Hi all,

Correct me is I am wrong, but isn't the current implementation
(v2.4.7) of CHACHA20-POLY1305, only applicable to the control channel?
The master version in git, apparently already has support for it in
the data channel as well.

If this is the case, you will not see any (noticeable) performance
benefits from using it on non aes-ni capable hardware, because almost
all processing power if done in the actual data channel.

Just a bit off-topic, you claim to be using AES-128-CBC.Maybe your
also using Authentication (unless you've disabled it), which adds it's
own significant overhead to the data channel processing as well (which
one it it?). You may try AES-128-GCM instead, which is an AEAD cipher,
like CHACHA20-POLY1305, and will do cipher and Auth in one "pass".

Just my 2 cents.

Regards,
Rui


On Wed, Jun 12, 2019 at 6:46 AM Tony.He <383181...@qq.com> wrote:
>
> Hi Gert,
>
> Thanks for your quick reply.
>
> My env:
>
> client --- Internet---Home Router enabled port forwarding ---server run
> in Raspberry Pi 3
>
> I saw same performance with AES-128-CBC in the same test env. I copied
> file from client to
>
> Raspberry Pi3.It's about 8MB/s. I saw the CPU loading is still about
> 100%.  Did you test the
>
> performance or have the performance data when reviewing the patch?
>
> Best Regards
>
> Tony
>
> On 2019/6/12 下午1:27, Gert Doering wrote:
> > Hi,
> >
> > On Wed, Jun 12, 2019 at 09:32:40AM +0800, Tony.He wrote:
> >> Sorry to bother you. Recently I have been testing ChaCha20-Poly1305
> >> performance. But I did not get the expected performance improvement.
> > So what performance differences *did* you see, measured with what
> > method?  What was the CPU load while the test ran?  (If your CPU is
> > not at 100% with AES, something else is slowing down the transfer,
> > and changing the cipher is unlikely going to speed up things much)
> >
> > The forum post is a bit lacking on that side.
> >
> > gert
> >
>
>
>
>
> _______________________________________________
> Openvpn-users mailing list
> Openvpn-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-users



-- 
Rui Santos
Veni, Vidi, Linux


_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to