From owner-freebsd-hackers@freebsd.org Wed Apr 17 15:22:47 2019 Return-Path: Delivered-To: freebsd-hackers@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D6DCB156F48E for ; Wed, 17 Apr 2019 15:22:46 +0000 (UTC) (envelope-from debdrup@gmail.com) Received: from mail-lj1-x229.google.com (mail-lj1-x229.google.com [IPv6:2a00:1450:4864:20::229]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "GTS CA 1O1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id C001684283 for ; Wed, 17 Apr 2019 15:22:45 +0000 (UTC) (envelope-from debdrup@gmail.com) Received: by mail-lj1-x229.google.com with SMTP id f23so1425684ljc.0 for ; Wed, 17 Apr 2019 08:22:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=bFkKWxh9rPbXZ4O9rKmooHgJDMIEYTk5fK11umv8qa4=; b=iIoK6WXEkBpUce0sJ4RQBiIukjxpMRh579oe6BXRNd9JbprscnQoG79cQeYqztZ8w8 7EXBezsG0OpxpeM7k+2siCGK8CJ50GxHdPCScEBT0/cvngvmbDrrvkIlTEGsi1SYKTiS dgjJm/wUFc+ZgcNZxr7oZUzaqtPtzYmV7OWVWlWXIbtHyvZoEF/7d96Ekf0qys3iGfPr 1gQ0f9C+l3xMg8Y3jJevxkTA644AQUSGrTs0yODuLBVEXXh3qGcB0h3G0olYIWFmVdZR nyatQ1UGb5qTFw0hUfOZEcG2W9TgbYMT/K/Tg9e8u3jIbhUpQUUOFHiH6HcGGUukX5Yv iXGA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=bFkKWxh9rPbXZ4O9rKmooHgJDMIEYTk5fK11umv8qa4=; b=lF1GV5DfGW1TPgJXSYwBPToudTih7zdxY1rt4DQKWk4egpfBJsviAMGx6OSNTKzzl5 LrjAc3Mk1UE8XFZG1QyjL0UPjWuluUESCDRhEz4ClPjHDoVi8gE2tGF4TmBRXK8xrEk8 5P/udR/InO843pYWBkOrbAWxbFLMmOImalXbPpqXsez3ycVtDWmP1+T0YV219TVl32nN UN/VWH/y3r7I0hmzrsch8S1WU94mchZBRl3+Gg6DTzRb++bobQX6/P43S8m+KPcdK92l ewu9iI1J8n7H/dots9icRdYZwy9wWZt3CHOyX803VdL3d6KKu7MOZG1nnEyDHQ7WhrGh fqRg== X-Gm-Message-State: APjAAAXY3NMlGQWWCkO3hR14ANq01zPW340ixPiBc12aiH8BotuOCNuL Cv5Vg3Cp00x21q83Nsy5kNwU+ijn5k6I9fQwjoRMShxU X-Google-Smtp-Source: APXvYqzemU9Qbso0rYnHy5TQS6Bn0biaiLrt3ejKHLd0cD/SEB2mTs9PmqZ49bhmX86iOJGQQg8UAOfTXacvWgZv4Ug= X-Received: by 2002:a2e:390c:: with SMTP id g12mr47485380lja.174.1555514564213; Wed, 17 Apr 2019 08:22:44 -0700 (PDT) MIME-Version: 1.0 References: In-Reply-To: From: "D. Ebdrup" Date: Wed, 17 Apr 2019 17:22:31 +0200 Message-ID: Subject: Re: openvpn and system overhead To: freebsd-hackers Content-Type: text/plain; charset="UTF-8" X-Rspamd-Queue-Id: C001684283 X-Spamd-Bar: ------ Authentication-Results: mx1.freebsd.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=iIoK6WXE; dmarc=pass (policy=none) header.from=gmail.com; spf=pass (mx1.freebsd.org: domain of debdrup@gmail.com designates 2a00:1450:4864:20::229 as permitted sender) smtp.mailfrom=debdrup@gmail.com X-Spamd-Result: default: False [-6.84 / 15.00]; ARC_NA(0.00)[]; NEURAL_HAM_MEDIUM(-1.00)[-1.000,0]; R_DKIM_ALLOW(-0.20)[gmail.com:s=20161025]; FROM_HAS_DN(0.00)[]; R_SPF_ALLOW(-0.20)[+ip6:2a00:1450:4000::/36]; FREEMAIL_FROM(0.00)[gmail.com]; MIME_GOOD(-0.10)[text/plain]; PREVIOUSLY_DELIVERED(0.00)[freebsd-hackers@freebsd.org]; NEURAL_HAM_LONG(-1.00)[-1.000,0]; RCPT_COUNT_ONE(0.00)[1]; RCVD_TLS_LAST(0.00)[]; TO_DN_ALL(0.00)[]; DKIM_TRACE(0.00)[gmail.com:+]; DMARC_POLICY_ALLOW(-0.50)[gmail.com,none]; RCVD_IN_DNSWL_NONE(0.00)[9.2.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.4.6.8.4.0.5.4.1.0.0.a.2.list.dnswl.org : 127.0.5.0]; MX_GOOD(-0.01)[cached: alt3.gmail-smtp-in.l.google.com]; TO_MATCH_ENVRCPT_ALL(0.00)[]; IP_SCORE(-2.84)[ip: (-9.56), ipnet: 2a00:1450::/32(-2.38), asn: 15169(-2.22), country: US(-0.06)]; NEURAL_HAM_SHORT(-0.98)[-0.982,0]; FROM_EQ_ENVFROM(0.00)[]; MIME_TRACE(0.00)[0:+]; FREEMAIL_ENVFROM(0.00)[gmail.com]; ASN(0.00)[asn:15169, ipnet:2a00:1450::/32, country:US]; RCVD_COUNT_TWO(0.00)[2]; DWL_DNSWL_NONE(0.00)[gmail.com.dwl.dnswl.org : 127.0.5.0] X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Apr 2019 15:22:47 -0000 Hi Wojciech, I believe you might've run into one of the design decisions that was made by OpenVPN, specifically related to how it exclusively favours spawning more processes rather than implement any form of threading. I believe it's currently on the roadmap [1] of things that they would like to address at one point, but I'm not aware of any work being done on it at present. [1]: https://community.openvpn.net/openvpn/wiki/RoadMap#Threading Daniel Ebdrup aka. D. Ebdrup. On Wed, Apr 17, 2019 at 5:11 PM Wojciech Puchar wrote: > > i'm running openvpn server on Xeon E5 2620 server. > > when receiving 100Mbit/s traffic over VPN it uses 20% of single core. > At least 75% of it is system time. > > Seems like 500Mbit/s is a max for a single openvpn process. > > can anything be done about that to improve performance? > > > _______________________________________________ > freebsd-hackers@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-hackers > To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"