WireGuard Archive on lore.kernel.org
 help / color / Atom feed
* Wintun performance results
@ 2019-05-15 13:48 Lev Stipakov
  2019-05-15 14:49 ` [Openvpn-devel] " Илья Шипицин
  2019-05-16 11:44 ` Jason A. Donenfeld
  0 siblings, 2 replies; 10+ messages in thread
From: Lev Stipakov @ 2019-05-15 13:48 UTC (permalink / raw)
  To: wireguard, openvpn-devel

[-- Attachment #1.1: Type: text/plain, Size: 1626 bytes --]

Hi guys,

I made openvpn3 (required changes will be incorporated into main branch at
some point) work with wintun and did performance testing in AWS.

Client:    c5.xlarge, Windows Server 2016, patched openvpn3 test client and
OpenVPN Connect 2.7.1.103 (uses tap-windows6, based on openvpn3).

Server:  c5.xlarge, Ubuntu 18.04, openvpn 2.4.4

Client and server instances are in the same VPC and placement group.

iPerf3 running on server:

> iperf3 -s -B 0.0.0.0 -V

iPerf3 running on client:

> iperf3 -c 10.8.0.1 -V (server VPN address)
> iperf3 -c 10.0.0.18 -V (server VPC address)

Results:

- no vpn

[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-10.00  sec  8.67 GBytes  7.45 Gbits/sec                  sender
[  4]   0.00-10.00  sec  8.67 GBytes  7.45
Gbits/sec                  receiver
CPU Utilization: local/sender 61.4% (5.6%u/55.8%s), remote/receiver 33.9%
(1.7%u/32.2%s)

- tap-windows6

[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-10.00  sec   404 MBytes   339 Mbits/sec                  sender
[  4]   0.00-10.00  sec   404 MBytes   339
Mbits/sec                  receiver
CPU Utilization: local/sender 4.6% (0.3%u/4.3%s), remote/receiver 21.4%
(2.2%u/19.2%s)

- wintun

[ ID] Interval           Transfer     Bandwidth
[  4]   0.00-10.00  sec   536 MBytes   449 Mbits/sec                  sender
[  4]   0.00-10.00  sec   536 MBytes   449
Mbits/sec                  receiver
CPU Utilization: local/sender 2.9% (0.1%u/2.8%s), remote/receiver 10.1%
(0.7%u/9.3%s)

As you see, wintun performs 30% better comparison to tap-windows6 and
incurs significantly less CPU usage.

-- 
-Lev

[-- Attachment #1.2: Type: text/html, Size: 2487 bytes --]

<div dir="ltr">Hi guys,<div><br></div><div>I made openvpn3 (required changes will be incorporated into main branch at some point) work with wintun and did performance testing in AWS.</div><div><br></div><div><div>Client:    c5.xlarge, Windows Server 2016, patched openvpn3 test client and OpenVPN Connect 2.7.1.103 (uses tap-windows6, based on openvpn3).</div><div><br></div><div>Server:  c5.xlarge, Ubuntu 18.04, openvpn 2.4.4</div><div><br></div><div>Client and server instances are in the same VPC and placement group.</div><div><br></div><div>iPerf3 running on server:</div><div><br></div><div>&gt; iperf3 -s -B 0.0.0.0 -V</div><div><br></div><div>iPerf3 running on client:</div><div><br></div><div>&gt; iperf3 -c 10.8.0.1 -V (server VPN address)</div><div>&gt; iperf3 -c 10.0.0.18 -V (server VPC address)  <br></div><div><br></div><div>Results:</div><div><br></div><div>- no vpn</div><div><br></div><div>[ ID] Interval           Transfer     Bandwidth</div><div>[  4]   0.00-10.00  sec  8.67 GBytes  7.45 Gbits/sec                  sender</div><div>[  4]   0.00-10.00  sec  8.67 GBytes  7.45 Gbits/sec                  receiver</div><div>CPU Utilization: local/sender 61.4% (5.6%u/55.8%s), remote/receiver 33.9% (1.7%u/32.2%s)</div><div><br></div><div>- tap-windows6</div><div><br></div><div>[ ID] Interval           Transfer     Bandwidth</div><div>[  4]   0.00-10.00  sec   404 MBytes   339 Mbits/sec                  sender</div><div>[  4]   0.00-10.00  sec   404 MBytes   339 Mbits/sec                  receiver</div><div>CPU Utilization: local/sender 4.6% (0.3%u/4.3%s), remote/receiver 21.4% (2.2%u/19.2%s)</div><div><br></div><div>- wintun</div><div><br></div><div>[ ID] Interval           Transfer     Bandwidth</div><div>[  4]   0.00-10.00  sec   536 MBytes   449 Mbits/sec                  sender</div><div>[  4]   0.00-10.00  sec   536 MBytes   449 Mbits/sec                  receiver</div><div>CPU Utilization: local/sender 2.9% (0.1%u/2.8%s), remote/receiver 10.1% (0.7%u/9.3%s)</div><div><br></div><div>As you see, wintun performs 30% better comparison to tap-windows6 and incurs significantly less CPU usage.</div><div><br></div>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature">-Lev</div></div></div>

