Please notice that advertising helps us to cover the cost of hosting the project.
If you find these ads displayed intrusive or inappropriate, please contact the webmaster.
VPN throughput not sufficient for HD streaming
Re: VPN throughput not sufficient for HD streaming #61
Re: VPN throughput not sufficient for HD streaming #62
Re: VPN throughput not sufficient for HD streaming #63
Posted 10 December 2016 - 10:05
root@vuuno4k:~# openssl speed -evp aes-128-cbc Doing aes-128-cbc for 3s on 16 size blocks: 12894632 aes-128-cbc's in 2.97s Doing aes-128-cbc for 3s on 64 size blocks: 3618516 aes-128-cbc's in 2.99s Doing aes-128-cbc for 3s on 256 size blocks: 955382 aes-128-cbc's in 2.98s Doing aes-128-cbc for 3s on 1024 size blocks: 242240 aes-128-cbc's in 2.98s Doing aes-128-cbc for 3s on 8192 size blocks: 30377 aes-128-cbc's in 2.98s OpenSSL 1.0.2a 19 Mar 2015 built on: reproducible build, date unspecified options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) idea(int) blowfish(ptr) compiler: arm-oe-linux-gnueabi-gcc -march=armv7-a -mfloat-abi=hard -mfpu=neon --sysroot=/media/build/vti-dorie/build/tmp/sysroots/vuuno4k -I. -I.. -I../include -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 69466.03k 77453.19k 82073.08k 83239.52k 83506.17k
root@vuuno4k:~# openssl speed -evp aes-256-cbc Doing aes-256-cbc for 3s on 16 size blocks: 10030421 aes-256-cbc's in 2.97s Doing aes-256-cbc for 3s on 64 size blocks: 2721730 aes-256-cbc's in 2.98s Doing aes-256-cbc for 3s on 256 size blocks: 707093 aes-256-cbc's in 2.98s Doing aes-256-cbc for 3s on 1024 size blocks: 178380 aes-256-cbc's in 2.98s Doing aes-256-cbc for 3s on 8192 size blocks: 22360 aes-256-cbc's in 2.97s OpenSSL 1.0.2a 19 Mar 2015 built on: reproducible build, date unspecified options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) idea(int) blowfish(ptr) compiler: arm-oe-linux-gnueabi-gcc -march=armv7-a -mfloat-abi=hard -mfpu=neon --sysroot=/media/build/vti-dorie/build/tmp/sysroots/vuuno4k -I. -I.. -I../include -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-256-cbc 54035.94k 58453.26k 60743.56k 61295.68k 61674.45k
Vu+ Ultimo 4K (OpenPLI-9.0) :: 1x DVB-C FBC :: ZIGGO
Vu+ Ultimo 4K (OpenPLI-9.0) :: 1x DVB-C FBC + 1x DVB-S2 FBC :: ZIGGO
Re: VPN throughput not sufficient for HD streaming #64
Re: VPN throughput not sufficient for HD streaming #65
Posted 10 December 2016 - 14:15
Dunno if anyone mentioned it...
I have improved home network streaming (3D and UHD files from a NAS) by replacing old CAT5 LAN cables with new CAT7 ones... At £2 - 5 a piece it's not a big expense but it prevents needless problems, from my experience...
Re: VPN throughput not sufficient for HD streaming #66
Posted 10 December 2016 - 18:08
They by no means reflect real world performance, for that one needs to test in a real world scenario.
1. Hardware crypto support (AES-NI) disabled:
env OPENSSL_ia32cap=0 openssl speed -elapsed -evp aes-256-cbc -multi 8
evp 97659.74k 117140.11k 123383.16k 307494.50k 339199.79k
CPU user 99-100% on all cores
CPU kernel 0-0,3% on all cores
2. Hardware crypto support (AES-NI) enabled:
Compare 1 and 2. Improved performance using hardware crypto support (AES-NI)openssl speed -elapsed -evp aes-256-cbc -multi 8
evp 618920.09k 882027.93k 1003271.00k 1041262.20k 1150214.31k
CPU user 98-100% on all cores
CPU kernel 0-0,3% on all cores
3. Hardware crypto support (AES-NI) and hmac-sha1 (Hashing)
Compare 2 and 3. Decreased performance when including SHA1 HMAC.openssl speed -elapsed -evp aes-256-cbc-hmac-sha1 -multi 8
evp 214362.25k 408669.56k 440537.10k 468988.33k 505701.81k
CPU user 98-100% on all cores
CPU kernel 0-0,3% on all cores
In case of OpenVPN, as a minimum one wants data to be encrypted, determined by the cipher directive.
