* Wintun performance results
@ 2019-05-15 13:48 Lev Stipakov
2019-05-15 14:49 ` [Openvpn-devel] " Илья Шипицин
2019-05-16 11:44 ` Jason A. Donenfeld
0 siblings, 2 replies; 10+ messages in thread
From: Lev Stipakov @ 2019-05-15 13:48 UTC (permalink / raw)
To: wireguard, openvpn-devel
[-- Attachment #1.1: Type: text/plain, Size: 1626 bytes --]
Hi guys,
I made openvpn3 (required changes will be incorporated into main branch at
some point) work with wintun and did performance testing in AWS.
Client: c5.xlarge, Windows Server 2016, patched openvpn3 test client and
OpenVPN Connect 2.7.1.103 (uses tap-windows6, based on openvpn3).
Server: c5.xlarge, Ubuntu 18.04, openvpn 2.4.4
Client and server instances are in the same VPC and placement group.
iPerf3 running on server:
> iperf3 -s -B 0.0.0.0 -V
iPerf3 running on client:
> iperf3 -c 10.8.0.1 -V (server VPN address)
> iperf3 -c 10.0.0.18 -V (server VPC address)
Results:
- no vpn
[ ID] Interval Transfer Bandwidth
[ 4] 0.00-10.00 sec 8.67 GBytes 7.45 Gbits/sec sender
[ 4] 0.00-10.00 sec 8.67 GBytes 7.45
Gbits/sec receiver
CPU Utilization: local/sender 61.4% (5.6%u/55.8%s), remote/receiver 33.9%
(1.7%u/32.2%s)
- tap-windows6
[ ID] Interval Transfer Bandwidth
[ 4] 0.00-10.00 sec 404 MBytes 339 Mbits/sec sender
[ 4] 0.00-10.00 sec 404 MBytes 339
Mbits/sec receiver
CPU Utilization: local/sender 4.6% (0.3%u/4.3%s), remote/receiver 21.4%
(2.2%u/19.2%s)
- wintun
[ ID] Interval Transfer Bandwidth
[ 4] 0.00-10.00 sec 536 MBytes 449 Mbits/sec sender
[ 4] 0.00-10.00 sec 536 MBytes 449
Mbits/sec receiver
CPU Utilization: local/sender 2.9% (0.1%u/2.8%s), remote/receiver 10.1%
(0.7%u/9.3%s)
As you see, wintun performs 30% better comparison to tap-windows6 and
incurs significantly less CPU usage.
--
-Lev
[-- Attachment #1.2: Type: text/html, Size: 2487 bytes --]
[-- Attachment #2: Type: text/plain, Size: 148 bytes --]
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [Openvpn-devel] Wintun performance results
2019-05-15 13:48 Wintun performance results Lev Stipakov
@ 2019-05-15 14:49 ` Илья Шипицин
2019-05-15 15:31 ` Lev Stipakov
2019-05-15 17:32 ` David Sommerseth
2019-05-16 11:44 ` Jason A. Donenfeld
1 sibling, 2 replies; 10+ messages in thread
From: Илья Шипицин @ 2019-05-15 14:49 UTC (permalink / raw)
To: Lev Stipakov; +Cc: openvpn-devel, wireguard
[-- Attachment #1.1: Type: text/plain, Size: 2207 bytes --]
it will most probably get lost in mailing list.
can we add it to https://openvpn.net website ? something like "performance
testing" with full configs provided ?
ср, 15 мая 2019 г. в 18:49, Lev Stipakov <lstipakov@gmail.com>:
> Hi guys,
>
> I made openvpn3 (required changes will be incorporated into main branch at
> some point) work with wintun and did performance testing in AWS.
>
> Client: c5.xlarge, Windows Server 2016, patched openvpn3 test client
> and OpenVPN Connect 2.7.1.103 (uses tap-windows6, based on openvpn3).
>
> Server: c5.xlarge, Ubuntu 18.04, openvpn 2.4.4
>
> Client and server instances are in the same VPC and placement group.