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 10+ messages in thread

* Re: [Openvpn-devel] Wintun performance results
  2019-05-15 13:48 Wintun performance results Lev Stipakov
@ 2019-05-15 14:49 ` " Илья Шипицин
  2019-05-15 15:31   ` Lev Stipakov
  2019-05-15 17:32   ` David Sommerseth
  2019-05-16 11:44 ` Jason A. Donenfeld
  1 sibling, 2 replies; 10+ messages in thread
From: Илья Шипицин @ 2019-05-15 14:49 UTC (permalink / raw)
  To: Lev Stipakov; +Cc: openvpn-devel, wireguard

[-- Attachment #1.1: Type: text/plain, Size: 2207 bytes --]

it will most probably get lost in mailing list.
can we add it to https://openvpn.net website ? something like "performance
testing" with full configs provided ?

ср, 15 мая 2019 г. в 18:49, Lev Stipakov <lstipakov@gmail.com>:

> Hi guys,
>
> I made openvpn3 (required changes will be incorporated into main branch at
> some point) work with wintun and did performance testing in AWS.
>
> Client:    c5.xlarge, Windows Server 2016, patched openvpn3 test client
> and OpenVPN Connect 2.7.1.103 (uses tap-windows6, based on openvpn3).
>
> Server:  c5.xlarge, Ubuntu 18.04, openvpn 2.4.4
>
> Client and server instances are in the same VPC and placement group.
>
> iPerf3 running on server:
>
> > iperf3 -s -B 0.0.0.0 -V
>
> iPerf3 running on client:
>
> > iperf3 -c 10.8.0.1 -V (server VPN address)
> > iperf3 -c 10.0.0.18 -V (server VPC address)
>
> Results:
>
> - no vpn
>
> [ ID] Interval           Transfer     Bandwidth
> [  4]   0.00-10.00  sec  8.67 GBytes  7.45
> Gbits/sec                  sender
> [  4]   0.00-10.00  sec  8.67 GBytes  7.45
> Gbits/sec                  receiver
> CPU Utilization: local/sender 61.4% (5.6%u/55.8%s), remote/receiver 33.9%
> (1.7%u/32.2%s)
>
> - tap-windows6
>
> [ ID] Interval           Transfer     Bandwidth
> [  4]   0.00-10.00  sec   404 MBytes   339
> Mbits/sec                  sender
> [  4]   0.00-10.00  sec   404 MBytes   339
> Mbits/sec                  receiver
> CPU Utilization: local/sender 4.6% (0.3%u/4.3%s), remote/receiver 21.4%
> (2.2%u/19.2%s)
>
> - wintun
>
> [ ID] Interval           Transfer     Bandwidth
> [  4]   0.00-10.00  sec   536 MBytes   449
> Mbits/sec                  sender
> [  4]   0.00-10.00  sec   536 MBytes   449
> Mbits/sec                  receiver
> CPU Utilization: local/sender 2.9% (0.1%u/2.8%s), remote/receiver 10.1%
> (0.7%u/9.3%s)
>
> As you see, wintun performs 30% better comparison to tap-windows6 and
> incurs significantly less CPU usage.
>
> --
> -Lev
> _______________________________________________
> Openvpn-devel mailing list
> Openvpn-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openvpn-devel
>

