ROCK64 as VPN Gateway

[Talkabout]

Hi guys,

today I received my Rock64 and of course immediately set it up to do some tests. Openssl now performes way better as visible here:

Code:

You have chosen to measure elapsed time instead of user CPU time.
Doing aes-128-cbc for 3s on 16 size blocks: 16712860 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 64 size blocks: 13207655 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 256 size blocks: 6899270 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 1024 size blocks: 2457687 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 8192 size blocks: 353153 aes-128-cbc's in 3.00s
Doing aes-128-cbc for 3s on 16384 size blocks: 178379 aes-128-cbc's in 3.00s
OpenSSL 1.1.0l  10 Sep 2019
built on: reproducible build, date unspecified
options:bn(64,64) rc4(char) des(int) aes(partial) blowfish(ptr)
compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_BN_ASM_MONT -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DECP_NISTZ256_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\"" -DENGINESDIR="\"/usr/lib/aarch64-linux-gnu/engines-1.1\""
The 'numbers' are in 1000s of bytes per second processed.
type             16 bytes     64 bytes    256 bytes   1024 bytes   8192 bytes  16384 bytes
aes-128-cbc      89135.25k   281763.31k   588737.71k   838890.50k   964343.13k   974187.18k

but openvpn performance is still slower than on Raspberry Pi4:

Rock64

Code:

rock64@rock64:~$ sudo openvpn --genkey --secret /tmp/secret
rock64@rock64:~$ sudo time openvpn --test-crypto --secret /tmp/secret --verb 0 --tun-mtu 20000 --cipher aes-256-cbc
Tue Dec  3 10:51:06 2019 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
15.94user 0.00system 0:15.95elapsed 99%CPU (0avgtext+0avgdata 5340maxresident)k
0inputs+0outputs (0major+318minor)pagefaults 0swaps

RPI4

Code:

ppowalla@vpngateway:/etc/openvpn $ sudo openvpn --genkey --secret /tmp/secret
ppowalla@vpngateway:/etc/openvpn $ sudo time openvpn --test-crypto --secret /tmp/secret --verb 0 --tun-mtu 20000 --cipher aes-256-cbc
Tue Dec  3 11:52:11 2019 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode
12.69user 0.04system 0:12.76elapsed 99%CPU (0avgtext+0avgdata 5300maxresident)k
0inputs+0outputs (0major+287minor)pagefaults 0swaps

As you can see the Raspberry takes 12,76s to perform the test, whereas the Rock64 needs 15,95s. Based on the explanation in this thread

https://airvpn.org/forums/topic/18322-ho...hroughput/

it means, that still the Rock64 is slower. Is openvpn taking advantage of the hardware acceleration of Rock64? Any other explanation?

Thanks!