speed test between ipsec gateway peers

[asher]

Hello

we have multiple remote sites that all connected with site to site ipsec to central gateway.

all sites are connected with private ISP lines with different speeds.

before we connected the checkpoint clusters on each site we test line speed with 2 laptops and use IPERFv3 to test the speed.

there is any option to check speed with tools like iperf between gateways to central gateway ?

there is post that the test is made with wget to URL on External internet,

but here there is no external internet , so the spees can made only from gateways peers.

[HeikoAnkenbrand]

Hi @asher 

You can test with the IPERF tool from two private networks over the VPN tunnel!

IPERF <-->  FW Gateway 1   <==== VPN tunnel ====>    FW Gateway 2  <--> IPERF

What I find more interesting is what exactly you want to test. In principle, there are several performance metrics:

• Throughput (Bandwidth)
• Connection rate
• Packet rate
• Concurrent connections
• Latency

You can read more about performance metrics here:
R80.x - Gateway Performance Metrics 

[HeikoAnkenbrand · Accepted solution]

Use an server and a client.

Client IPERF          <-->             FW Gateway 1         <==== VPN tunnel ====>            FW Gateway 2        <-->         IPERF Server

Server side:

# iperv3 -s > iperv server

Client side:                                

# iperv3 -c <iperv server ip> -n 64                           > iperv client for small tcp packets
# iperv3 -c <iperv server ip> -u -n 64                      > iperv client for small udp packets
# iperv3 -c <iperv server ip> -u -n 1460                  > iperv client for large udp packets

[asher]

yes we already test it but we want to test it directly from peers , there is no any GAIA tools for that ?

[Daniel_]

Inside GAiA you can use nc. Untested(!) it should work like this

peer1
# nc -l listenserver-IPA 1024 >/dev/null

peer2
# dd if=/dev/urandom count=65535 bs=1500 | nc  listenserver-IPA 1024

[asher · Accepted solution]

its works but the syntax is little different

http://deice.daug.net/netcat_speed.html