is an 800Mhz dual core router enough to process 120mbits of bandwith over openvpn?

Solution
Throughput on VPN is a extremely tricky thing to estimate. It is greatly affected by the number of open sessions much more than the total throughput. It also is affected by the packet sizes since it pretty much takes as much cpu power to deal with a 64byte packet as a 1500 byte packets so if you have lots of small data packets it can kill a session much faster than less large ones. The encryption method also affectes the processor load. SSLVPN take a lot more than IPSEC using AES.

Pretty much this is why enterprise firewalls costs so much money, they contain specially built encryption processors....much like a pc has special video processors for high end graphics.

Most tests I have seen on consumer router based processors cap...


I beg your pardon?

What is it you are trying to say?
 


Sorry, I forgot to say thanks for your reply. Unfortunately I still am puzzled by your post.
 


Probably not.

Most consumer routers have fine LAN switching power (this is what's usually marketed, ala "gigabit router") because this is typically performed by an ASIC. The same router may have substantially slower LAN<->WAN routing power as this requires inspecting and modifying each Ethernet frame. The recent introduction of high speed DOCSIS and ADSL revisions has necessitated the introduction of consumer grade routers with more capable LAN<->WAN routing, so routers that are capable of 250mbps are readily available. However, VPN introduces an additional arithmetically hungry cryptographic layer. Cisco's RV042 lineup of small business routers is designed with VPN in mind and the newer revisions top out at around 40-50mbps using IPSec and around 10mbps using PPTP. I find it extremely unlikely that a device not intended for VPN would be able to match this much less exceed it.
 


Thanks so much for your reply. Where could I find a device that could dedicate itself to being an OpenVPN client, so that all devices on my LAN could connect through it? Or what would be the best solution?
 
Throughput on VPN is a extremely tricky thing to estimate. It is greatly affected by the number of open sessions much more than the total throughput. It also is affected by the packet sizes since it pretty much takes as much cpu power to deal with a 64byte packet as a 1500 byte packets so if you have lots of small data packets it can kill a session much faster than less large ones. The encryption method also affectes the processor load. SSLVPN take a lot more than IPSEC using AES.

Pretty much this is why enterprise firewalls costs so much money, they contain specially built encryption processors....much like a pc has special video processors for high end graphics.

Most tests I have seen on consumer router based processors cap vpn out at 50-60m but it depends greatly on the test parameters. You would have to use a more general purpose pc type of machine that has faster processors.
 
Solution