Lowering cipher to AES-128-CBC will help somewhat.
One could also disable the hashing (auth none), determined by the auth directive, for data packets to take away load from CPU.
Even though our set-top-boxes generally do not support AES-NI, we will still somewhat benefit from AES-GCM when OpenVPN 2.4 becomes available end of December...
Re: VPN throughput not sufficient for HD streaming #67
Posted 14 December 2016 - 20:44
root@vuultimo4k:~# openssl speed -evp aes-128-cbc Doing aes-128-cbc for 3s on 16 size blocks: 11188077 aes-128-cbc's in 2.98s Doing aes-128-cbc for 3s on 64 size blocks: 3173450 aes-128-cbc's in 2.97s Doing aes-128-cbc for 3s on 256 size blocks: 838157 aes-128-cbc's in 2.98s Doing aes-128-cbc for 3s on 1024 size blocks: 212530 aes-128-cbc's in 2.98s Doing aes-128-cbc for 3s on 8192 size blocks: 26646 aes-128-cbc's in 2.98s OpenSSL 1.0.2a 19 Mar 2015 built on: reproducible build, date unspecified options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) idea(int) blowfish(ptr) compiler: arm-oe-linux-gnueabi-gcc -march=armv7-a -mfloat-abi=hard -mfpu=neon --sysroot=/media/build/vti-dorie/build/tmp/sysroots/vuultimo4k -I. -I.. -I../include -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-128-cbc 60070.21k 68384.11k 72002.75k 73030.44k 73249.68k
root@vuultimo4k:~# openssl speed -evp aes-256-cbcDoing aes-256-cbc for 3s on 16 size blocks: 8769350 aes-256-cbc's in 2.99s Doing aes-256-cbc for 3s on 64 size blocks: 2388097 aes-256-cbc's in 2.97s Doing aes-256-cbc for 3s on 256 size blocks: 620325 aes-256-cbc's in 2.99s Doing aes-256-cbc for 3s on 1024 size blocks: 156607 aes-256-cbc's in 2.97s Doing aes-256-cbc for 3s on 8192 size blocks: 19621 aes-256-cbc's in 2.98s OpenSSL 1.0.2a 19 Mar 2015 built on: reproducible build, date unspecified options:bn(64,32) rc4(ptr,char) des(idx,cisc,16,long) aes(partial) idea(int) blowfish(ptr)compiler: arm-oe-linux-gnueabi-gcc -march=armv7-a -mfloat-abi=hard -mfpu=neon --sysroot=/media/build/vti-dorie/build/tmp/sysroots/vuultimo4k -I. -I.. -I../include -fPIC -DOPENSSL_PIC -DOPENSSL_THREADS -D_REENTRANT -DDSO_DLFCN -DHAVE_DLFCN_H -DL_ENDIAN -DTERMIO -Os -pipe -g -feliminate-unused-debug-types -Wall -Wa,--noexecstack -DHAVE_CRYPTODEV -DUSE_CRYPTODEV_DIGESTS -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DAES_ASM -DBSAES_ASM -DGHASH_ASM The 'numbers' are in 1000s of bytes per second processed. type 16 bytes 64 bytes 256 bytes 1024 bytes 8192 bytes aes-256-cbc 46926.29k 51460.68k 53111.44k 53995.14k 53938.00k
Edited by WanWizard, 14 December 2016 - 21:51.
fixed formatting
Vu+ Ultimo 4K (OpenPLI-9.0) :: 1x DVB-C FBC :: ZIGGO
Vu+ Ultimo 4K (OpenPLI-9.0) :: 1x DVB-C FBC + 1x DVB-S2 FBC :: ZIGGO
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users