>
> iPerf3 running on server:
>
> > iperf3 -s -B 0.0.0.0 -V
>
> iPerf3 running on client:
>
> > iperf3 -c 10.8.0.1 -V (server VPN address)
> > iperf3 -c 10.0.0.18 -V (server VPC address)
>
> Results:
>
> - no vpn
>
> [ ID] Interval Transfer Bandwidth
> [ 4] 0.00-10.00 sec 8.67 GBytes 7.45
> Gbits/sec sender
> [ 4] 0.00-10.00 sec 8.67 GBytes 7.45
> Gbits/sec receiver
> CPU Utilization: local/sender 61.4% (5.6%u/55.8%s), remote/receiver 33.9%
> (1.7%u/32.2%s)
>
> - tap-windows6
>
> [ ID] Interval Transfer Bandwidth
> [ 4] 0.00-10.00 sec 404 MBytes 339
> Mbits/sec sender
> [ 4] 0.00-10.00 sec 404 MBytes 339
> Mbits/sec receiver
> CPU Utilization: local/sender 4.6% (0.3%u/4.3%s), remote/receiver 21.4%
> (2.2%u/19.2%s)
>
> - wintun
>
> [ ID] Interval Transfer Bandwidth
> [ 4] 0.00-10.00 sec 536 MBytes 449
> Mbits/sec sender
> [ 4] 0.00-10.00 sec 536 MBytes 449
> Mbits/sec receiver
> CPU Utilization: local/sender 2.9% (0.1%u/2.8%s), remote/receiver 10.1%
> (0.7%u/9.3%s)
>
> As you see, wintun performs 30% better comparison to tap-windows6 and
> incurs significantly less CPU usage.
>
> --
> -Lev
> _______________________________________________
> Openvpn-devel mailing list
> Openvpn-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-devel
>
[-- Attachment #1.2: Type: text/html, Size: 3433 bytes --]
[-- Attachment #2: Type: text/plain, Size: 148 bytes --]
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [Openvpn-devel] Wintun performance results
2019-05-15 14:49 ` [Openvpn-devel] " Илья Шипицин
@ 2019-05-15 15:31 ` Lev Stipakov
2019-05-15 17:32 ` David Sommerseth
1 sibling, 0 replies; 10+ messages in thread
From: Lev Stipakov @ 2019-05-15 15:31 UTC (permalink / raw)
To: Илья
Шипицин
Cc: openvpn-devel, wireguard
[-- Attachment #1.1: Type: text/plain, Size: 367 bytes --]
I think so, but before we need to incorporate wintun support into
openvpn2/3 masters.
ke 15. toukok. 2019 klo 17.49 Илья Шипицин (chipitsine@gmail.com) kirjoitti:
> it will most probably get lost in mailing list.
> can we add it to https://openvpn.net website ? something like
> "performance testing" with full configs provided ?
>
--
-Lev
[-- Attachment #1.2: Type: text/html, Size: 806 bytes --]
[-- Attachment #2: Type: text/plain, Size: 148 bytes --]
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [Openvpn-devel] Wintun performance results
2019-05-15 14:49 ` [Openvpn-devel] " Илья Шипицин
2019-05-15 15:31 ` Lev Stipakov
@ 2019-05-15 17:32 ` David Sommerseth
2019-05-16 10:14 ` Jan Just Keijser
1 sibling, 1 reply; 10+ messages in thread
From: David Sommerseth @ 2019-05-15 17:32 UTC (permalink / raw)
To: Илья
Шипицин,
Lev Stipakov
Cc: openvpn-devel, wireguard
[-- Attachment #1.1.1: Type: text/plain, Size: 2771 bytes --]
On 15/05/2019 16:49, Илья Шипицин wrote:
> it will most probably get lost in mailing list.
> can we add it to https://openvpn.net website ? something like "performance
> testing" with full configs provided ?
Good idea, but maybe not the official corp web pages just yet. But we should
definitely have some wiki pages under https://community.openvpn.net/ related
to how to prepare a good setup for performance testing.
--
kind regards,
David Sommerseth
OpenVPN Inc
> ср, 15 мая 2019 г. в 18:49, Lev Stipakov <lstipakov@gmail.com
> <mailto:lstipakov@gmail.com>>:
>
> Hi guys,
>
> I made openvpn3 (required changes will be incorporated into main branch at
> some point) work with wintun and did performance testing in AWS.
>
> Client: c5.xlarge, Windows Server 2016, patched openvpn3 test client
> and OpenVPN Connect 2.7.1.103 (uses tap-windows6, based on openvpn3).
