Raspberry Pi 4 VPN performance review

Zerotier iperf3:

Wireguard and Zerotier – New VPN Technologies performance with iperf3

IPerf3 between Raspberry Pi 4 and OPnsense, same LAN.

root@pi4:~# iperf3 -c 192.168.5.50 -R
Connecting to host 192.168.5.50, port 5201
Reverse mode, remote host 192.168.5.50 is sending
[ 5] local 192.168.5.123 port 32994 connected to 192.168.5.50 port 5201
[ ID] Interval Transfer Bitrate
[ 5] 0.00-1.00 sec 109 MBytes 914 Mbits/sec
[ 5] 1.00-2.00 sec 112 MBytes 940 Mbits/sec
[ 5] 2.00-3.00 sec 112 MBytes 940 Mbits/sec
[ 5] 3.00-4.00 sec 112 MBytes 940 Mbits/sec
[ 5] 4.00-5.00 sec 112 MBytes 940 Mbits/sec
[ 5] 5.00-6.00 sec 112 MBytes 940 Mbits/sec
[ 5] 6.00-7.00 sec 112 MBytes 940 Mbits/sec
[ 5] 7.00-8.00 sec 112 MBytes 940 Mbits/sec
[ 5] 8.00-9.00 sec 99.4 MBytes 834 Mbits/sec
[ 5] 9.00-10.00 sec 112 MBytes 941 Mbits/sec

[ ID] Interval Transfer Bitrate
[ 5] 0.00-10.03 sec 1.08 GBytes 925 Mbits/sec sender
[ 5] 0.00-10.00 sec 1.08 GBytes 927 Mbits/sec receiver
iperf Done.
root@pi4:~# iperf3 -c 192.168.5.50
Connecting to host 192.168.5.50, port 5201
[ 5] local 192.168.5.123 port 32998 connected to 192.168.5.50 port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 110 MBytes 919 Mbits/sec 0 238 KBytes
[ 5] 1.00-2.00 sec 112 MBytes 937 Mbits/sec 0 238 KBytes
[ 5] 2.00-3.00 sec 112 MBytes 939 Mbits/sec 0 235 KBytes
[ 5] 3.00-4.00 sec 112 MBytes 939 Mbits/sec 0 235 KBytes
[ 5] 4.00-5.00 sec 112 MBytes 942 Mbits/sec 0 235 KBytes
[ 5] 5.00-6.00 sec 112 MBytes 938 Mbits/sec 0 235 KBytes
[ 5] 6.00-7.00 sec 111 MBytes 927 Mbits/sec 0 232 KBytes
[ 5] 7.00-8.00 sec 107 MBytes 900 Mbits/sec 0 235 KBytes
[ 5] 8.00-9.00 sec 107 MBytes 900 Mbits/sec 0 235 KBytes
[ 5] 9.00-10.00 sec 103 MBytes 867 Mbits/sec 0 5.66 KBytes

[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 1.07 GBytes 921 Mbits/sec 0 sender
[ 5] 0.00-10.04 sec 1.07 GBytes 916 Mbits/sec receiver
iperf Done.

Now using Zerotier in the same LAN. (using VPN-zerotier, of course)
RPi IP address: 192.168.195.59
OPNsense IP address: 192.168.195.80

root@pi4:~# iperf3 -c 192.168.195.80
Connecting to host 192.168.195.80, port 5201
[ 5] local 192.168.195.59 port 59724 connected to 192.168.195.80 port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 23.8 MBytes 200 Mbits/sec 0 118 KBytes
[ 5] 1.00-2.00 sec 27.5 MBytes 231 Mbits/sec 0 118 KBytes
[ 5] 2.00-3.00 sec 27.1 MBytes 228 Mbits/sec 0 129 KBytes
[ 5] 3.00-4.00 sec 27.5 MBytes 231 Mbits/sec 0 129 KBytes
[ 5] 4.00-5.00 sec 27.1 MBytes 228 Mbits/sec 0 145 KBytes
[ 5] 5.00-6.00 sec 27.5 MBytes 231 Mbits/sec 0 129 KBytes
[ 5] 6.00-7.00 sec 26.8 MBytes 224 Mbits/sec 0 129 KBytes
[ 5] 7.00-8.00 sec 27.5 MBytes 231 Mbits/sec 0 129 KBytes
[ 5] 8.00-9.00 sec 27.5 MBytes 231 Mbits/sec 0 129 KBytes
[ 5] 9.00-10.00 sec 23.9 MBytes 200 Mbits/sec 0 118 KBytes

