From owner-freebsd-hackers@freebsd.org  Wed Apr 17 15:42:38 2019
Return-Path: <owner-freebsd-hackers@freebsd.org>
Delivered-To: freebsd-hackers@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5170B1570091
 for <freebsd-hackers@mailman.ysv.freebsd.org>;
 Wed, 17 Apr 2019 15:42:38 +0000 (UTC)
 (envelope-from SRS0=3mPw=ST=quip.cz=000.fbsd@elsa.codelab.cz)
Received: from elsa.codelab.cz (elsa.codelab.cz [94.124.105.4])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 9B78385104
 for <freebsd-hackers@freebsd.org>; Wed, 17 Apr 2019 15:42:37 +0000 (UTC)
 (envelope-from SRS0=3mPw=ST=quip.cz=000.fbsd@elsa.codelab.cz)
Received: from elsa.codelab.cz (localhost [127.0.0.1])
 by elsa.codelab.cz (Postfix) with ESMTP id 4D22428423;
 Wed, 17 Apr 2019 17:37:15 +0200 (CEST)
Received: from illbsd.quip.test (ip-62-24-92-232.net.upcbroadband.cz
 [62.24.92.232])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (No client certificate requested)
 by elsa.codelab.cz (Postfix) with ESMTPSA id 2FEEB28428;
 Wed, 17 Apr 2019 17:37:14 +0200 (CEST)
Subject: Re: openvpn and system overhead
To: Wojciech Puchar <wojtek@puchar.net>, freebsd-hackers@freebsd.org
References: <alpine.BSF.2.20.1904171707030.87502@puchar.net>
From: Miroslav Lachman <000.fbsd@quip.cz>
Message-ID: <8648d069-2172-2c09-8e59-d66a8265a120@quip.cz>
Date: Wed, 17 Apr 2019 17:37:15 +0200
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:52.0) Gecko/20100101
 Firefox/52.0 SeaMonkey/2.49.3
MIME-Version: 1.0
In-Reply-To: <alpine.BSF.2.20.1904171707030.87502@puchar.net>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
X-Rspamd-Queue-Id: 9B78385104
X-Spamd-Bar: +++++
Authentication-Results: mx1.freebsd.org
X-Spamd-Result: default: False [5.04 / 15.00]; ARC_NA(0.00)[];
 RCVD_VIA_SMTP_AUTH(0.00)[]; FROM_HAS_DN(0.00)[];
 TO_DN_SOME(0.00)[]; NEURAL_SPAM_SHORT(0.93)[0.935,0];
 IP_SCORE(0.92)[ip: (0.42), ipnet: 94.124.104.0/21(0.21), asn: 42000(3.89),
 country: CZ(0.08)]; MIME_GOOD(-0.10)[text/plain];
 RCVD_TLS_LAST(0.00)[]; DMARC_NA(0.00)[quip.cz];
 AUTH_NA(1.00)[]; NEURAL_SPAM_MEDIUM(1.00)[0.995,0];
 RCVD_COUNT_THREE(0.00)[3]; TO_MATCH_ENVRCPT_SOME(0.00)[];
 MX_GOOD(-0.01)[cached: elsa.codelab.cz];
 RCPT_COUNT_TWO(0.00)[2];
 RCVD_IN_DNSWL_NONE(0.00)[4.105.124.94.list.dnswl.org : 127.0.10.0];
 NEURAL_SPAM_LONG(1.00)[0.998,0]; R_SPF_NA(0.00)[];
 FORGED_SENDER(0.30)[000.fbsd@quip.cz,SRS0=3mPw=ST=quip.cz=000.fbsd@elsa.codelab.cz];
 R_DKIM_NA(0.00)[]; MIME_TRACE(0.00)[0:+];
 ASN(0.00)[asn:42000, ipnet:94.124.104.0/21, country:CZ];
 FROM_NEQ_ENVFROM(0.00)[000.fbsd@quip.cz,SRS0=3mPw=ST=quip.cz=000.fbsd@elsa.codelab.cz];
 MID_RHS_MATCH_FROM(0.00)[]
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
 <freebsd-hackers.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-hackers>, 
 <mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers/>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-hackers>, 
 <mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 17 Apr 2019 15:42:38 -0000

Wojciech Puchar wrote on 2019/04/17 17:08:
> i'm running openvpn server on Xeon E5 2620 server.
> 
> when receiving 100Mbit/s traffic over VPN it uses 20% of single core.
> At least 75% of it is system time.
> 
> Seems like 500Mbit/s is a max for a single openvpn process.
> 
> can anything be done about that to improve performance?

You can play with ciphers, AES-NI etc.
https://community.openvpn.net/openvpn/wiki/Gigabit_Networks_Linux

Miroslav Lachman