OpenWrt Forum Archive

Topic: Best VPN client for low CPU useage on WRT54G

The content of this topic has been archived on 6 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

Hi could someone tell me which is the best VPN client between FreeSwan and OpenVPN in terms of processing power on my little 200mhz chip?!

PPTP is as im told pretty much insecure, however if it can run much faster as a client connecting to my remote server then i will certainly consider it (as long as it is still reasonably hard to eavesdrop).

Thanks in advance,

Chris

What's your connection speed? If you have limited upload of e.g. 128 KByte/sec, the cpu will not be the bottleneck.

I chose openvpn, because it's flexible for port selection, doesn't have problems with NAT or requires special kernel modules to work.

(Last edited by MMCM on 8 Jul 2007, 09:24)

Thanks for the reply MMCM. The speed is on 100mbit in the datacenter to which all the OpenWrt boxes will be connecting (maybe upto 30 OpenWrt clients will be connecting to this approx 750MHz server as its a Virtual Private Server), each OpenWrt on the client side will only NAT traffic for a small subnet of 3 to 4 computers.

What is the connection speed of the client units, not the server.

Just as importantly, how much traffic will go over the VPN? I have a PoP site with OpenVPN running on WRTSL54GS (266 MHz CPU) but am only using OpenVPN for RADIUS authentication and a few other lightweight purposes.   There are situations where you want the entire datastream going over the VPN, is yours one of those?  Mainly I see it for office where they want PC to have access to only company resources and not general web browsing etc.

(Last edited by vincentfox on 8 Jul 2007, 17:20)

Chris, I suggest testing the various encryption options in OpenVPN and measure them for yourself.  I suspect blowfish (which I run... BF-CBC which I think is still OpenVPN default)) will be faster and aes will be slower.  Simple as that.  While everyone wants to run the state-of-the-art aes I think you'll find it really unneeded and also hits the cpu far more than you'll want.

That said, I'd stay away from pptp altogether.

Too bad more boxes couldn't lunch off encryption in hardware.

(Last edited by Bill_MI on 9 Jul 2007, 00:13)

If you are looking for the fastest one then I will recommend you to try best UK vpn connection, but let me tell you one thing about vpn connection, no doubt it is the fastest Service provider in the industry but it is  little expensive as compared to others, I am personally using their services and quite happy with the services.

(Last edited by martinpouis198 on 14 Feb 2012, 19:29)

The discussion might have continued from here.