Throughput speeds of UG-101 Gateway

Throughput speeds of UG-101 Gateway

WAN Throuput

Because of the Cavium Octeon III network processor used in the Gateway, the internal routing / VLAN-firewalling performance is of course quite high -3-4 gigabits/second. With all sophisticated Firewall functions enabled (Country Blocking, Domain Filtering)  EXCEPT Threat Analysis (IDS/IPS), the WAN uplink can exceed 900 Mb/s.

For example, a screenshot of a speedtest on a Google Fiber link:




The IDS/IPS (Threat Analysis) firewall feature requires taking apart and analyzing every single byte of every packet, including TCP reassembly, and so it's a substantial workout even for a Cavium. It maxes out about 220 Mb/s. For example, another speedtest with IDS/IPS enabled:





Site-to-Site VPN

The S2S VPN speeds are very dependent on the path delay between the sites and the VPN hub in the cloud. For some really terrible paths (over an AT&T LTE link, for example) I've measured as low as a few megabits/second. Typically we see between 50 and 70 megabits/second. There are some customers that have S2S VPNs within the same carrier subnet that get up to 90 megabits/second.

Normally the S2S VPN speed is not a factor, because the S2S VPN speeds are usually constrained by the UPLINK ISP bandwidth. (S2S VPN traffic always goes out the uplink WAN link on the sending side.) The typical ISP uplink has 20-60 megabits/second, and the S2S VPN is capable of saturating most ISP uplinks.