> > 1. What is the likely source of the slow performance over the VPN? Is
it
> > the software encryption in the FVS318?
> >
> > 2. Is there an economical (e.g., under $300) VPN router alternative
with
> > good VPN encryption speed?
> >
> > 3. I am concerned about all the negative FVS338 router reviews that I
see
> > on the web. Is it really that bad?
> >
> > Thanks,
> >
> > Ed
> >
> >




Posted by Mike Drechsler - SPAM PROTECTE on February 27, 2006, 2:42 pm
Please log in for more thread options
Ed J wrote:
> Simon wrote:
>> What are the ping response times across the tunnel, how do they compare
>> with the ping times across the internet between the 2 sites. Also bear
>> in mind it's the upstream speed of the broadband connection that will
>> limit the data throughput, not the downstream one, quite often this is a
>> lot less.
>
> The average ping response across the internet is 34 ms, while the average
> ping time within the VPN is 37 ms. Not too much difference there.
>
> At one location, download speed is 4900 kbps, and upload is 660 kbps.
> At the other location, download speed is 1300 kbps, and upload is 770 kbps.
>
> I just ran file transfer tests through the VPN, and got about 700 kbps,
> so I guess the upload speed is the big culprit, not the VPN performance.
>
> Bummer. I was hoping for a one-time cost to improve performance, instead of
> paying for a higher class of service.
>
> Thanks,
> Ed

I guess you realize now that when one connection is downloading the
other has to be uploading so the lowest common denominator of bandwidth
will always be the limiting factor. If you are downloading at 700kbps
through the VPN then congratulations. It's working as well as can be
expected. It's not that the performance is terrible, you simply are
experiencing the reality that LAN's typically operate at 100Mbit and
your "high speed" Internet link is more than 100 times slower at less
than 1Mbit effective speed. It may be 100 times faster than dialup but
it would need to get 100 times faster to match your LAN at the office.


--
WARNING! Email address has been altered for spam resistance.
Please remove the -deletethispart-. section before replying directly.
Mike Drechsler (mike-newsgroup@-deletethispart-.upcraft.com)

Similar ThreadsPosted
Slow VPN performance February 25, 2006, 5:35 pm
Slow VPN - Please help! January 27, 2006, 1:25 pm
slow VPN... but not always... March 26, 2006, 5:30 am
VPN application slow March 21, 2005, 7:44 am
why is vpn slow when establishing secure connection? August 16, 2005, 5:50 pm
sql server and vpn: performance/speed June 1, 2005, 7:27 am
Encryption overheads and general performance qs June 29, 2005, 5:22 pm
Wireless Ipsec, GRE and L2TP (performance analysis) April 10, 2005, 11:42 am