What Is the Actual Network Speed of a VPN Connection?
A VPN connection has been created. Two ECSs have been created with one at the local end and the other at the remote end. The two ECSs can ping each other.
Perform the following steps to test the network speed of your VPN gateway if the bandwidth of your VPN gateway is 200 Mbit/s:
- If the ECSs at the two ends of the VPN run Windows, use iPerf3 and FileZilla (a free FTP application for file uploading and downloading) to test the network speed.
The test shows that the average network speed of the VPN is 180 Mbit/s, and there is about 10% network speed deviation. The TCP and FTP protocols have the congestion control mechanism, and the IPsec protocol adds a new IP header. Therefore, about 10% network speed deviation is normal for the VPN network.
Figure 1 shows the test result.
Figure 2 shows the test result.
- If the ECSs at the two ends of the VPN run CentOS 7, use iPerf3 to test the network speed. The network speed can reach 180 Mbit/s.
- If the ECS functioning as the server runs CentOS 7, and the ECS functioning as the client runs Windows, use iPerf3 and FileZilla to test the network speed.
The network speed is about 20 Mbit/s, a slow network speed. That is because TCP implementations on Windows and that on Linux are different. Therefore, if the ECSs at the two ends of the VPN run different OSs, the VPN network speed does not meet the bandwidth requirements.
Figure 3 shows the test result.
Perform the following steps to test the network speed of your VPN gateway if the bandwidth of your VPN gateway is 1,000 Mbit/s:
The VPN gateway bandwidth is shared by all of its VPN connections. If the bandwidth size is large, multiple ECSs are required to test the VPN gateway bandwidth because the forwarding performance of an ECS is limited. This scenario has high requirements on ECS specifications. The ECSs must have NICs that support the bandwidth of 2 Gbit/s or higher.
The tests show that the actual network speed of a VPN gateway on Huawei Cloud is within the normal range. However, the servers used at both ends of the VPN connection must run the OSs of the same type, and the server NICs must meet the configuration requirements.
General Questions FAQs
- What Devices Can Be Connected to Huawei Cloud Through a VPN?
- What Are VPN Negotiation Parameters? What Are Their Default Values?
- Can I Deploy Applications on the Cloud, Databases in an On-premises Data Center, and Then Connect Them Through a VPN?
- Can I Visit Websites Across International Borders Using a VPN?
- What Is a VPN Connection? How Do I Set the Number of VPN Connections When Buying a VPN Gateway?
- Will I Be Notified If a VPN Connection Is Interrupted?
- Are a Username and Password Required for Creating an IPsec VPN Connection?
- What Are the Differences Between the Application Scenarios and Connection Modes of IPsec and SSL VPNs?
- Will an IPsec VPN Connection Be Established Automatically?
- What Will I Be Charged for Creating a VPN? Will I Be Charged for VPN Gateway IP Addresses?
- Can a VPN Gateway IP Address Be Retained After the VPN Gateway Is Deleted?
- Which VPN Resources Can Be Monitored?
- Which Direction of the Bandwidth Is Limited and What Is the Unit of the Bandwidth?
- What Is the Actual Network Speed of a VPN Connection?
- Can a VPN Billed by Traffic Use a Shared Data Package?
- What Are the Relationships Between a VPC, a VPN Gateway, and a VPN Connection?
- What Is a Remote Gateway and Remote Subnet in a VPN Connection?
- How Many VPN Connections Do I Need to Connect to Multiple On-premises Servers?
- Does a VPN Allow for Communications Between Two VPCs?
- What Are the Impacts of a VPN on an On-premises Network? What Are the Changes to the Route for Accessing an ECS?
- Can I Use a Network with Two Egresses to Establish Two VPN Connections with the Same VPC?
- How Can I Prevent VPN Disconnections?
- Why Is Not Connected Displayed as the Status for a Successfully Created VPN Connection?
- What Can I Do If VPN Connection Setup Fails?
- Can an EIP Be Used as a VPN Gateway IP Address?
- Why Is the VPN Connection Always in the Not Connected State Even After Its Configuration Is Complete?
- Do I Need to Configure ACL Rules on the Huawei Cloud Management Console After I Configured ACL Rules on the On-premises Gateway Device?
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbotmore