Throughput speeds of UG-101 Gateway

Throughput speeds of UG-101 Gateway

WAN Throuput

Because of the Cavium Octeon III network processor used in the Gateway, the internal routing / VLAN-firewalling performance is of course quite high -3-4 gigabits/second. With all sophisticated Firewall functions enabled (Country Blocking, Domain Filtering)  EXCEPT Threat Analysis (IDS/IPS), the WAN uplink can exceed 900 Mb/s.

For example, a screenshot of a speedtest on a Google Fiber link:




The IDS/IPS (Threat Analysis) firewall feature requires taking apart and analyzing every single byte of every packet, including TCP reassembly, and so it's a substantial workout even for a Cavium. It maxes out about 220 Mb/s. For example, another speedtest with IDS/IPS enabled:





Site-to-Site VPN

The S2S VPN speeds are very dependent on the path delay between the sites and the VPN hub in the cloud. For some really terrible paths (over an AT&T LTE link, for example) I've measured as low as a few megabits/second. Typically we see between 50 and 70 megabits/second. There are some customers that have S2S VPNs within the same carrier subnet that get up to 90 megabits/second.

Normally the S2S VPN speed is not a factor, because the S2S VPN speeds are usually constrained by the UPLINK ISP bandwidth. (S2S VPN traffic always goes out the uplink WAN link on the sending side.) The typical ISP uplink has 20-60 megabits/second, and the S2S VPN is capable of saturating most ISP uplinks.



    • Related Articles

    • Speedtest results are slower than expected

      Unlike cable internet, which connects several DOCSIS 3.x channels to generate a 1 Gb/s link, fiber internet has a considerably smaller number of bonded channels. Even with that, increasing the number of test streams has a substantial influence on ...

    • Slow internet - Speed capped at 150Mbps - IPS/IDS

      I see that Threat Analysis (Snort IPS/IDS) is enabled on this site. Threat Analysis in configured in the Firewall > Threat Analysis section of the Portal . This means to accurately run a speed test for the entire network you will need to run speed ...

    • Steps to replace a Gateway - RMA / Upgrade

      Introduction Because the configuration for all Uplevel hardware, including any backed up data, is stored in the cloud, any replacement hardware, including upgrades, would be treated as a typical box swap (e.g., just like if the original box failed ...

    • Light Statuses for UG-101 and UG-204 Gateways.

      Gateway status lights are interpreted as follows:a) Gateway unable to get a DHCP address: UG-101: "A" light is off UG-204: "Aux Internet" light is blinking b) Gateway unable to complete DNS queries: UG-101: Status light is orange UG-204: "Local 2" ...

    • Data Transfer Rates 1xx vs 206 Gateways.

      The Engineering Department completed their performance comparison of the UG-206 and UG-101. Here is the summary. They ran his tests using two different sets of data, both 20GB in size. The first set was 20 files of 1GB each. The second set was 20,000 ...