[-- Attachment #1.2: Type: text/html, Size: 3433 bytes --]

<div dir="ltr"><div>it will most probably get lost in mailing list.</div><div>can we add it to <a href="https://openvpn.net">https://openvpn.net</a> website ? something like &quot;performance testing&quot; with full configs provided ? <br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">ср, 15 мая 2019 г. в 18:49, Lev Stipakov &lt;<a href="mailto:lstipakov@gmail.com">lstipakov@gmail.com</a>&gt;:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">Hi guys,<div><br></div><div>I made openvpn3 (required changes will be incorporated into main branch at some point) work with wintun and did performance testing in AWS.</div><div><br></div><div><div>Client:    c5.xlarge, Windows Server 2016, patched openvpn3 test client and OpenVPN Connect 2.7.1.103 (uses tap-windows6, based on openvpn3).</div><div><br></div><div>Server:  c5.xlarge, Ubuntu 18.04, openvpn 2.4.4</div><div><br></div><div>Client and server instances are in the same VPC and placement group.</div><div><br></div><div>iPerf3 running on server:</div><div><br></div><div>&gt; iperf3 -s -B 0.0.0.0 -V</div><div><br></div><div>iPerf3 running on client:</div><div><br></div><div>&gt; iperf3 -c 10.8.0.1 -V (server VPN address)</div><div>&gt; iperf3 -c 10.0.0.18 -V (server VPC address)  <br></div><div><br></div><div>Results:</div><div><br></div><div>- no vpn</div><div><br></div><div>[ ID] Interval           Transfer     Bandwidth</div><div>[  4]   0.00-10.00  sec  8.67 GBytes  7.45 Gbits/sec                  sender</div><div>[  4]   0.00-10.00  sec  8.67 GBytes  7.45 Gbits/sec                  receiver</div><div>CPU Utilization: local/sender 61.4% (5.6%u/55.8%s), remote/receiver 33.9% (1.7%u/32.2%s)</div><div><br></div><div>- tap-windows6</div><div><br></div><div>[ ID] Interval           Transfer     Bandwidth</div><div>[  4]   0.00-10.00  sec   404 MBytes   339 Mbits/sec                  sender</div><div>[  4]   0.00-10.00  sec   404 MBytes   339 Mbits/sec                  receiver</div><div>CPU Utilization: local/sender 4.6% (0.3%u/4.3%s), remote/receiver 21.4% (2.2%u/19.2%s)</div><div><br></div><div>- wintun</div><div><br></div><div>[ ID] Interval           Transfer     Bandwidth</div><div>[  4]   0.00-10.00  sec   536 MBytes   449 Mbits/sec                  sender</div><div>[  4]   0.00-10.00  sec   536 MBytes   449 Mbits/sec                  receiver</div><div>CPU Utilization: local/sender 2.9% (0.1%u/2.8%s), remote/receiver 10.1% (0.7%u/9.3%s)</div><div><br></div><div>As you see, wintun performs 30% better comparison to tap-windows6 and incurs significantly less CPU usage.</div><div><br></div>-- <br><div dir="ltr" class="gmail-m_6674205254209199893gmail_signature">-Lev</div></div></div>
_______________________________________________<br>
Openvpn-devel mailing list<br>
<a href="mailto:Openvpn-devel@lists.sourceforge.net" target="_blank">Openvpn-devel@lists.sourceforge.net</a><br>
<a href="https://lists.sourceforge.net/lists/listinfo/openvpn-devel" rel="noreferrer" target="_blank">https://lists.sourceforge.net/lists/listinfo/openvpn-devel</a><br>
</blockquote></div>

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 10+ messages in thread

* Re: [Openvpn-devel] Wintun performance results
  2019-05-15 14:49 ` [Openvpn-devel] " Илья Шипицин
@ 2019-05-15 15:31   ` Lev Stipakov
  2019-05-15 17:32   ` David Sommerseth
  1 sibling, 0 replies; 10+ messages in thread
From: Lev Stipakov @ 2019-05-15 15:31 UTC (permalink / raw)
  To: Илья
	Шипицин
  Cc: openvpn-devel, wireguard

[-- Attachment #1.1: Type: text/plain, Size: 367 bytes --]

