Tinc VPN: Secure Private Network Between Hosts

Re:Tinc VPN: Secure Private Network Between Hosts by kitotik on Wednesday February 07, 2018 @11:47AM (#16325769)

Mostly the same feedback, though I’m curious on the performance differences you’re seeing with strongswan.

In my setups, strongswan seems to induce ~25% hit, compared to ~15% with tincd. I’m a noob with strongswan so I’m sure it’s something with my setup.

[ Parent | on HN ]

Re:Tinc VPN: Secure Private Network Between Hosts by LinuxBender on Wednesday February 07, 2018 @05:24PM (#16328556)

Are you also doing UDP encapsulation and any additional NAT's? I'm using transport mode on strongswan. I get about 3% overhead with strongswan and about 5% with tinc, but the throughput on tinc caps out much sooner for me than with strongswan when dealing with high RTT. It could be the tun driver in CentOS causing my issues, possibly.

[ Parent | on HN ]

Re:Tinc VPN: Secure Private Network Between Hosts by nh2 on Wednesday February 07, 2018 @09:35PM (#16329757)

Overhead over what, and at which line speed? 1 Gbit/s, 10 Gbit/s?

Tinc on bare metal hardware has pretty low CPU usage at 1 Gbit/s, but not so at 10 Gbit/s.

[ Parent | on HN ]