Global VPN File Transfer Speeds

Posting with a “wow” observation instead of a complaint. We started life with an OpenVPN solution getting about 0.5 MB/s on a good day to our VPN end users. We switched to Sonicwall Global VPN client and immediately bumped to 3.5 to 5 MB/s, so a 10X improvement. As part of some speed testing and tuning, we recently changed the sonicwall-to-core-switch-connection from a 1 Gbps port on the SW to a 2.5 Gbps port. Immediate 2x speed improvement. I got almost 40 MB/s between my VPN client and the server, which blows my mind because it seems like it exceeds what Microsoft will tell you is possible for SMB file transfer. We were surprised because the WAN connection is only 1 Gbps fiber. So heads up speed junkies you should test the 2.5 Gbps port on your Sonicwall if using GlobalVPN… Has anyone else gotten speeds like this between your SW and VPN end points?

Setup: 1 Gbps fiber WAN → Gbps NSA 2650 2.5 Gbps port → Unifi Enterprise XG 2.5 Gbps port → Dell File Server w/ 4 NICS @ 10 Gbps each

Disable rsc and you will get full speed it can do :wink:

get-netadapterrsc | disable-netadapterrsc

Network drivers are very buggy and has a cry with that feature that’s turned on by default

Not sure where you get the 40Mb limit from. I routinely max out 1Gb ethernet copying from box to box over SMB connections. This is with nothing special setups.

You got any Sonicwall security services enabled on the 1Gbs port that aren’t enabled on the 2.5 port?

Where did you get that MS said 40MB for SMB is the limit? We push 100MB - granted its SMB 3.1.1. multichannel but that shouldn’t matter that much

We have a client who likes to work from home and runs excel worksheets which pull down SQL data. Their global VPN client manages upwards of 600mb/sec for large queries. It’s not very scientific but you should be able to max out a 1gb fiber VPN if both the fw and the pc can handle the encryption rate with their cpus.

I had a ticket with SonicWall about similar issues with SSL VPN. They just said our SQL based MIS was just too large to work. Global VPN didnt show much improvement.
IPsec between sites is 1GB. Global VPN for testing is much slower, I think it maxed at 80 Mbps for SMB.

I use sonicwall gvc to my office which is box to box to my home office and remote to my home PC from Europe and barely notice the speed difference from working at home. Have used this while traveling for years.

Check to make sure tcp stream is disabled under GAV and see if it improves it.

You sure it isn’t an issue or a setting with your original port?

Doesn’t make much sense why a 2.5gb port vs a 1GB port would affect speeds, especially when all those speeds are well under 1gbps.

To be clear, we’re only using the 1gbps ports and see up to 400mbit as well.

SSL is an other story though….

I am doing this over three years now. Is this still not patched?

there is a reason why the NSA2700 can do either 25 SSLVPN or 250 GVPN. GVPN is a lot lighter on the CPU. The SMA appliances have ASICS to handle the heavy lifting.

Nope, it affects all vpn types not just sonicwall