VPN Speed low-middle CPU

I’m not connected to GL-iNet

Try this… this is just once thing, but it’s reproducible, and shows possible max performance.

openvpn --genkey --secret /tmp/secret
time openvpn --test-crypto --secret /tmp/secret --verb 0 --tun-mtu 20000 --cipher aes-256-cbc

Data - throughput is MB/Sec - time in seconds/3200

Device Chipset Arch Cipher Time Throughput
MV1000 MV3720 aarch64 aes-128-cbc 8.21 389.77
aes-256-cbc 8.68 368.66
aes-128-gcm 17.65 181.30
B1300 IPQ4028 ARMV7-A aes-128-cbc 111.97 28.58
aes-256-cbc 123.25 25.96
aes-128-gcm 108.25 29.56
AR300M AR9531 MIPS24Kc aes-128-cbc 178.99 17.88
aes-256-cbc 194.32 16.47
aes-128-gcm 216.84 14.76

Pricing is actually fairly good for supported 3700 devices - see Netgate’s SG1100 device, same chipset, similar specs - $179USD

Yes, the EspressoBIN community board for 3720 is $93USD on Amazon with an enclosure and power supply, and a 32GB Samsung EVO microSD, no SW, no eMMC, and there, you’ll get no vendor support

Pricing here is driven by several factors - the cost of the chipset (3720 plus Topaz), and the NRE needed to develop the board - Netgate has a custom spin on the EspressoBIN, and Brume is a custom board.

Manufacturing Costs, aka MAV, are about the same - so cost of goods shipped is BOM+NRE+MAV/number of units shipped - and then add distribution costs to this.

$129 is a fair price, IMHO…

1 Like