Actions
Correction #14442
closed
VPN scaling section needs some corrections according to the performance comparing to OpenVPN with DCO
Start date:
Due date:
% Done:
100%
Estimated time:
Description
https://docs.netgate.com/pfsense/en/latest/vpn/performance.html#use-data-channel-offload-plus-only
Under the right conditions it could theoretically approach the performance of WireGuard or IPsec.
https://docs.netgate.com/pfsense/en/latest/vpn/performance.html#ipsec-is-fastest
IPsec is faster than other choices when configured correctly and when using hardware acceleration. If both client and server support IPsec, use IPsec. WireGuard is nearly as fast, however, and depending on the environment and availability of hardware acceleration, may be faster in some cases.
Updated by Danilo Zrenjanin over 2 years ago
Under the right conditions it could theoretically approach the performance of WireGuard or IPsec.
It should be replaced with:
Under optimal circumstances, it has the potential to match or surpass the capabilities of WireGuard or IPsec.
Updated by Danilo Zrenjanin over 2 years ago
IPsec is faster than other choices when configured correctly and when using hardware acceleration. If both client and server support IPsec, use IPsec. WireGuard is nearly as fast, however, and depending on the environment and availability of hardware acceleration, may be faster in some cases.
It is worth evaluating if IPsec remains the most efficient VPN option on the pfSense platform. OpenVPN, when configured with DCO, has the ability to equal or even exceed the performance of WireGuard or IPsec.
Updated by Jim Pingle over 2 years ago
- Status changed from New to Closed
- % Done changed from 0 to 100
Info updated and deployed:
https://gitlab.netgate.com/docs/pfSense-docs/-/commit/b863bd12c165262e9f810c3eb2e2273b1d5122c0
Actions