OPNsense IPSec Observed Throughput Speeds


1	Vault Model (Site B > Site A)	Date	OS	Protocol	Throughput (Average Value from 5 Minute iPerf3 Test)	Phase 1 Authentication Method	Phase 1 Encryption Algorithm	Phase 1 Hash Algorithm + DH Key Group	Phase 2 Protocol + Encryption Algorithm	Phase 2 Hash Algorithm + PFS Key Group	CPU Usage	Mem Usage	Core Temp

2	FW2B:
3	FW2B > VP4670	10/20/23	OPNsense 23.7.5	IPSec	~202 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	75-97%	7% of 8GB	40C
4	FW2B > VP4670	10/20/23	OPNsense 23.7.5	IPSec	~529 Mbps	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	100%	7% of 8GB	43C
5	FW4B:
6	FW4B > VP4670	10/18/23	OPNsense 23.7.5	IPSec	~202 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	53%-96%	7% of 8GB	47C
7	FW4B > VP4670	10/18/23	OPNsense 23.7.5	IPSec	~747 Mbps	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	57%-87%	7% of 8GB	46C
8	FW4C:
9	FW4C > VP4670	10/20/23	OPNsense 23.7.5	IPSec	~235 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	76%-100%	7% of 8GB	51C
10	FW4C > VP4670	10/20/23	OPNsense 23.7.5	IPSec	~807 Mbps	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	65%	7% of 8GB	47C
11	VP2410:
12	VP2410 > VP4670	10/18/23	OPNsense 23.7.5	IPSec	~319 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	25%	6% of 8GB	47C
13	VP2410 > VP4670	10/18/23	OPNsense 23.7.5	IPSec	~809 Mbps	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	25%	6% of 8GB	47C
14	VP2420:
15	VP2420 > VP4670	10/25/23	OPNsense 23.7.5	IPSec	~380 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	32%-80%	8% of 8GB	53C
16	VP2420 > VP4670	10/25/23	OPNsense 23.7.5	IPSec	~1320 Mbps	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	25%-50%	8% of 8GB	45C
17	FW6A:
18	FW6A > VP4670	10/20/23	OPNsense 23.7.5	IPSec	~250 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	96% - 100%	7% of 8GB	36C
19	FW6A > VP4670	10/20/23	OPNsense 23.7.5	IPSec	~785 Mbps	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	39% - 53%	7% of 8GB	32C
20	FW6Br2:
21	FW6Br2 > VP4670	10/23/23	OPNsense 23.7.5	IPSec	~501 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	25%-40%	7% of 8GB	62C
22	FW6Br2 > VP4670	10/23/23	OPNsense 23.7.5	IPSec	~814 Mbps	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	11%	7% of 8GB	57C
23	FW6C:
24	FW6C > VP4670	10/20/23	OPNsense 23.7.5	IPSec	~468 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	25%-60%	7% of 8GB	42C
25	FW6C > VP4670	10/20/23	OPNsense 23.7.5	IPSec	~821 Mbps	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	14%-32%	7% of 8GB	41C
26	FW6D:
27	FW6D > VP4670	10/23/23	OPNsense 23.7.5	IPSec	~514 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	14%-24%	4% of 16GB	46C
28	FW6D > VP4670	10/23/23	OPNsense 23.7.5	IPSec	~879 Mbps	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	8%-17%	4% of 16GB	40C
29	FW6E:
30	FW6E > VP4670	10/23/23	OPNsense 23.7.5	IPSec	~521 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	15%-20%	4% of 16GB	66C
31	FW6E > VP4670	10/23/23	OPNsense 23.7.5	IPSec	~879 Mbps	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	5%-19%	4% of 16GB	48C
32	VP4630:
33	VP4630 > VP4670	10/24/23	OPNsense 23.7.5	IPSec	~675 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	13%-40%	4% of 16GB	61C
34	VP4630 > VP4670	10/24/23	OPNsense 23.7.5	IPSec	~870 Mbps (NAT-T Off) ~1790 Mbps (NAT-T On)	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	13%-40%	4% of 16GB	61C
35	VP4650:
36	VP4650 > VP4670	10/24/23	OPNsense 23.7.5	IPSec	~648 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	16%	4% of 16GB	46C
37	VP4650 > VP4670	10/24/23	OPNsense 23.7.5	IPSec	~860Mbps (NAT-T Off) ~1910 Mbps (NAT-T On)	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	16%	4% of 16GB	46C
38	VP4670:
39	VP4670 > VP4670	10/24/23	OPNsense 23.7.5	IPSec	~680 Mbps	Mutual PSK	AES 256	SHA512 + 14 (2048 bits)	ESP + AES256	SHA512 + 14 (2048 bits)	10%-27%	4% of 16GB	57C
40	VP4670 > VP4670	10/24/23	OPNsense 23.7.5	IPSec	~875 Mbps (NAT-T Off) ~2200 Mbps (NAT-T On)	Mutual PSK	128 bit AES-GCm with 128 bit ICV	AES-XCBC + 14 (2048 bits)	ESP + AES128gcm16	No Hash Selected + 14 (2048 bits)	14%	4% of 16GB	51C