OpenVPN site-to-site throughput


#1

Hello, set up a site-to-site OpenVPN tunnel between two VyOS Amazon AMI’s using their public IP’s as endpoints. Both instances are in US-East-1. Is it normal to see this different of throughput?

Using Iperf on Vyos (inside tunnel)
[ 3] local 10.25.1.11 port 38892 connected with 10.25.1.10 port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0- 5.0 sec 29.0 MBytes 48.7 Mbits/sec
[ 3] 5.0-10.0 sec 29.2 MBytes 49.0 Mbits/sec
[ 3] 10.0-15.0 sec 29.4 MBytes 49.3 Mbits/sec
[ 3] 15.0-20.0 sec 29.4 MBytes 49.4 Mbits/sec
[ 3] 0.0-20.0 sec 117 MBytes 49.1 Mbits/sec

Using Iperf on Vyos (outside tunnel)
[ 3] local 172.16.2.102 port 33456 connected with 52.X.X.X port 5001
[ ID] Interval Transfer Bandwidth
[ 3] 0.0- 5.0 sec 271 MBytes 455 Mbits/sec
[ 3] 5.0-10.0 sec 166 MBytes 279 Mbits/sec
[ 3] 10.0-15.0 sec 168 MBytes 281 Mbits/sec
[ 3] 15.0-20.0 sec 168 MBytes 281 Mbits/sec
[ 3] 0.0-20.0 sec 773 MBytes 324 Mbits/sec

VyOS 1.1.7 on both instances
Currently running on 2 m3.mediums (attempted larger and smaller instance types)
Attempted 3DES/SHA-512 and AES-256/SHA-512

Config sample:
openvpn vtun1 {
description “AMI 1 to AMI 2”
encryption 3des
hash sha512
local-address 10.25.1.41 {
}
local-port 9200
mode site-to-site
remote-address 10.25.1.40
remote-host 53.x.x.x
remote-port 9200
shared-secret-key-file /config/auth/mykey.psk

Any tips would be greatly appreciated!