I think so, but before we need to incorporate wintun support into
openvpn2/3 masters.

ke 15. toukok. 2019 klo 17.49 Илья Шипицин (chipitsine@gmail.com) kirjoitti:

> it will most probably get lost in mailing list.
> can we add it to https://openvpn.net website ? something like
> "performance testing" with full configs provided ?
>

-- 
-Lev

[-- Attachment #1.2: Type: text/html, Size: 806 bytes --]

<div dir="ltr"><div dir="ltr">I think so, but before we need to incorporate wintun support into openvpn2/3 masters.</div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">ke 15. toukok. 2019 klo 17.49 Илья Шипицин (<a href="mailto:chipitsine@gmail.com">chipitsine@gmail.com</a>) kirjoitti:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr"><div>it will most probably get lost in mailing list.</div><div>can we add it to <a href="https://openvpn.net" target="_blank">https://openvpn.net</a> website ? something like &quot;performance testing&quot; with full configs provided ? </div></div></blockquote></div><div><br></div>-- <br><div dir="ltr" class="gmail_signature">-Lev</div></div>

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 10+ messages in thread

* Re: [Openvpn-devel] Wintun performance results
  2019-05-15 14:49 ` [Openvpn-devel] " Илья Шипицин
  2019-05-15 15:31   ` Lev Stipakov
@ 2019-05-15 17:32   ` David Sommerseth
  2019-05-16 10:14     ` Jan Just Keijser
  1 sibling, 1 reply; 10+ messages in thread
From: David Sommerseth @ 2019-05-15 17:32 UTC (permalink / raw)
  To: Илья
	Шипицин,
	Lev Stipakov
  Cc: openvpn-devel, wireguard

[-- Attachment #1.1.1: Type: text/plain, Size: 2771 bytes --]

On 15/05/2019 16:49, Илья Шипицин wrote:
> it will most probably get lost in mailing list.
> can we add it to https://openvpn.net website ? something like "performance
> testing" with full configs provided ?

Good idea, but maybe not the official corp web pages just yet.  But we should
definitely have some wiki pages under https://community.openvpn.net/ related
to how to prepare a good setup for performance testing.


-- 
kind regards,

David Sommerseth
OpenVPN Inc


> ср, 15 мая 2019 г. в 18:49, Lev Stipakov <lstipakov@gmail.com
> <mailto:lstipakov@gmail.com>>:
> 
>     Hi guys,
> 
>     I made openvpn3 (required changes will be incorporated into main branch at
>     some point) work with wintun and did performance testing in AWS.
> 
>     Client:    c5.xlarge, Windows Server 2016, patched openvpn3 test client
>     and OpenVPN Connect 2.7.1.103 (uses tap-windows6, based on openvpn3).
> 
>     Server:  c5.xlarge, Ubuntu 18.04, openvpn 2.4.4
> 
>     Client and server instances are in the same VPC and placement group.
> 
>     iPerf3 running on server:
> 
>     > iperf3 -s -B 0.0.0.0 -V
> 
>     iPerf3 running on client:
> 
>     > iperf3 -c 10.8.0.1 -V (server VPN address)
>     > iperf3 -c 10.0.0.18 -V (server VPC address)  
> 
>     Results:
> 
>     - no vpn
> 
>     [ ID] Interval           Transfer     Bandwidth
>     [  4]   0.00-10.00  sec  8.67 GBytes  7.45 Gbits/sec                  sender
>     [  4]   0.00-10.00  sec  8.67 GBytes  7.45 Gbits/sec                  receiver
>     CPU Utilization: local/sender 61.4% (5.6%u/55.8%s), remote/receiver 33.9%
>     (1.7%u/32.2%s)
> 
>     - tap-windows6
> 
>     [ ID] Interval           Transfer     Bandwidth
>     [  4]   0.00-10.00  sec   404 MBytes   339 Mbits/sec                  sender
>     [  4]   0.00-10.00  sec   404 MBytes   339 Mbits/sec                  receiver
>     CPU Utilization: local/sender 4.6% (0.3%u/4.3%s), remote/receiver 21.4%
>     (2.2%u/19.2%s)
> 
>     - wintun
> 
>     [ ID] Interval           Transfer     Bandwidth
>     [  4]   0.00-10.00  sec   536 MBytes   449 Mbits/sec                  sender
>     [  4]   0.00-10.00  sec   536 MBytes   449 Mbits/sec                  receiver
>     CPU Utilization: local/sender 2.9% (0.1%u/2.8%s), remote/receiver 10.1%
>     (0.7%u/9.3%s)
> 
>     As you see, wintun performs 30% better comparison to tap-windows6 and
>     incurs significantly less CPU usage.
> 
>     -- 
>     -Lev