[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 266 MBytes 223 Mbits/sec 0 sender
[ 5] 0.00-10.00 sec 266 MBytes 223 Mbits/sec receiver
iperf Done.
root@pi4:~# iperf3 -c 192.168.195.80 -R
Connecting to host 192.168.195.80, port 5201
Reverse mode, remote host 192.168.195.80 is sending
[ 5] local 192.168.195.59 port 59728 connected to 192.168.195.80 port 5201
[ ID] Interval Transfer Bitrate
[ 5] 0.00-1.00 sec 26.8 MBytes 225 Mbits/sec
[ 5] 1.00-2.00 sec 28.5 MBytes 239 Mbits/sec
[ 5] 2.00-3.00 sec 20.5 MBytes 172 Mbits/sec
[ 5] 3.00-4.00 sec 39.9 MBytes 335 Mbits/sec
[ 5] 4.00-5.00 sec 39.6 MBytes 333 Mbits/sec
[ 5] 5.00-6.00 sec 38.7 MBytes 325 Mbits/sec
[ 5] 6.00-7.00 sec 40.8 MBytes 343 Mbits/sec
[ 5] 7.00-8.00 sec 42.0 MBytes 352 Mbits/sec
[ 5] 8.00-9.00 sec 36.3 MBytes 305 Mbits/sec
[ 5] 9.00-10.00 sec 42.4 MBytes 356 Mbits/sec

[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 356 MBytes 299 Mbits/sec 373 sender
[ 5] 0.00-10.00 sec 356 MBytes 298 Mbits/sec receiver
iperf Done.

Now using Wireguard -> OPnsense.
Just to mention that Wireguard is installed in kernel compared to zerotier that’s not.
OPNsense IP: 10.2.1.1
RPi4 IP: 10.2.1.3

root@DietPi:/# iperf3 -c 10.2.1.1
Connecting to host 10.2.1.1, port 5201
[ 5] local 10.2.1.3 port 35600 connected to 10.2.1.1 port 5201
[ ID] Interval Transfer Bitrate Retr Cwnd
[ 5] 0.00-1.00 sec 30.3 MBytes 254 Mbits/sec 573 82.8 KBytes
[ 5] 1.00-2.00 sec 35.4 MBytes 297 Mbits/sec 591 174 KBytes
[ 5] 2.00-3.00 sec 44.1 MBytes 370 Mbits/sec 318 148 KBytes
[ 5] 3.00-4.00 sec 38.1 MBytes 319 Mbits/sec 783 58.8 KBytes
[ 5] 4.00-5.00 sec 35.3 MBytes 296 Mbits/sec 1331 40.1 KBytes
[ 5] 5.00-6.00 sec 30.0 MBytes 252 Mbits/sec 1030 97.5 KBytes
[ 5] 6.00-7.00 sec 27.2 MBytes 228 Mbits/sec 661 128 KBytes
[ 5] 7.00-8.00 sec 24.4 MBytes 205 Mbits/sec 623 142 KBytes
[ 5] 8.00-9.00 sec 18.5 MBytes 155 Mbits/sec 438 74.8 KBytes
[ 5] 9.00-10.00 sec 27.5 MBytes 230 Mbits/sec 405 104 KBytes

[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 311 MBytes 261 Mbits/sec 6753 sender
[ 5] 0.00-10.00 sec 310 MBytes 260 Mbits/sec receiver
iperf Done.
root@DietPi:/# iperf3 -c 10.2.1.1 -R
Connecting to host 10.2.1.1, port 5201
Reverse mode, remote host 10.2.1.1 is sending
[ 5] local 10.2.1.3 port 35604 connected to 10.2.1.1 port 5201
[ ID] Interval Transfer Bitrate
[ 5] 0.00-1.00 sec 49.4 MBytes 414 Mbits/sec
[ 5] 1.00-2.00 sec 48.8 MBytes 409 Mbits/sec
[ 5] 2.00-3.00 sec 54.3 MBytes 455 Mbits/sec
[ 5] 3.00-4.00 sec 39.0 MBytes 327 Mbits/sec
[ 5] 4.00-5.00 sec 53.0 MBytes 444 Mbits/sec
[ 5] 5.00-6.00 sec 39.8 MBytes 334 Mbits/sec
[ 5] 6.00-7.00 sec 39.9 MBytes 334 Mbits/sec
[ 5] 7.00-8.00 sec 50.7 MBytes 425 Mbits/sec
[ 5] 8.00-9.00 sec 41.0 MBytes 344 Mbits/sec
[ 5] 9.00-10.00 sec 33.4 MBytes 280 Mbits/sec

[ ID] Interval Transfer Bitrate Retr
[ 5] 0.00-10.00 sec 449 MBytes 377 Mbits/sec 66 sender
[ 5] 0.00-10.00 sec 449 MBytes 377 Mbits/sec receiver
iperf Done.

As you can see, Wireguard it’s a little more faster than Zerotier.

Leave a reply:

Your email address will not be published.

Site Footer