topic Re: Maximum Upload/Download Bandwith for VPN Client in SASE and Remote Access

Maximum Upload/Download Bandwith for VPN Client

Jan_Kleinhans — Fri, 11 Jun 2021 06:33:22 GMT

Hello,

does anybody know if there is a maximum speed that the VPN Client can handle?

My Home Internet has 300/50 MBit/s but VPN Client seems to be capped at 100MBit/s. The Checkpoint Firewall itself has a 10GBit/s internet connection. This is not realy a problem at the moment but as bandwith needs are growing.....

Regards,

Jan

Re: Maximum Upload/Download Bandwith for VPN Client

PhoneBoy — Mon, 14 Jun 2021 04:13:20 GMT

The question is: how are you testing it?

Re: Maximum Upload/Download Bandwith for VPN Client

Jan_Kleinhans — Mon, 14 Jun 2021 05:45:01 GMT

Sorry to not have mentioned it. I am using https://github.com/librespeed/speedtest

This produces nearly 1GBit/s when connected to the local network. With VPN only 100MBit/s. With iperf3 I also get under 100MBit/s. So I thought about a hardcoded limit in VPN client.

Regards,

Jan

Re: Maximum Upload/Download Bandwith for VPN Client

PhoneBoy — Mon, 14 Jun 2021 05:50:36 GMT

Unless you're doing a test across multiple destination IPs, you're hitting a single processor core, which will naturally limit the amount of throughput.
I don't believe there is a hardcoded limit, but there may be an architectural limitation somewhere.

Re: Maximum Upload/Download Bandwith for VPN Client

russatcityuol — Tue, 12 Mar 2024 15:45:03 GMT

Hi, Did you find a resolution to this at all? We're currently seeing the same with our Remote Access VPN clients on our 16000's running R81. Thanks.

Re: Maximum Upload/Download Bandwith for VPN Client

PhoneBoy — Wed, 13 Mar 2024 00:29:29 GMT

From E86.60, we will leverage AES-NI processor support (if compatible AES settings are used), which should improve performance somewhat.
However, I believe we are still limited to a single processor core on the client side, which will limit the overall throughput possible.
This isn't expected to be addressed in the near term.