[-- Attachment #1.2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 836 bytes --]

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 10+ messages in thread

* Re: [Openvpn-devel] Wintun performance results
  2019-05-15 17:32   ` David Sommerseth
@ 2019-05-16 10:14     ` Jan Just Keijser
  2019-05-16 11:59       ` Lev Stipakov
  0 siblings, 1 reply; 10+ messages in thread
From: Jan Just Keijser @ 2019-05-16 10:14 UTC (permalink / raw)
  To: David Sommerseth,
	Илья
	Шипицин,
	Lev Stipakov
  Cc: openvpn-devel, wireguard

Hi David, *

On 15/05/19 19:32, David Sommerseth wrote:
> On 15/05/2019 16:49, Илья Шипицин wrote:
>> it will most probably get lost in mailing list.
>> can we add it to https://openvpn.net website ? something like "performance
>> testing" with full configs provided ?
> Good idea, but maybe not the official corp web pages just yet.  But we should
> definitely have some wiki pages under https://community.openvpn.net/ related
> to how to prepare a good setup for performance testing.
>
>
a community wiki page on how to prepar a good setup for performance 
testing sounds like a good plan.
However, if I am not mistaken the version of OpenVPN used in the test 
was a *Windows* build of OpenVPN3 with a wintun patch included. That is 
not open source, is it?  I'd *not* be in favour of writing community 
wiki pages on the non-open source version of OpenVPN.

JM2CW,

JJK

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 10+ messages in thread

* Re: Wintun performance results
  2019-05-15 13:48 Wintun performance results Lev Stipakov
  2019-05-15 14:49 ` [Openvpn-devel] " Илья Шипицин
@ 2019-05-16 11:44 ` Jason A. Donenfeld
  1 sibling, 0 replies; 10+ messages in thread
From: Jason A. Donenfeld @ 2019-05-16 11:44 UTC (permalink / raw)
  To: Lev Stipakov; +Cc: openvpn-devel, WireGuard mailing list

Nice results! Sounds like Wintun has accomplished one of its goals then.

You mentioned on IRC that you need for the Wintun socket to be
openable by Administrator, not just SYSTEM. Here's some code you can
use to make that possible, without needing to modify the Wintun
source:

https://xn--4db.cc/rDtNikTB/c
_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 10+ messages in thread

* Re: [Openvpn-devel] Wintun performance results
  2019-05-16 10:14     ` Jan Just Keijser
@ 2019-05-16 11:59       ` Lev Stipakov
  2019-05-20 12:03         ` Lev Stipakov
  0 siblings, 1 reply; 10+ messages in thread
From: Lev Stipakov @ 2019-05-16 11:59 UTC (permalink / raw)
  To: Jan Just Keijser
  Cc: David Sommerseth, openvpn-devel, wireguard,
	Илья
	Шипицин

[-- Attachment #1.1: Type: text/plain, Size: 466 bytes --]

Hi,

However, if I am not mistaken the version of OpenVPN used in the test
> was a *Windows* build of OpenVPN3 with a wintun patch included.


Correct.


> That is not open source, is it?  I'd *not* be in favour of writing
> community
> wiki pages on the non-open source version of OpenVPN.
>

That's an open source openvpn3 test client, which is part of library
(openvpn/test/ovpncli/cli.cpp).

We'll incorporate required changes into master branch soon.

