On Thu, Jan 19, 2006 at 11:28:31AM +0000, Stuart Henderson wrote:
> On 2006/01/19 10:39, Simon Slaytor wrote:
> > Stuart Henderson wrote:
> > >On 2006/01/19 09:38, Simon Slaytor wrote:
> > >
> > >>When comparing the two vpn solutions for speed, subjectively the OpenVPN
> > >>feels slightly faster
> > >
> > >If you're using compression on OpenVPN but not on IPSEC, that would
> > >probably explain the speed difference.
> >
> > Agreed, any idea on how the cyphers compare i.e. 3DES v Blowfish in
> > regard to CPU overhead?
>
> 'openssl speed' will show you on your system, but Blowfish (and AES,
> at least at some block sizes) are something like twice as fast when
> implemented in software on a standard CPU.
Not to mention the fact that in-kernel software, all else being equal,
runs faster due to the lack of context switches and so on.
OTOH, OpenVPN uses adaptive compression, which can at times be
preferable to the IPsec on/off option.
Joachim