>
> Server: c5.xlarge, Ubuntu 18.04, openvpn 2.4.4
>
> Client and server instances are in the same VPC and placement group.
>
> iPerf3 running on server:
>
> > iperf3 -s -B 0.0.0.0 -V
>
> iPerf3 running on client:
>
> > iperf3 -c 10.8.0.1 -V (server VPN address)
> > iperf3 -c 10.0.0.18 -V (server VPC address)
>
> Results:
>
> - no vpn
>
> [ ID] Interval Transfer Bandwidth
> [ 4] 0.00-10.00 sec 8.67 GBytes 7.45 Gbits/sec sender
> [ 4] 0.00-10.00 sec 8.67 GBytes 7.45 Gbits/sec receiver
> CPU Utilization: local/sender 61.4% (5.6%u/55.8%s), remote/receiver 33.9%
> (1.7%u/32.2%s)
>
> - tap-windows6
>
> [ ID] Interval Transfer Bandwidth
> [ 4] 0.00-10.00 sec 404 MBytes 339 Mbits/sec sender
> [ 4] 0.00-10.00 sec 404 MBytes 339 Mbits/sec receiver
> CPU Utilization: local/sender 4.6% (0.3%u/4.3%s), remote/receiver 21.4%
> (2.2%u/19.2%s)
>
> - wintun
>
> [ ID] Interval Transfer Bandwidth
> [ 4] 0.00-10.00 sec 536 MBytes 449 Mbits/sec sender
> [ 4] 0.00-10.00 sec 536 MBytes 449 Mbits/sec receiver
> CPU Utilization: local/sender 2.9% (0.1%u/2.8%s), remote/receiver 10.1%
> (0.7%u/9.3%s)
>
> As you see, wintun performs 30% better comparison to tap-windows6 and
> incurs significantly less CPU usage.
>
> --
> -Lev
[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 836 bytes --]
[-- Attachment #2: Type: text/plain, Size: 148 bytes --]
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [Openvpn-devel] Wintun performance results
2019-05-15 17:32 ` David Sommerseth
@ 2019-05-16 10:14 ` Jan Just Keijser
2019-05-16 11:59 ` Lev Stipakov
0 siblings, 1 reply; 10+ messages in thread
From: Jan Just Keijser @ 2019-05-16 10:14 UTC (permalink / raw)
To: David Sommerseth,
Илья
Шипицин,
Lev Stipakov
Cc: openvpn-devel, wireguard
Hi David, *
On 15/05/19 19:32, David Sommerseth wrote:
> On 15/05/2019 16:49, Илья Шипицин wrote:
>> it will most probably get lost in mailing list.
>> can we add it to https://openvpn.net website ? something like "performance
>> testing" with full configs provided ?
> Good idea, but maybe not the official corp web pages just yet. But we should
> definitely have some wiki pages under https://community.openvpn.net/ related
> to how to prepare a good setup for performance testing.
>
>
a community wiki page on how to prepar a good setup for performance
testing sounds like a good plan.
However, if I am not mistaken the version of OpenVPN used in the test
was a *Windows* build of OpenVPN3 with a wintun patch included. That is
not open source, is it? I'd *not* be in favour of writing community
wiki pages on the non-open source version of OpenVPN.
JM2CW,
JJK
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [Openvpn-devel] Wintun performance results
2019-05-16 10:14 ` Jan Just Keijser
@ 2019-05-16 11:59 ` Lev Stipakov
2019-05-20 12:03 ` Lev Stipakov
0 siblings, 1 reply; 10+ messages in thread
From: Lev Stipakov @ 2019-05-16 11:59 UTC (permalink / raw)
To: Jan Just Keijser
Cc: David Sommerseth, openvpn-devel, wireguard,
Илья
Шипицин
[-- Attachment #1.1: Type: text/plain, Size: 466 bytes --]
Hi,
However, if I am not mistaken the version of OpenVPN used in the test
> was a *Windows* build of OpenVPN3 with a wintun patch included.
Correct.
> That is not open source, is it? I'd *not* be in favour of writing
> community
> wiki pages on the non-open source version of OpenVPN.
>
That's an open source openvpn3 test client, which is part of library
(openvpn/test/ovpncli/cli.cpp).
