IPsec VPN throughput on 3220

VzServiceDesk — Tue, 03 Mar 2020 01:24:34 GMT

Hi Everyone,

As per PA-3220 datasheet IPsec throughput can be 2.5Gps.

https://www.paloguard.com.au/datasheets/pa-3200-series.pdf

The palo in my environment got 1 Gig interface (internet facing) and multiple ipsec tunnels are configured to communicate to different cloud providers without any rate limiting....so question is how to figure out what would be the actual throughput of the VPN tunnels ? as the physical interface speed is 1G maximum..

Re: IPsec VPN throughput on 3220

Brandon_Wertz — Tue, 03 Mar 2020 16:31:04 GMT

@VzServiceDesk wrote:
Hi Everyone,

As per PA-3220 datasheet IPsec throughput can be 2.5Gps.
https://www.paloguard.com.au/datasheets/pa-3200-series.pdf

The palo in my environment got 1 Gig interface (internet facing) and multiple ipsec tunnels are configured to communicate to different cloud providers without any rate limiting....so question is how to figure out what would be the actual throughput of the VPN tunnels ? as the physical interface speed is 1G maximum..

You have 1 physical interface with a maximum throughput of 1G.

Let's say you have 5 IPSec tunnels connecting through this 1G interface. The most the aggregate of these 5 tunnels will get is 1Gb.

1 tunnel might get 900Mb with 25Mb shared across the other 4. Or any variation you could think of totally 1Gb, but the total throughput of your tunnels will never exceed 1G.

topic Re: IPsec VPN throughput on 3220 in General Topics

IPsec VPN throughput on 3220

Re: IPsec VPN throughput on 3220