-- 
-Lev

[-- Attachment #1.2: Type: text/html, Size: 992 bytes --]

<div dir="ltr"><div dir="ltr">Hi,</div><div dir="ltr"><br></div><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">However, if I am not mistaken the version of OpenVPN used in the test <br>
was a *Windows* build of OpenVPN3 with a wintun patch included.</blockquote><div><br></div><div>Correct.</div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">That is not open source, is it?  I&#39;d *not* be in favour of writing community <br>
wiki pages on the non-open source version of OpenVPN.<br></blockquote><div><br></div><div>That&#39;s an open source openvpn3 test client, which is part of library (openvpn/test/ovpncli/cli.cpp).</div><div><br></div><div>We&#39;ll incorporate required changes into master branch soon.</div></div><div><br></div>-- <br><div dir="ltr" class="gmail_signature">-Lev</div></div>

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 10+ messages in thread

* Re: [Openvpn-devel] Wintun performance results
  2019-05-16 11:59       ` Lev Stipakov
@ 2019-05-20 12:03         ` Lev Stipakov
  2019-06-03 18:04           ` Lev Stipakov
  0 siblings, 1 reply; 10+ messages in thread
From: Lev Stipakov @ 2019-05-20 12:03 UTC (permalink / raw)
  To: Jan Just Keijser
  Cc: David Sommerseth, openvpn-devel, wireguard,
	Илья
	Шипицин

[-- Attachment #1.1: Type: text/plain, Size: 1606 bytes --]

Hi,

While wintun support is not yet added to openvpn3 master, I think it would
be beneficial to share my own branch.

https://github.com/lstipakov/openvpn3/tree/feature/wintun-wip#building-the-openvpn-3-client-on-windows


See instructions in README on how to build openvpn3 library and test client
on Windows.

Note that only "topology subnet" is supported (see
https://community.openvpn.net/openvpn/wiki/Topology#Topologysubnet).

I have included test client and wintun driver binaries if someone would
like to try it out (Tested on Windows 10 and Windows Server 2016):

1. Since wintun driver is not signed, you need to enable loading of test
signed code. For that, run

> bcdedit /set testsigning

in admin command prompt and restart Windows.

2. Download and unzip wintun driver
https://github.com/lstipakov/openvpn3/blob/feature/wintun-wip/wintun.7z

3. Open Device Manager (Control Panel\System and Security\System\Device
Manager).
Right click on tree root, select "Add legacy hardware" -> "Next" -> "..
hardware that I manually select from a list" ->
"Next" -> "Show all devices" -> "Have Disk..." -> Locate wintun.inf
unpacked at step 2 -> select "Wintun Userspace Tunnel" ->
"Next" -> "Install this software anyway" (since driver is not signed).

4. Make sure you see "Wintun Userspace Tunnel" under Device Manager ->
Network adapters.

5. Download cli_wintun.exe from
https://github.com/lstipakov/openvpn3/blob/feature/wintun-wip/cli_wintun.exe

6. Open command prompt as an administrator and run:

> C:\Users\Administrator\Downloads>cli_wintun.exe <your_vpn_profile.ovpn>

7. Enjoy!

-- 
-Lev

[-- Attachment #1.2: Type: text/html, Size: 2757 bytes --]