We'll incorporate required changes into master branch soon.
--
-Lev
[-- Attachment #1.2: Type: text/html, Size: 992 bytes --]
[-- Attachment #2: Type: text/plain, Size: 148 bytes --]
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: [Openvpn-devel] Wintun performance results
2019-05-16 11:59 ` Lev Stipakov
@ 2019-05-20 12:03 ` Lev Stipakov
2019-06-03 18:04 ` Lev Stipakov
0 siblings, 1 reply; 10+ messages in thread
From: Lev Stipakov @ 2019-05-20 12:03 UTC (permalink / raw)
To: Jan Just Keijser
Cc: David Sommerseth, openvpn-devel, wireguard,
Илья
Шипицин
[-- Attachment #1.1: Type: text/plain, Size: 1606 bytes --]
Hi,
While wintun support is not yet added to openvpn3 master, I think it would
be beneficial to share my own branch.
https://github.com/lstipakov/openvpn3/tree/feature/wintun-wip#building-the-openvpn-3-client-on-windows
See instructions in README on how to build openvpn3 library and test client
on Windows.
Note that only "topology subnet" is supported (see
https://community.openvpn.net/openvpn/wiki/Topology#Topologysubnet).
I have included test client and wintun driver binaries if someone would
like to try it out (Tested on Windows 10 and Windows Server 2016):
1. Since wintun driver is not signed, you need to enable loading of test
signed code. For that, run
> bcdedit /set testsigning
in admin command prompt and restart Windows.
2. Download and unzip wintun driver
https://github.com/lstipakov/openvpn3/blob/feature/wintun-wip/wintun.7z
3. Open Device Manager (Control Panel\System and Security\System\Device
Manager).
Right click on tree root, select "Add legacy hardware" -> "Next" -> "..
hardware that I manually select from a list" ->
"Next" -> "Show all devices" -> "Have Disk..." -> Locate wintun.inf
unpacked at step 2 -> select "Wintun Userspace Tunnel" ->
"Next" -> "Install this software anyway" (since driver is not signed).
4. Make sure you see "Wintun Userspace Tunnel" under Device Manager ->
Network adapters.
5. Download cli_wintun.exe from
https://github.com/lstipakov/openvpn3/blob/feature/wintun-wip/cli_wintun.exe
6. Open command prompt as an administrator and run:
> C:\Users\Administrator\Downloads>cli_wintun.exe <your_vpn_profile.ovpn>
7. Enjoy!
--
-Lev
[-- Attachment #1.2: Type: text/html, Size: 2757 bytes --]
[-- Attachment #2: Type: text/plain, Size: 148 bytes --]
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard
^ permalink raw reply [flat|nested] 10+ messages in thread
* Re: Wintun performance results
2019-05-15 13:48 Wintun performance results Lev Stipakov
2019-05-15 14:49 ` [Openvpn-devel] " Илья Шипицин
@ 2019-05-16 11:44 ` Jason A. Donenfeld
1 sibling, 0 replies; 10+ messages in thread
From: Jason A. Donenfeld @ 2019-05-16 11:44 UTC (permalink / raw)
To: Lev Stipakov; +Cc: openvpn-devel, WireGuard mailing list
Nice results! Sounds like Wintun has accomplished one of its goals then.
You mentioned on IRC that you need for the Wintun socket to be
openable by Administrator, not just SYSTEM. Here's some code you can
use to make that possible, without needing to modify the Wintun
source:
https://xn--4db.cc/rDtNikTB/c
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard
^ permalink raw reply [flat|nested] 10+ messages in thread
end of thread, other threads:[~2019-06-18 15:16 UTC | newest]
Thread overview: 10+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-05-15 13:48 Wintun performance results Lev Stipakov
2019-05-15 14:49 ` [Openvpn-devel] " Илья Шипицин
2019-05-15 15:31 ` Lev Stipakov
2019-05-15 17:32 ` David Sommerseth
2019-05-16 10:14 ` Jan Just Keijser
2019-05-16 11:59 ` Lev Stipakov
2019-05-20 12:03 ` Lev Stipakov
2019-06-03 18:04 ` Lev Stipakov
2019-06-14 15:56 ` Lev Stipakov
2019-05-16 11:44 ` Jason A. Donenfeld
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).