Problem with bandwith

[Entorse]

I installed an openvpn server in Proxmox kvm.
But I have some problems with network bandwidth.

One one hypervisor from different networks to another with scp I get the following rate : 40.8MB/s ( 326.40 Mbps )
*On one machine to another with scp and without vpn tunnel from internal network I get the following rate: 30.6 MB / s (228.00 Mbps)
but I get only with the VPN tunnel: 10.4 MB / s (83.20 Mbps)

All my VM have virtio network adapters.

Is this normal?

Why this network loss of 10+ MB/s on the internal network ?

What rate of network loss did you have with openvpn?

What can t be done to improve this?

Enclosed is my openvpn configuration and proxmox informations:

server ( *Internet network test has been done on this server ):

pveversion -v
pve-manager: 1.8-18 (pve-manager/1.8/6070)
running kernel: 2.6.32-4-pve
proxmox-ve-2.6.32: 1.8-33
pve-kernel-2.6.32-4-pve: 2.6.32-33
qemu-server: 1.1-30
pve-firmware: 1.0-11
libpve-storage-perl: 1.0-17
vncterm: 0.9-2
vzctl: 3.0.27-1pve1
vzdump: 1.2-13
vzprocps: 2.0.11-2
vzquota: 3.0.11-1
pve-qemu-kvm: 0.14.1-1
ksm-control-daemon: 1.0-6

pveperf
CPU BOGOMIPS: 29790.89
REGEX/SECOND: 606167
HD SIZE: 94.49 GB (/dev/mapper/pve-root)
BUFFERED READS: 86.44 MB/sec
AVERAGE SEEK TIME: 7.74 ms
FSYNCS/SECOND: 625.51
DNS EXT: 51.23 ms
DNS INT: 4.75 ms ()

port 1194
resolv-retry 0
proto udp
dev tap0
tls-server
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
server-bridge 10.0.1.11 255.255.255.0 10.0.1.12 10.0.1.20
ifconfig-pool-persist ipp.txt
client-to-client
keepalive 10 60
tls-auth /etc/openvpn/ta.key 0
comp-lzo no
ping-timer-rem
#tls-exit
max-clients 5
persist-key
persist-tun
status /home/openvpn-status.log
verb 3
log-append /home/openvpn.log
tun-mtu 1500
tun-mtu-extra 32
mssfix 1400
nice -1
fast-io
cipher none

client:

# pveversion -v
pve-manager: 1.8-15 (pve-manager/1.8/5754)
running kernel: 2.6.32-4-pve
pve-kernel-2.6.32-4-pve: 2.6.32-32
qemu-server: 1.1-30
pve-firmware: 1.0-11
libpve-storage-perl: 1.0-17
vncterm: 0.9-2
vzctl: 3.0.24-1pve4
vzdump: 1.2-11
vzprocps: 2.0.11-2
vzquota: 3.0.11-1dso1

pveperf
CPU BOGOMIPS: 42665.42
REGEX/SECOND: 931244
HD SIZE: 9.92 GB (/dev/md1)
BUFFERED READS: 161.33 MB/sec
AVERAGE SEEK TIME: 0.21 ms
FSYNCS/SECOND: 1429.94
DNS EXT: 40.05 ms
DNS INT: 1206.40 ms (ovh.net)

tls-client
resolv-retry 0
port 1194
dev tap0
proto udp
remote [erver ip ]
askpass /etc/openvpn/key.txt
nobind
user nobody
group nogroup
persist-key
persist-tun
ping-restart 30
ca /etc/openvpn/ca.crt
cert /etc/openvpn/client.crt
key /etc/openvpn/client.key
ns-cert-type server
tls-auth /etc/openvpn/ta.key 1
comp-lzo no
tun-mtu 1500
tun-mtu-extra 32
mssfix 1400
verb 3
log-append /var/log/openvpn.log
nice -1
fast-io
cipher none

Thank you for your answers

 

[udo]

Hi,
scp eat also cpu-power. Perhaps you test first with iperf to get the troughput.
I got following values between two VMs (on different hosts) but with 10GB-Nic and a slightly powerfull cpu (REGEX/SECOND: 1121659)

# iperf -s
------------------------------------------------------------                                                                                                                                       
Server listening on TCP port 5001                                                                                                                                                                  
TCP window size: 85.3 KByte (default)                                                                                                                                                              
------------------------------------------------------------                                                                                                                                       
[  4] local 172.20.10.88 port 5001 connected with 172.20.10.99 port 49932                                                                                                                            
[ ID] Interval       Transfer     Bandwidth                                                                                                                                                        
[  4]  0.0-10.0 sec  2.35 GBytes  2.02 Gbits/sec                                                                                                                                                   

# iperf -c 172.20.10.99                                                                                                                                                         
------------------------------------------------------------                                                                                                                                       
Client connecting to 172.20.10.99, TCP port 5001                                                                                                                                                    
TCP window size: 16.0 KByte (default)                                                                                                                                                              
------------------------------------------------------------                                                                                                                                       
[  3] local 172.20.10.88 port 55270 connected with 172.20.10.99 port 5001                                                                                                                            
[ ID] Interval       Transfer     Bandwidth                                                                                                                                                        
[  3]  0.0-10.0 sec  1.03 GBytes    885 Mbits/sec

The great difference depends on problems with the NIC/Driver and vlan-tagging.

Perhaps i can try a openvpn-test next week.

Udo