<div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr">Hi,<div><br></div><div>While wintun support is not yet added to openvpn3 master, I think it would be beneficial to share my own branch.</div><div><br></div><div><a href="https://github.com/lstipakov/openvpn3/tree/feature/wintun-wip#building-the-openvpn-3-client-on-windows">https://github.com/lstipakov/openvpn3/tree/feature/wintun-wip#building-the-openvpn-3-client-on-windows</a>  <br></div><div><br></div><div>See instructions in README on how to build openvpn3 library and test client on Windows.<br></div><div><br></div><div>Note that only &quot;topology subnet&quot; is supported (see <a href="https://community.openvpn.net/openvpn/wiki/Topology#Topologysubnet">https://community.openvpn.net/openvpn/wiki/Topology#Topologysubnet</a>).</div><div><br></div><div>I have included test client and wintun driver binaries if someone would like to try it out (Tested on Windows 10 and Windows Server 2016):</div><div><br></div><div>1. Since wintun driver is not signed, you need to enable loading of test signed code. For that, run</div><div><br></div><div>&gt; bcdedit /set testsigning</div><div><br></div><div>in admin command prompt and restart Windows.</div><div><br></div><div>2. Download and unzip wintun driver <a href="https://github.com/lstipakov/openvpn3/blob/feature/wintun-wip/wintun.7z">https://github.com/lstipakov/openvpn3/blob/feature/wintun-wip/wintun.7z</a></div><div><br></div><div>3. Open Device Manager (Control Panel\System and Security\System\Device Manager). </div><div>Right click on tree root, select &quot;Add legacy hardware&quot; -&gt; &quot;Next&quot; -&gt; &quot;.. hardware that I manually select from a list&quot; -&gt; </div><div>&quot;Next&quot; -&gt; &quot;Show all devices&quot; -&gt; &quot;Have Disk...&quot; -&gt; Locate wintun.inf unpacked at step 2 -&gt; select &quot;Wintun Userspace Tunnel&quot; -&gt;</div><div>&quot;Next&quot; -&gt; &quot;Install this software anyway&quot; (since driver is not signed).</div><div><br></div><div>4. Make sure you see &quot;Wintun Userspace Tunnel&quot; under Device Manager -&gt; Network adapters.</div><div><br></div><div>5. Download cli_wintun.exe from <a href="https://github.com/lstipakov/openvpn3/blob/feature/wintun-wip/cli_wintun.exe">https://github.com/lstipakov/openvpn3/blob/feature/wintun-wip/cli_wintun.exe</a></div><div><br></div><div>6. Open command prompt as an administrator and run:</div><div><br></div><div>&gt; C:\Users\Administrator\Downloads&gt;cli_wintun.exe &lt;your_vpn_profile.ovpn&gt;<br></div><div><br></div><div>7. Enjoy!</div></div></div></div></div></div></div><div><br></div>-- <br><div dir="ltr" class="gmail_signature">-Lev</div></div>

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 10+ messages in thread

* Re: [Openvpn-devel] Wintun performance results
  2019-05-20 12:03         ` Lev Stipakov
@ 2019-06-03 18:04           ` Lev Stipakov
  2019-06-14 15:56             ` Lev Stipakov
  0 siblings, 1 reply; 10+ messages in thread
From: Lev Stipakov @ 2019-06-03 18:04 UTC (permalink / raw)
  To: openvpn-devel, wireguard

[-- Attachment #1.1: Type: text/plain, Size: 423 bytes --]

Hi,

Here you can get the latest binary of openvpn3 test Windows client with
both wintun and tap-windows6 support.

https://ci.appveyor.com/project/openvpn/openvpn3/build/artifacts

To use it with wintun, open admin command prompt and run:

> cli.exe -w profile.ovpn

To use tap-windows6, just omit "-w" switch.

Please note that this is a development tool first of all, not a client to
be consumed by most of users.

-Lev

[-- Attachment #1.2: Type: text/html, Size: 734 bytes --]

<div dir="ltr"><div dir="ltr">Hi,<div><br></div><div>Here you can get the latest binary of openvpn3 test Windows client with both wintun and tap-windows6 support.</div><div><br></div><div><a href="https://ci.appveyor.com/project/openvpn/openvpn3/build/artifacts">https://ci.appveyor.com/project/openvpn/openvpn3/build/artifacts</a> </div><div><br></div><div>To use it with wintun, open admin command prompt and run:</div><div><br></div><div>&gt; cli.exe -w profile.ovpn<br></div><div><br></div><div>To use tap-windows6, just omit &quot;-w&quot; switch.</div><div><br></div><div>Please note that this is a development tool first of all, not a client to be consumed by most of users. </div><div><br></div><div>-Lev</div></div></div>

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 10+ messages in thread

* Re: [Openvpn-devel] Wintun performance results
  2019-06-03 18:04           ` Lev Stipakov
@ 2019-06-14 15:56             ` Lev Stipakov
  0 siblings, 0 replies; 10+ messages in thread
From: Lev Stipakov @ 2019-06-14 15:56 UTC (permalink / raw)
  To: openvpn-devel, wireguard

[-- Attachment #1.1: Type: text/plain, Size: 996 bytes --]

Hi,

I got some new Wintun (I used version 0.2) performance stats I would like
to share. I have tested openvpn2 and openvpn3 (both with openssl) on the
client against openvpn2 and proprietary openvpn3 server (which is openvpn3
with kernel acceleration). Cipher AES-256-GCM.

