Forum Discussion

xXhd1912Xx_1953's avatar
xXhd1912Xx_1953
Icon for Cirrus rankCirrus
May 11, 2017

Expected Speed/Throughput on APM SSL VPN

Anyone have vpn configured with APM? I can't find anything on throughput speed limitations. I am seeing terrible speeds in relation to actual link speed when going through the VPN. We have a 1GB network wire. When transferring files via WinScp over the VPN on the LOCAL network I am seeing client to server speeds around 600 to 900 KiBs. When I bypass the VPN Im getting 900Mbits/sec. Now I know that there is overhead but is there that much overhead? Is this expected performance? I have tried everything including stripping down the VIP to no auth, performance profiles, DTLS...etc. I have checked license limitations as well. I have tried tweaking the TCP profiles to up the windows and buffers but this doesnt seem to make any difference. The capture doesnt show the tcp sliding window factor but it seems like the F5 is choking on the data when transferring or its telling the client not to dump so much data on the wire. If this is the case then fine but I cant find any explanation out there. What do your speeds look like? I have tested internally from client>switch>firewall>bigip>switch>server on a local lan and the speeds are around 6-9Mbits.

 

APM
application delivery
BIG-IP

5 Replies

Sort By
  • AN's avatar
    AN
    Icon for Nimbostratus rankNimbostratus
    Jun 21, 2017

    We are having same issue with CISCO Anyconnect I thought I will try F5 but seems like it's same issue you are having,, I haven't configured on F5 ,,, I will try and see if I run into bandwidth issue..

     

    Thanks.

     

  • pponte's avatar
    pponte
    Icon for Altostratus rankAltostratus
    Sep 11, 2017

    I am not using it, but it seems there is a way to limit bandwidth connections.

     

    Go to Access Policy ›› Network Access >> Client Traffic Control

     

    I don't know if there is any default value

     

    • xXhd1912Xx_1953's avatar
      xXhd1912Xx_1953
      Icon for Cirrus rankCirrus
      Dec 10, 2018

      This turned out to be a cipher/ssl issue. Try using a faster cipher on the profile, my customer at the time noticed a huge improvement when changing the ciphers. Can’t remember what he used however.

       

    • a_basharat's avatar
      a_basharat
      Icon for Nimbostratus rankNimbostratus
      Mar 05, 2019

      Ciphers?? Are you having a split or full tunnel VPN? would be great if you can dig out the Ciphers being used to VPN?