Tinc performance on a Dir-300

[Julian Bäume]

moin,

Am Montag, 20. September 2010, 16:37:03 schrieb Clemens John:
> we are using Tinc in our Freifunk Network in Oldenburg for internode
> connections over the internet. So Tinc is running on OpenWrt 10.03 on Dlink
> Dir-300 Routers.
> We all have enough internet bandwith (1,6 MB/sec and more) but we only get
> a maximum speed of ~350KB/sec between two tinc nodes because then tinc
> uses 99% of the cpu.

We faced the same issues on our routers. They are used as mesh-nodes in a 
Freifunk network, too ;) 
 
> Is it possible to get more Speed with tinc on this machines? I think we
> have compression and encryption already turned off so what is using the
> cpu?

We tried to profile this, but it wasn’t easy to do that on the hardware, so we 
gave up on this :/ We also couldn’t see any difference when turning off 
encryption, IIRC. I remember running tinc using valgrind on my desktop and 
mentioned, that most time was spent with xor operations, so in the crypto 
part. I can’t remember many details but I concluded, that everything seems 
fine on the desktop. May be, you could try to reproduce this or get any better 
results than me. If you’re interested, I might have the data still laying 
around somewhere.

> Our Tinc configuration looks like this:
> ---------
> Name = 0014224074A7
> Mode = Switch
> Port = 655
> #PingTimeout = 30
> Hostnames=yes
> PMTUDiscovery=yes
> Cipher = none
> Compress = 0
> Digest = none
> IndirectData = yes
> ConnectTo=0021912CF309
> ConnectTo=00240117B755
> ConnectTo=batgw
> ConnectTo=0022B0967CD7
> ConnectTo=0014224074A7
> ----------

Seems, you are using our scripts, if I think about it ;) or you just had the 
same idea to use the routers’ MAC  addresses as names in tinc ;) At least this 
seems very familiar to me.

> If there is no way to get more speed, do you know another VPN-Solution
> which is better concerning speed? We dont need security because the
> network is completely open, but we need speed.

I expect, you want to use tinc to connect several mesh-clouds using tinc over 
some private Internet connections. That’s exactly, what we had in mind when we 
decided that we want to use tinc for that. It just seemed to be _the_ tool to 
do this job.

Please keep me posted if you make any progress. (contact me directly or just 
post to our ML: freifunk.luebeck AT asta.uni-luebeck.de)

bye then
julian

PS: At the moment, our group is a little inactive, because we didn’t have much 
time recently. But I think, at least I will be able to discuss these issues, 
may be we can find a solution for this. If you want us to test something or 
want to know details about our setup, just ask.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part.
URL: <http://www.tinc-vpn.org/pipermail/tinc/attachments/20100920/0fd11db7/attachment.pgp>