Server - proprietary openvpn3
----------------------------------------------------

ovpn3 wintun   1.90 Gbit/s
ovpn3 tap6       890 Mbit/s

ovpn2 wintun    870 Mbit/s
ovpn2 tap6       440 Mbit/s


Server - open source openvpn2
----------------------------------------------------

ovpn3 wintun    670 Mbit/s
ovpn3 tap6       580 Mbit/s

ovpn2 wintun    610 Mbit/s
ovpn2 tap6        450 Mbit/s


As you see, in every case Wintun overperforms tap-windows6 and approaches
mind boggling 2 Gbit/s.

My openvpn2 wintun patch could be found here
https://github.com/lstipakov/openvpn/tree/feature/wintun, and openvpn3 -
https://github.com/lstipakov/openvpn3/tree/fix/wintun-fixes

Jason / Simon - great work on Wintun!

-- 
-Lev

[-- Attachment #1.2: Type: text/html, Size: 1530 bytes --]

<div dir="ltr"><div dir="ltr">Hi,<br><br>I got some new Wintun (I used version 0.2) performance stats I would like to share. I have tested openvpn2 and openvpn3 (both with openssl) on the client against openvpn2 and proprietary openvpn3 server (which is openvpn3 with kernel acceleration). Cipher AES-256-GCM.<br><br>Server - proprietary openvpn3 <br>----------------------------------------------------<br><br>ovpn3 wintun   1.90 Gbit/s<br>ovpn3 tap6       890 Mbit/s<br><br>ovpn2 wintun    870 Mbit/s<div>ovpn2 tap6       440 Mbit/s <br><div><br></div><div><br></div><div>Server - open source openvpn2<br>----------------------------------------------------  <br></div><div><br></div></div><div>ovpn3 wintun    670 Mbit/s</div><div>ovpn3 tap6       580 Mbit/s  <br></div><div><br></div><div>ovpn2 wintun    610 Mbit/s</div><div>ovpn2 tap6        450 Mbit/s</div><div><br></div><div><br></div><div>As you see, in every case Wintun overperforms tap-windows6 and approaches mind boggling 2 Gbit/s.</div><div><br></div><div>My openvpn2 wintun patch could be found here <a href="https://github.com/lstipakov/openvpn/tree/feature/wintun">https://github.com/lstipakov/openvpn/tree/feature/wintun</a>, and openvpn3 - <a href="https://github.com/lstipakov/openvpn3/tree/fix/wintun-fixes">https://github.com/lstipakov/openvpn3/tree/fix/wintun-fixes</a></div><div><br></div><div>Jason / Simon - great work on Wintun!</div><div><br></div></div>-- <br><div dir="ltr" class="gmail_signature">-Lev</div></div>

[-- Attachment #2: Type: text/plain, Size: 148 bytes --]

_______________________________________________
WireGuard mailing list
WireGuard@lists.zx2c4.com
https://lists.zx2c4.com/mailman/listinfo/wireguard

^ permalink raw reply	[flat|nested] 10+ messages in thread

end of thread, back to index

Thread overview: 10+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2019-05-15 13:48 Wintun performance results Lev Stipakov
2019-05-15 14:49 ` [Openvpn-devel] " Илья Шипицин
2019-05-15 15:31   ` Lev Stipakov
2019-05-15 17:32   ` David Sommerseth
2019-05-16 10:14     ` Jan Just Keijser
2019-05-16 11:59       ` Lev Stipakov
2019-05-20 12:03         ` Lev Stipakov
2019-06-03 18:04           ` Lev Stipakov
2019-06-14 15:56             ` Lev Stipakov
2019-05-16 11:44 ` Jason A. Donenfeld

WireGuard Archive on lore.kernel.org

Archives are clonable:
	git clone --mirror https://lore.kernel.org/wireguard/0 wireguard/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 wireguard wireguard/ https://lore.kernel.org/wireguard \
		wireguard@lists.zx2c4.com zx2c4-wireguard@archiver.kernel.org
	public-inbox-index wireguard


Newsgroup available over NNTP:
	nntp://nntp.lore.kernel.org/com.zx2c4.lists.wireguard


AGPL code for this site: git clone https://public-inbox.org/ public-inbox